SC-100 Zero Trust & Threat Protection Solutions 4

Question 1

Which Microsoft solution provides Secure Access Service Edge (SASE) capabilities by combining network security and SD-WAN, aligning with Zero Trust network access principles?

Accepted Answer

Microsoft Entra Internet Access (Global Secure Access)

Answer

Microsoft Entra Internet Access (part of Global Secure Access) delivers identity-centric, Zero Trust network access controls aligned with SASE architecture principles.

Question 2

An organization wants to detect when an attacker uses a compromised service account to perform pass-the-ticket attacks in Active Directory. Which solution detects this?

Accepted Answer

Microsoft Defender for Identity

Answer

Microsoft Defender for Identity monitors Kerberos ticket activity on domain controllers to detect pass-the-ticket and other credential-based attacks.

Question 3

In the Zero Trust 'assume breach' mindset, which practice involves proactively searching for threats that evade automated detection controls?

Accepted Answer

Threat hunting

Answer

Threat hunting is a proactive security practice where analysts search for hidden threats within the environment assuming that attackers may already be present.

Question 4

A company must enforce Zero Trust for third-party contractors accessing internal web apps without requiring VPN. Which solution provides identity-based app access?

Accepted Answer

Microsoft Entra Private Access (Global Secure Access)

Answer

Microsoft Entra Private Access provides identity-aware, Zero Trust access to internal applications without requiring a traditional VPN tunnel.

Question 5

Which Microsoft Defender for Cloud feature continuously assesses Azure resources against security benchmarks and assigns a quantified security posture score?

Accepted Answer

Secure Score

Answer

Secure Score in Microsoft Defender for Cloud quantifies an organization's security posture and prioritizes recommendations to improve it.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Zero Trust & Threat Protection Solutions 4