Confidently Practice Online with Free SC-100 Exam Cram

Your on-premises network contains an e-commerce web app that was developed in Angular and

Node.js. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The

solution architecture team proposes the following architecture as an Azure landing zone. 

You need to provide recommendations to secure the connection between the web app and the

database. The solution must follow the Zero Trust model.

Solution: You recommend implementing Azure Front Door with Azure Web Application Firewall

(WAF).

Does this meet the goal? 

You are designing a security strategy for providing access to Azure App Service web apps through an

Azure Front Door instance.

You need to recommend a solution to ensure that the web apps only allow access through the Front

Door instance.

Solution: You recommend access restrictions that allow traffic from the Front Door service tags.

Does this meet the goal? 

Your company has a hybrid cloud infrastructure.

The company plans to hire several temporary employees within a brief period. The temporary

employees will need to access applications and data on the company' premises network.

The company's security policy prevents the use of personal devices for accessing company data and

applications.

You need to recommend a solution to provide the temporary employee with access to company

resources. The solution must be able to scale on demand.

What should you include in the recommendation? 

You are designing a security strategy for providing access to Azure App Service web apps through an

Azure Front Door instance.

You need to recommend a solution to ensure that the web apps only allow access through the Front

Door instance.

Solution: You recommend configuring gateway-required virtual network integration.

Does this meet the goal? 

You have an Azure AD tenant that contains 10 Windows 11 devices and two groups named Group1

and Group2. The Windows 11 devices are joined to the Azure AD tenant and are managed by using

Microsoft Intune.

You are designing a privileged access strategy based on the rapid modernization plan (RaMP). The

strategy will include the following configurations:

Each user in Group1 will be assigned a Windows 11 device that will be configured as a privileged

access device.

The Security Administrator role will be mapped to the privileged access security level.

The users in Group1 will be assigned the Security Administrator role.

The users in Group2 will manage the privileged access devices.

You need to configure the local Administrators group for each privileged access device. The solution

must follow the principle of least privilege.

What should you include in the solution?