A company issues corporate-owned Windows tablets to field workers. The tablets access cloud apps and store sensitive data. The security team requires that devices be encrypted, have a PIN, and only run approved apps. They also need to be able to remotely wipe a lost device. What should you configure?

Enroll the tablets in Microsoft Intune and configure device compliance policies, app protection policies, and remote wipe.

Deploy a Group Policy to require BitLocker and a PIN, and use a third-party MDM for remote wipe.

Configure Azure AD conditional access to require MFA and block non-compliant devices.

Use Windows Information Protection (WIP) to prevent data leakage and rely on BitLocker for encryption.

Which mobile device security control is specifically designed to prevent unauthorized access to a device by requiring a PIN or biometric verification?

Certificate-based authentication

A security architect is defining server security requirements for a hybrid environment that includes Windows Server, Linux, and legacy Unix systems. Which requirement is essential for all server platforms to ensure a consistent security posture?

Deploying the same antivirus agent to all servers

Configuring all servers to use the same local administrator password

Enabling Windows Defender Firewall on every server

Implementing a centralized patch management solution that supports all operating systems

Microsoft Certified:Cybersecurity Architect Expert

Domain 3Objective 2

Specify Requirements for Securing Server and Client Endpoints SC-100 Practice Questions (Page 8)

Part of the Design security solutions for infrastructure domain, which accounts for 25–30% of the SC-100 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–24 in this domain), expect 3–6 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

7concepts

25–30%of the exam

Questions 36–38

36application · medium
A company issues corporate-owned Windows tablets to field workers. The tablets access cloud apps and store sensitive data. The security team requires that devices be encrypted, have a PIN, and only run approved apps. They also need to be able to remotely wipe a lost device. What should you configure?
Select an answer first
37foundation · easy
Which mobile device security control is specifically designed to prevent unauthorized access to a device by requiring a PIN or biometric verification?
Select an answer first
38foundation · easy
A security architect is defining server security requirements for a hybrid environment that includes Windows Server, Linux, and legacy Unix systems. Which requirement is essential for all server platforms to ensure a consistent security posture?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SC-100

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-100” is a trademark of its owner, used for identification only.

Specify Requirements for Securing Server and Client Endpoints SC-100 Practice Questions (Page 8)

Questions 36–38

Which mobile device security control is specifically designed to prevent unauthorized access to a device by requiring a PIN or biometric verification?

A security architect is defining server security requirements for a hybrid environment that includes Windows Server, Linux, and legacy Unix systems. Which requirement is essential for all server platforms to ensure a consistent security posture?

Keep studying — Design security solutions for infrastructure