Microsoft SC-100 actual dump : Microsoft Cybersecurity Architect

You are designing a ransomware mitigation strategy
You perform a ransomware risk assessment and identify business-critical assets.
You need to recommend a solution to mitigate ransomware threats. The solution must follow Microsoft security best practices.
Which two actions should you include in the recommendation? Each correct answer presents a complete solution.
NOTE: Each correct answer is worth one point.

• A. Implement immutable, offline backups that have restricted access and test restore procedures regularly.
• B. Use extended patching cycles to reduce the risk of update-related service disruptions.
• C. Enable firewall logging for auditing, without restricting inbound or outbound traffic.
• D. Deploy Privileged Identity Management (PIM) that uses just-in-time (JIT) access and approval workflows.

You have a Microsoft 365 subscription that contains 500 users. Each user is assigned a Microsoft 365 E5 license and uses a Windows device. Microsoft Purview data loss prevention (DLP) policies are applied to Microsoft Exchange Online email and SharePoint Online sites. You plan to monitor the usage of third-party generative Al apps by using Microsoft Purview Data Security Posture Management for Al (DSPM for Al).
What should you do first?

• A. License all the users for Microsoft 365 Copilot.
• B. Onboard all endpoint devices to Microsoft Purview.
• C. Configure Microsoft Purview data connectors for the generative Al apps.
• D. Enable Microsoft Purview insider risk management for all the users.

You have a Microsoft 365 subscription. The subscription contains Windows 11 devices that are protected by using Microsoft Defender XDR You need to block access to file sharing sites from the devices. The solution must meet the following requirements:
* Identify file sharing sites to which users have connected during the last 90 days.
* Prevent the users from connecting to the identified file sharing sites.
* Minimize administrative effort.
What should you use to identify the file sharing sites, and which Microsoft Defender service should you use to prevent the users from connecting to the sites? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription that uses Microsoft Exchange Online.
You need to recommend a solution to prevent malicious actors from impersonating the email addresses of internal senders.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You receive a security alert in Microsoft Defender for Cloud as shown in the exhibit. (Click the Exhibit tab.)

After remediating the threat which policy definition should you assign to prevent the threat from reoccurring?

• A. Storage account public access should be disallowed
• B. Storage account keys should not be expired
• C. Storage accounts should prevent shared key access
• D. Azure Key Vault Managed HSM should have purge protection enabled