Microsoft Exam SC-100 Topic 9 Question 32 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 32
Topic #: 9

[All SC-100 Questions]

You receive a security alert in Microsoft Defender for Cloud as shown in the exhibit. (Click the Exhibit tab.)

After remediating the threat which policy definition should you assign to prevent the threat from reoccurring?

AStorage account public access should be disallowed

BAzure Key Vault Managed HSM should have purge protection enabled

CStorage accounts should prevent shared key access

DStorage account keys should not be expired

Show Suggested Answer

Suggested Answer: A, D

by Cecil at Dec 09, 2023, 01:42 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Thaddeus

1 months ago

Haha, you guys are off the mark. The answer is clearly B - enabling purge protection on the Azure Key Vault Managed HSM. That's the only way to really lock down the security of this system.

upvoted 0 times

...

Lelia

1 months ago

Ha! I bet the answer is A. Disallowing public access to the storage account seems like the most obvious solution here. What do you think, Candidate D?

upvoted 0 times

Minna

7 days ago

I think the answer might be C. Preventing shared key access could also help prevent the threat from reoccurring.

upvoted 0 times

...

Felix

10 days ago

I agree with you, User A. Disallowing public access to the storage account is a good security measure.

upvoted 0 times

...

Peggy

1 months ago

Wait, is this a trick question? I'm pretty sure the answer is D - storage account keys should not be expired. That would be the best way to prevent this threat from reoccurring.

upvoted 0 times

Zoila

11 days ago

C) Storage accounts should prevent shared key access

upvoted 0 times

...

Lashanda

17 days ago

B) Azure Key Vault Managed HSM should have purge protection enabled

upvoted 0 times

...

Lenna

20 days ago

A) Storage account public access should be disallowed

upvoted 0 times

...

Jesusita

2 months ago

Hmm, this looks like a tricky one. I think the correct answer is C, since the security alert is about preventing shared key access to the storage account.

upvoted 0 times

Krystal

19 days ago

User 3: Yes, I think C is the right choice to prevent the threat from reoccurring.

upvoted 0 times

...

Henriette

19 days ago

I'm not sure, but I think option D could also help by ensuring the storage account keys are not expired.

upvoted 0 times

...

Lisha

21 days ago

I think option A might also be a good choice to disallow public access to the storage account.

upvoted 0 times

...

Fernanda

25 days ago

User 2: I agree, that makes sense. Shared key access should be prevented to enhance security.

upvoted 0 times

...

Mitzie

25 days ago

I agree with you, option C seems like the best choice to prevent shared key access.

upvoted 0 times

...

Ernest

27 days ago

User 1: I think the correct answer is C, since the security alert is about preventing shared key access to the storage account.

upvoted 0 times

...

Shayne

2 months ago

Hmm, that makes sense too. We should consider all options before making a decision.

upvoted 0 times

...

Katie

2 months ago

I disagree, I believe the correct answer is C) Storage accounts should prevent shared key access.

upvoted 0 times

...

Shayne

2 months ago

I think the answer is A) Storage account public access should be disallowed.

upvoted 0 times

...

Rusty

2 months ago

Hmm, that makes sense too. We should consider all options before making a decision.

upvoted 0 times

...

Pa

3 months ago

I disagree, I believe the correct answer is C) Storage accounts should prevent shared key access.

upvoted 0 times

...

Rusty

3 months ago

I think the answer is A) Storage account public access should be disallowed.

upvoted 0 times

...