Microsoft Exam SC-100 Topic 10 Question 33 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 33
Topic #: 10

You have an on-premises network and a Microsoft 365 subscription.

You are designing a Zero Trust security strategy.

Which two security controls should you include as part of the Zero Trust solution? Each correct answer part of the solution.

NOTE: Each correct answer is worth one point.

ABlock sign-attempts from unknown location.

BAlways allow connections from the on-premises network.

CDisable passwordless sign-in for sensitive account.

DBlock sign-in attempts from noncompliant devices.

Show Suggested Answer

Suggested Answer: A, D

by Jerry at Dec 22, 2023, 05:12 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Berry

8 months ago

Haha, 'always allow connections from the on-premises network' - that's like putting up a big 'WELCOME' sign for hackers. Definitely not a Zero Trust approach!

upvoted 0 times

...

Raina

8 months ago

Agreed. And disabling passwordless sign-in for sensitive accounts is also crucial. We don't want to leave those high-value targets vulnerable.

upvoted 0 times

...

Brendan

8 months ago

Definitely. Blocking sign-in attempts from unknown locations and non-compliant devices seems like a no-brainer. We don't want to give attackers an easy way in.

upvoted 0 times

...

Hmm, this is an interesting question. I think the key to a successful Zero Trust strategy is to verify user identity and device health before granting access, regardless of where the user is connecting from.

upvoted 0 times

Mabel

8 months ago

User 4

upvoted 0 times

...

Marti

8 months ago

User 3

upvoted 0 times

...

Robt

8 months ago

User 2

upvoted 0 times

...

Mabel

8 months ago

User 1

upvoted 0 times

...

Microsoft Exam SC-100 Topic 10 Question 33 Discussion

Contribute your Thoughts:

Berry

Raina

Brendan

Corrina

Mabel

Marti

Robt

Mabel