When specifying security requirements for servers, which control is specifically important for protecting sensitive data stored on the server?

Endpoint detection and response (EDR)

Multi-factor authentication (MFA)

A hospital is deploying new Windows 11 workstations for clinical staff. The security team requires a hardened configuration that aligns with industry standards and can be automatically applied and updated. What should you use?

Microsoft Defender for Endpoint only

Microsoft Intune security baselines

Group Policy with custom administrative templates

Manual hardening checklist applied by IT staff

A hospital deploys IoT medical devices (infusion pumps, monitors) that are connected to the network. These devices are critical and cannot be patched frequently. The security team needs to detect anomalies and potential attacks on these devices without affecting their availability. What should you recommend?

Configure a traditional network firewall to block all inbound traffic to the medical devices.

Install Microsoft Defender for Endpoint on each medical device.

Use Azure Security Center's IoT security module on each device.

Deploy Microsoft Defender for IoT with passive monitoring on the network segment where the medical devices are connected.

When specifying security requirements for IoT devices, which factor is often a primary constraint that influences the choice of security controls?

Limited processing power and memory

Ability to run full antivirus software

High network bandwidth availability

Which Microsoft tool or service can be used to apply security baselines to Windows client endpoints?

Microsoft Defender for Cloud Apps

Azure Active Directory (now Microsoft Entra ID)

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 2

Specify Requirements for Securing Server and Client Endpoints SC-100 Practice Questions (Page 5)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

7concepts

25–30%of the exam

Questions 21–25

21foundation · easy
When specifying security requirements for servers, which control is specifically important for protecting sensitive data stored on the server?
Select an answer first
22application · medium
A hospital is deploying new Windows 11 workstations for clinical staff. The security team requires a hardened configuration that aligns with industry standards and can be automatically applied and updated. What should you use?
Select an answer first
23application · medium
A hospital deploys IoT medical devices (infusion pumps, monitors) that are connected to the network. These devices are critical and cannot be patched frequently. The security team needs to detect anomalies and potential attacks on these devices without affecting their availability. What should you recommend?
Select an answer first
24foundation · easy
When specifying security requirements for IoT devices, which factor is often a primary constraint that influences the choice of security controls?
Select an answer first
25foundation · easy
Which Microsoft tool or service can be used to apply security baselines to Windows client endpoints?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.