What is the primary purpose of a security baseline for client endpoints?

To define the maximum performance settings for endpoints

To replace the need for continuous monitoring

To guarantee that no security incidents will occur

To provide a consistent set of security configurations across all devices

A company wants to harden its Windows 11 endpoints. They plan to enable memory integrity, disable legacy authentication protocols, and ensure that local admin accounts are unique and rotated. What should you do?

Apply a local Group Policy to enable memory integrity and set a common local admin password.

Use Microsoft Defender for Endpoint to enable memory integrity and manage local admin passwords.

Use Microsoft Intune security baselines to enable memory integrity and disable legacy authentication, and configure Windows LAPS.

Deploy a PowerShell script that enables memory integrity and creates a new local admin account with a static password.

Your organization has 1,000 Windows servers and workstations that use the same local administrator password. The security team wants to rotate local admin passwords automatically and store them securely in Azure AD. What should you implement?

Windows LAPS with Azure AD-backed storage

Microsoft Intune device configuration policy with a custom script to change passwords

Azure Key Vault with manual password updates

Group Policy to set a static local admin password

Which endpoint hardening control is used to prevent unauthorized code from executing on a client endpoint?

Application control (e.g., Windows Defender Application Control)

Which security control is particularly important for IoT devices that are deployed in the field and may be physically accessible to attackers?

Tamper-resistant hardware and secure boot

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 2

Specify Requirements for Securing Server and Client Endpoints SC-100 Practice Questions (Page 7)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

7concepts

25–30%of the exam

Questions 31–35

31foundation · easy
What is the primary purpose of a security baseline for client endpoints?
Select an answer first
32application · medium
A company wants to harden its Windows 11 endpoints. They plan to enable memory integrity, disable legacy authentication protocols, and ensure that local admin accounts are unique and rotated. What should you do?
Select an answer first
33application · medium
Your organization has 1,000 Windows servers and workstations that use the same local administrator password. The security team wants to rotate local admin passwords automatically and store them securely in Azure AD. What should you implement?
Select an answer first
34foundation · easy
Which endpoint hardening control is used to prevent unauthorized code from executing on a client endpoint?
Select an answer first
35foundation · easy
Which security control is particularly important for IoT devices that are deployed in the field and may be physically accessible to attackers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.