SC-100 Zero Trust & Threat Protection Solutions 3

Question 1

Which Azure AD feature detects risky sign-ins and user behaviors such as impossible travel and leaked credentials, supporting Zero Trust identity verification?

Accepted Answer

Azure AD Identity Protection

Answer

Azure AD Identity Protection uses Microsoft's threat intelligence to detect risky users and sign-ins, triggering risk-based Conditional Access policies.

Question 2

A company must protect its Azure workloads from network-layer DDoS attacks. Which service provides adaptive tuning and attack analytics at the platform level?

Accepted Answer

Azure DDoS Protection Standard

Answer

Azure DDoS Protection Standard provides adaptive tuning, attack telemetry, and guaranteed SLA-backed mitigation for volumetric and protocol DDoS attacks on Azure resources.

Question 3

In a Zero Trust architecture, which concept ensures users and workloads are granted only the permissions needed to perform their current task?

Accepted Answer

Use least privilege access

Answer

Least privilege access, one of Zero Trust's core principles, limits permissions to only what is necessary, reducing the blast radius if credentials are compromised.

Question 4

Which Microsoft Sentinel feature uses built-in ML to detect multi-stage attacks by correlating low-fidelity alerts into high-confidence incidents?

Accepted Answer

Fusion detection

Answer

Microsoft Sentinel's Fusion engine uses ML to correlate multiple low-severity alerts across data sources into high-fidelity multi-stage attack incidents.

Question 5

An architect needs to protect privileged admin accounts from lateral movement. Which Zero Trust control specifically limits the window during which elevated permissions are active?

Accepted Answer

Azure AD Privileged Identity Management (PIM) with just-in-time access

Answer

PIM with just-in-time access grants elevated permissions only when needed and for a limited time, minimizing the exposure window for privileged accounts.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Zero Trust & Threat Protection Solutions 3