When integrating security for Azure AI services, which practice is essential to protect sensitive data used in AI models?

Using a single shared API key for all AI services to simplify management.

Disabling authentication on AI service endpoints for easier access.

Storing AI model training data in a public blob container for easy access.

Using Azure Key Vault to store and manage secrets, keys, and certificates used by AI services.

A company deploys IoT devices that send telemetry to Azure IoT Hub. The devices are physically accessible to the public and can be tampered with. The security team wants to ensure that only authorized devices can connect and that the telemetry data is not altered in transit. Which two security measures should you implement? (Select all that apply.)

Use X.509 certificates for device authentication and enable TLS for all device-to-hub communication.

Register each device with a unique device ID and use only the device ID for authentication.

Enable Azure Defender for IoT and use device twins to monitor device state.

Use shared access signature (SAS) tokens for device authentication and rely on the IoT Hub's built-in encryption.

Which Azure service provides a managed Kubernetes orchestration platform with integrated security features such as Azure AD integration and network policies?

Azure Container Instances (ACI)

A company hosts a public-facing web application on a set of Windows Server VMs behind an Azure Load Balancer. The security team wants to apply a security baseline that includes regular patching and protection against web application attacks. Which combination of controls should you implement?

Deploy Azure Bastion for RDP access and enable diagnostic logs for the load balancer.

Use Azure Security Center's just-in-time (JIT) VM access and rely on the load balancer's built-in security features.

Configure NSGs to allow only HTTPS traffic and enable Azure Defender for Servers.

Enable Azure Update Management for the VMs and place an Azure Web Application Firewall (WAF) in front of the load balancer.

Which Azure service provides a managed Web Application Firewall (WAF) that can be integrated with Azure Front Door or Application Gateway?

Azure WAF (Web Application Firewall)

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 3

Specify Requirements for Securing SaaS, PaaS, and IaaS Services SC-100 Practice Questions (Page 4)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

25–30%of the exam

Questions 16–20

16foundation · easy
When integrating security for Azure AI services, which practice is essential to protect sensitive data used in AI models?
Select an answer first
17application · medium
A company deploys IoT devices that send telemetry to Azure IoT Hub. The devices are physically accessible to the public and can be tampered with. The security team wants to ensure that only authorized devices can connect and that the telemetry data is not altered in transit. Which two security measures should you implement? (Select all that apply.)
Select an answer first
18foundation · easy
Which Azure service provides a managed Kubernetes orchestration platform with integrated security features such as Azure AD integration and network policies?
Select an answer first
19application · medium
A company hosts a public-facing web application on a set of Windows Server VMs behind an Azure Load Balancer. The security team wants to apply a security baseline that includes regular patching and protection against web application attacks. Which combination of controls should you implement?
Select an answer first
20foundation · easy
Which Azure service provides a managed Web Application Firewall (WAF) that can be integrated with Azure Front Door or Application Gateway?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.