SC-100 Security Strategy & Risk Management 4

Question 1

A security architect is evaluating Microsoft Defender for Cloud's secure score. What does a higher secure score primarily indicate?

Accepted Answer

A greater percentage of security recommendations have been implemented across monitored resources

Answer

Microsoft Defender for Cloud's secure score reflects the percentage of security recommendations that have been implemented, providing a point-in-time view of security posture.

Question 2

Which approach to privileged access strategy aligns with Microsoft's recommended 'tiered administration model' for securing privileged access?

Accepted Answer

Separating administrative accounts into tiers based on the sensitivity of systems managed, with no cross-tier access

Answer

Microsoft's tiered administration model separates Tier 0 (identity/domain), Tier 1 (servers/apps), and Tier 2 (endpoints) with strict boundaries to contain lateral movement from compromise.

Question 3

An organization is planning its security strategy for insider threat risk. Which combination of controls best addresses both malicious and accidental insider threats?

Accepted Answer

User and Entity Behavior Analytics (UEBA) combined with data loss prevention policies and least-privilege access

Answer

UEBA detects anomalous behavior patterns for malicious insiders while DLP prevents accidental data loss, and least privilege limits the potential impact of both threat types.

Question 4

When applying the Microsoft Cloud Adoption Framework (CAF) security methodology, which phase establishes security baselines and hardening standards for cloud workloads?

Accepted Answer

Ready phase, where landing zone environments are built with security guardrails

Answer

The CAF Ready phase includes implementing security baselines and hardening standards within the landing zone before workloads are deployed.

Question 5

A financial services organization needs to implement a cyber resilience strategy. Which capability is MOST critical to achieving operational resilience during an active ransomware attack?

Accepted Answer

Maintaining tested offline backups combined with documented and rehearsed incident response playbooks

Answer

Tested offline backups ensure data recovery is possible even if all connected systems are encrypted, and rehearsed playbooks enable rapid coordinated response to minimize business impact.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Security Strategy & Risk Management 4