Microsoft Exam SC-100 Topic 2 Question 28 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 28
Topic #: 2

You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled.

The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications on Windows Server 2019.

You need to recommend a solution to ensure that only authorized applications can run on the virtual machines. If an unauthorized application attempts to run or be installed, the application must be blocked automatically until an administrator authorizes the application.

Which security control should you recommend?

AAzure Active Directory (Azure AD) Conditional Access App Control policies

BOAuth app policies in Microsoft Defender for Cloud Apps

Capp protection policies in Microsoft Endpoint Manager

Dapplication control policies in Microsoft Defender for Endpoint

Show Suggested Answer

Suggested Answer: C

by Linn at Aug 29, 2023, 12:01 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leonora

6 hours ago

Hmm, I'm leaning towards D. app protection policies in Microsoft Endpoint Manager. Seems like a comprehensive solution to manage and secure the applications across the VMs.

upvoted 0 times

...

Suzan

7 days ago

I'm not sure about option B). I think option A) app discovery anomaly detection policies in Microsoft Defender for Cloud Apps might be a better choice. It could help us detect unauthorized applications more effectively.

upvoted 0 times

...

Yasuko

9 days ago

I agree with Kenneth. Option B) seems like the best choice to ensure only authorized applications can run on the virtual machines. It provides the control we need.

upvoted 0 times

...

Terina

10 days ago

I'd say C. Azure Security Benchmark compliance controls in Defender for Cloud. That way, we can ensure the VMs meet the security standards and prevent unauthorized apps.

upvoted 0 times

...

Karan

11 days ago

Definitely go with B. Adaptive application controls in Defender for Cloud. That's the perfect solution to control and monitor the authorized applications on the VMs.

upvoted 0 times

...

Kenneth

15 days ago

I think we should go with option B) adaptive application controls in Defender for Cloud. It sounds like it will help us control which applications can run on the virtual machines.

upvoted 0 times

...