SC-100 Zero Trust & Threat Protection Solutions 2

Question 1

An organization wants to enforce Zero Trust for all remote users accessing corporate apps. Which Microsoft solution provides continuous access evaluation (CAE) to revoke sessions in near real-time?

Accepted Answer

Azure Active Directory Conditional Access with CAE

Answer

Azure AD Conditional Access with CAE allows resource providers to revoke tokens near-instantly when risk conditions change, rather than waiting for token expiry.

Question 2

Which Microsoft Defender for Endpoint capability uses machine learning to detect advanced persistent threats that evade signature-based detection?

Accepted Answer

Endpoint detection and response (EDR)

Answer

EDR in Microsoft Defender for Endpoint uses behavioral analytics and ML to detect and investigate sophisticated threats beyond signature-based methods.

Question 3

A cybersecurity architect needs to segment a flat network to support Zero Trust principles. Which Azure service provides microsegmentation for workloads in Azure Virtual Networks?

Accepted Answer

Azure Network Security Groups (NSGs) with Application Security Groups

Answer

NSGs combined with Application Security Groups enable microsegmentation by controlling traffic flow at a granular workload level within Azure Virtual Networks.

Question 4

An architect is designing threat protection for Microsoft 365 email. Which feature in Microsoft Defender for Office 365 detonates suspicious attachments in a sandbox before delivery?

Accepted Answer

Safe Attachments

Answer

Safe Attachments in Defender for Office 365 opens email attachments in a virtual detonation environment to detect malware before delivery to the recipient.

Question 5

Under the Zero Trust model, which principle requires verifying that a device meets security posture requirements before granting access to corporate resources?

Accepted Answer

Verify explicitly — device health

Answer

Zero Trust's 'verify explicitly' pillar includes evaluating device compliance and health signals alongside user identity before granting access.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Zero Trust & Threat Protection Solutions 2