EN简体繁體日本語
ログイン
ホーム / Microsoft / SC-100
Microsoft · SC-100

SC-100 試験練習問題

Microsoft Cybersecurity Architect

SC-100 の PDF 練習問題。資料の言語は 英語です。購入はこの試験のみで、自動更新はありません。

試験概要

SC-100 は「Microsoft Cybersecurity Architect」の認定試験です。試験形式、時間、対応言語は以下をご確認ください。最新の出題範囲や受験条件は公式サイトをご参照ください。

試験コード
SC-100
公式の試験・資格名
Microsoft Cybersecurity Architect
試験形式
Proctored assessment; interactive items may be included
受験可能な言語
英語、日本語、簡体字中国語、韓国語、ドイツ語、フランス語、スペイン語、ポルトガル語（ブラジル）、繁体字中国語、イタリア語

公式試験の対応言語と練習問題ファイルの言語は異なります。試験の版と言語は公式の予約ページでご確認ください。

公式情報： 公式サイト
情報確認日：2026-10-20

対応言語

  • 英語
  • 簡体字中国語
購入前にお試し

最初の 20 問を無料プレビュー

全 342 問

題庫の元の順序で表示します。回答欄を開くと、正解と収録されている解説を確認できます。

問題の言語：英語。問題文・選択肢・正解・解説は元の題庫の言語で表示します。

免責事項：ExamPico の問題はすべてインターネット上の情報を整理したもので、学習参考用として提供しています。

問題 16

Question#16Topic1

A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription and an Azure subscription.
All on-premises servers in the perimeter network are prevented from connecting directly to the internet.
The customer recently recovered from a ransomware attack.
The customer plans to deploy Microsoft Sentinel.
You need to recommend solutions to meet the following requirements:
✑ Ensure that the security operations team can access the security logs and the operation logs.
✑ Ensure that the IT operations team can access only the operations logs, including the event logs of the servers in the perimeter network.
Which two solutions should you include in the recommendation? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

  1. A. a custom collector that uses the Log Analytics agent
  2. B. the Azure Monitor agent
  3. C. resource-based role-based access control (RBAC)
  4. D. Azure Active Directory (Azure AD) Conditional Access policies
正解と解説を表示

正解

BC

解説

Explanation:
A: You can collect data in custom log formats to Microsoft Sentinel with the Log Analytics agent.
Note: You can use the Log Analytics agent to collect data in text files of nonstandard formats from both Windows and Linux computers. Once collected, you can either parse the data into individual fields in your queries or extract the data during collection to individual fields.
You can connect your data sources to Microsoft Sentinel using custom log formats.
C: Microsoft Sentinel uses Azure role-based access control (Azure RBAC) to provide built-in roles that can be assigned to users, groups, and services in Azure.
Use Azure RBAC to create and assign roles within your security operations team to grant appropriate access to Microsoft Sentinel. The different roles give you fine-grained control over what Microsoft Sentinel users can see and do. Azure roles can be assigned in the Microsoft Sentinel workspace directly (see note below), or in a subscription or resource group that the workspace belongs to, which Microsoft Sentinel inherits.
Incorrect:
A: You can collect data in custom log formats to Microsoft Sentinel with the Log Analytics agent.
Note: You can use the Log Analytics agent to collect data in text files of nonstandard formats from both Windows and Linux computers. Once collected, you can either parse the data into individual fields in your queries or extract the data during collection to individual fields.
You can connect your data sources to Microsoft Sentinel using custom log formats.

Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview https://docs.microsoft.com/en-us/azure/sentinel/connect-custom-logs?tabs=DCG https://docs.microsoft.com/en-us/azure/sentinel/roles

問題 17

Question#17Topic1

Your company is developing a serverless application in Azure that will have the architecture shown in the following exhibit.
Question illustration
You need to recommend a solution to isolate the compute components on an Azure virtual network.
What should you include in the recommendation?

  1. A. Azure Active Directory (Azure AD) enterprise applications
  2. B. an Azure App Service Environment (ASE)
  3. C. Azure service endpoints
  4. D. an Azure Active Directory (Azure AD) application proxy
正解と解説を表示

正解

B

解説

Explanation:
The Azure App Service Environment v2 is an Azure App Service feature that provides a fully isolated and dedicated environment for securely running App Service apps at high scale. This capability can host your:

Windows web apps -

Linux web apps -

Docker containers -

Mobile apps -

Functions -
App Service environments (ASEs) are appropriate for application workloads that require:
Very high scale.
Isolation and secure network access.
High memory utilization.
Customers can create multiple ASEs within a single Azure region or across multiple Azure regions. This flexibility makes ASEs ideal for horizontally scaling stateless application tiers in support of high requests per second (RPS) workloads.

Reference:
https://docs.microsoft.com/en-us/azure/app-service/environment/intro

問題 18

Question#18Topic1

HOTSPOT
-

You are planning the security levels for a security access strategy.

You need to identify which job roles to configure at which security levels. The solution must meet security best practices of the Microsoft Cybersecurity Reference Architectures (MCRA).

Which security level should you configure for each job role? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question illustration

正解と解説を表示

正解

CAB

解説

Explanation:
1. Specialized security
2. Enterprise security
3. Privileged security
https://learn.microsoft.com/en-us/security/privileged-access-workstations/privileged-access-security-levels#specialized
Specialized security provides increased security controls for roles with an elevated business impact (if compromised by an attacker or malicious insider).
Specialized roles typically include:
- Developers of business critical systems.
https://learn.microsoft.com/en-us/security/privileged-access-workstations/privileged-access-security-levels#enterprise
Enterprise security is suitable for all enterprise users and productivity scenarios. In the progression of the rapid modernization plan, enterprise also serves as the starting point for specialized and privileged access as they progressively build on the security controls in enterprise security.

問題 19

Question#19Topic1

Your company plans to apply the Zero Trust Rapid Modernization Plan (RaMP) to its IT environment.

You need to recommend the top three modernization areas to prioritize as part of the plan.

Which three areas should you recommend based on RaMP? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  1. A. data, compliance, and governance
  2. B. infrastructure and development
  3. C. user access and productivity
  4. D. operational technology (OT) and IoT
  5. E. modern security operations
正解と解説を表示

正解

ACE

解説

Explanation:
A. data, compliance, and governance.
C. user access and productivity.
E. modern security operations.
Reference:
https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-ramp-overview

問題 20

Question#20Topic1

HOTSPOT
-

For a Microsoft cloud environment, you are designing a security architecture based on the Microsoft Cybersecurity Reference Architectures (MCRA).

You need to protect against the following external threats of an attack chain:

•An attacker attempts to exfiltrate data to external websites.
•An attacker attempts lateral movement across domain-joined computers.

What should you include in the recommendation for each threat? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question illustration

正解と解説を表示

正解

AB

解説

Explanation:
1. Microsoft Defender for Cloud Apps.
2. Microsoft Defender for Identity.
https://learn.microsoft.com/en-us/defender-for-identity/what-is
Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

ダウンロードと個人利用

  • この試験の練習問題を、1・3・6・12か月のダウンロード期間で個別に購入できます。
  • お支払い確認後、作成状況がマイライブラリに表示されます。PDF の準備完了時にメールでお知らせします。
  • 期間内は再ダウンロードできます。期限後は新しい期間をご購入ください。
  • PDF は個人学習専用です。転売や公開共有は禁止されています。
  • 期限後も端末に保存済みのファイルを遠隔で削除することはありません。
資格試験の選び方