SC-100 Zero Trust & Threat Protection Solutions 5

Question 1

Which Microsoft capability allows security operations teams to automate threat response workflows triggered by Microsoft Sentinel alerts, such as disabling a compromised account?

Accepted Answer

Microsoft Sentinel Playbooks (Azure Logic Apps)

Answer

Microsoft Sentinel Playbooks are built on Azure Logic Apps and enable automated, codified responses to security alerts, such as blocking users or isolating devices.

Question 2

A Zero Trust architecture requires that all data in transit between Azure services and on-premises systems be encrypted. Which protocol is recommended for securing hybrid connectivity?

Accepted Answer

IPsec/IKEv2 or TLS 1.2/1.3

Answer

IPsec/IKEv2 (for VPN Gateway) and TLS 1.2/1.3 (for application traffic) are the recommended encryption protocols for securing hybrid network connections in Zero Trust designs.

Question 3

An organization needs to evaluate the blast radius of a potential identity compromise. Which Microsoft tool visualizes lateral movement paths showing how an attacker could escalate from a standard user to domain admin?

Accepted Answer

Microsoft Defender for Identity Lateral Movement Paths

Answer

Microsoft Defender for Identity's Lateral Movement Paths feature graphically shows how an attacker could chain compromised accounts and credentials to reach sensitive targets.

Question 4

Which Microsoft Defender for Cloud plan provides threat detection specifically for containers and Kubernetes clusters running in Azure, AWS, and GCP?

Accepted Answer

Defender for Containers

Answer

Microsoft Defender for Containers provides runtime threat detection, vulnerability assessments, and security hardening for containerized workloads across multicloud Kubernetes environments.

Question 5

In a Zero Trust design, which approach to network access replaces traditional VPN by granting access per application rather than per network segment?

Accepted Answer

Zero Trust Network Access (ZTNA)

Answer

ZTNA grants access to specific applications based on identity and device posture rather than placing users on a trusted network segment as traditional VPNs do.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Zero Trust & Threat Protection Solutions 5