Skip to main content

SC-100 Microsoft Cybersecurity Architect

  • Microsoft
  • 5 free sample questions

About this exam

SC-100 is the Microsoft exam Microsoft Cybersecurity Architect. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
SC-100
Vendor
Microsoft
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for SC-100.

Question 1 (choose 2)

You need to recommend a solution to resolve the virtual machine issue. What should you include in the recommendation? (Choose Two)

  1. Option A:
    Onboard the virtual machines to Microsoft Defender for Endpoint.
  2. Option B:
    Onboard the virtual machines to Azure Arc.
  3. Option C:
    Create a device compliance policy in Microsoft Endpoint Manager.
  4. Option D:
    Enable the Qualys scanner in Defender for Cloud.
Show answer and explanation

Correct answer: A, D

A. Onboard the virtual machines to Microsoft Defender for Endpoint ✅
D. Enable the Qualys scanner in Defender for Cloud ✅
Explanation
To resolve security and vulnerability issues on virtual machines:
  • A. Onboard the virtual machines to Microsoft Defender for Endpoint ✅
  • This provides endpoint detection and response (EDR), threat protection, and security monitoring for the VMs.
  • D. Enable the Qualys scanner in Defender for Cloud ✅
  • Qualys performs vulnerability assessments and identifies missing patches, security misconfigurations, and other vulnerabilities.
Why the others are incorrect
  • B. Onboard the virtual machines to Azure Arc ❌
  • Azure Arc enables management of hybrid and multi-cloud resources but does not directly address vulnerability assessment or endpoint protection.
  • C. Create a device compliance policy in Microsoft Endpoint Manager ❌
  • Compliance policies are primarily for managed user devices and do not resolve VM vulnerability assessment issues.
✅ Final Answer: A and D.

Question 2

You need to recommend a solution to scan the application code. The solution must meet the application development requirements. What should you include in the recommendation?

  1. Option A:
    Azure Key Vault
  2. Option B:
    GitHub Advanced Security
  3. Option C:
     Application Insights in Azure Monitor
  4. Option D:
    Azure DevTest Labs
Show answer and explanation

Correct answer: B

The requirement is to scan application code and meet application development security requirements.
GitHub Advanced Security provides:
  • Code scanning to detect security vulnerabilities in source code.
  • Secret scanning to identify exposed credentials, keys, and tokens.
  • Dependency scanning to find vulnerable open-source packages.
  • Security analysis integrated directly into the development workflow.
Why the others are incorrect
  • A. Azure Key Vault ❌
  • Stores and manages secrets, certificates, and encryption keys; it does not scan code.
  • C. Application Insights in Azure Monitor ❌
  • Monitors application performance and usage after deployment.
  • D. Azure DevTest Labs ❌
  • Provides development and testing environments but does not perform code security scanning.
✅ Correct Answer: B. GitHub Advanced Security.
See all 5 free sample questions