Microsoft Exam SC-100 Topic 3 Question 64 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 64
Topic #: 3

You need to recommend a solution for securing the landing zones. The solution must meet the landing zone requirements and the business requirements.

What should you configure for each landing zone?

AAzure DDoS Protection Standard

Ban Azure Private DNS zone

CMicrosoft Defender for Cloud

Dan ExpressRoute gateway

Show Suggested Answer

Suggested Answer: D

One of the stipulations is to meet the business requirements of minimizing costs. ExpressRoute is expensive.

Given the landing zone requirements of

1) 'Use a DNS namespace of litware.com'

2) 'Ensure that the Azure virtual machines in each landing zone communicate with Azure App Service web apps in the same zone over the Microsoft backbone network, rather than over public endpoints'

by Blythe at Apr 07, 2025, 11:26 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Beatriz

5 days ago

I think we should configure Azure DDoS Protection Standard for each landing zone.

upvoted 0 times

...

Cortney

7 days ago

I think option B is the way to go. An Azure Private DNS zone will help keep the landing zones secure and private.

upvoted 0 times

...

Goldie

14 days ago

Option C looks good to me. Microsoft Defender for Cloud can provide comprehensive security for the landing zones.

upvoted 0 times

...