How many Select Two (Multi-Select) Questions questions are on this page?

This page has 20 Select Two (Multi-Select) Questions scenario questions for the SC-100 exam, each with detailed explanations and wrong-answer analysis.

How should I approach SC-100 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Microsoft Cybersecurity Architect questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise Microsoft Cybersecurity Architect practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

SC-100

exam code

Microsoft

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummulti select

Full question →

A company is implementing a Zero Trust identity strategy. They want to ensure that only compliant and managed devices can access corporate resources. Which THREE components should they include in their solution? (Choose three.)

A
Microsoft Intune for device management and compliance policies
Intune manages device compliance and enforces policies.
B
Azure AD device registration
Device registration in Azure AD is needed for device identity.
C
Azure AD Conditional Access policies
Conditional Access can require compliant devices for access.
D
Azure AD Application Proxy
Why wrong: Application Proxy is for publishing on-premises apps, not device compliance.
E
Azure AD B2B collaboration
Why wrong: B2B is for external user identities, not device management.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related SC-100 topic practice pages

Design solutions that align with security best practices and priorities practice questions

Design security operations, identity, and compliance capabilities practice questions

Design security solutions for infrastructure practice questions

Design a Zero Trust strategy and architecture practice questions

Design security solutions for applications and data practice questions

Evaluate GRC and security operations strategies practice questions

Design security for infrastructure practice questions

Design a strategy for data and applications practice questions

Recommend security best practices and priorities practice questions

SC-100 fundamentals practice questions

SC-100 scenario practice questions

SC-100 troubleshooting practice questions

Practice scenarios

A company is implementing a Zero Trust identity strategy. They want to ensure that only compliant and managed devices can access corporate resources. Which THREE components should they include in their solution? (Choose three.)

A company is designing a Zero Trust security posture for their Azure environment. They need to assess and improve their security posture. Which TWO actions should they take? (Choose two.)

A large enterprise is implementing Microsoft Defender for Cloud to improve their security posture. Which TWO actions should they take to prioritize and remediate security recommendations effectively? (Choose two.)

A company has a Microsoft Sentinel workspace that ingests data from multiple sources. The SOC team wants to improve the efficiency of investigating incidents by using UEBA capabilities. Which two actions should the team take to enable and configure UEBA in Sentinel?

A company stores sensitive data in Azure Blob Storage. They want to prevent data exfiltration by blocking public access and restricting network access to only their on-premises data center via VPN. Which two features should they use?

A company uses Microsoft Defender for Cloud to assess compliance with Azure Security Benchmark (ASB). The security team wants to ensure that all recommendations are being followed. Which three actions should the team take to manage and remediate recommendations effectively?

Which TWO actions should you take to secure an Azure Kubernetes Service (AKS) cluster?

Which THREE components are required to implement a secure hybrid network with Azure using a site-to-site VPN?

A company uses Azure Storage for sensitive data. They need to ensure that data is encrypted at rest and that encryption keys are managed by the customer (Customer-Managed Keys). Which THREE actions are required?

A company is designing a data classification strategy for their Azure environment. They need to identify sensitive data stored in Azure SQL Database. Which TWO solutions should they consider?

A company is designing a secure DevOps pipeline for deploying Azure App Service applications. They need to ensure that secrets are not exposed in source code. Which TWO practices should they implement?

Which TWO of the following are best practices for securing Azure Kubernetes Service (AKS)?

Which THREE of the following are key components of a defense-in-depth strategy?

A company wants to improve their security posture by using Microsoft Defender for Cloud. Which TWO of the following are features of Defender for Cloud that help with governance and compliance?

A company uses Microsoft Sentinel for threat detection. They want to use User and Entity Behavior Analytics (UEBA) to detect anomalies. Which THREE of the following are key components of UEBA in Sentinel?

A company is designing a security operations center (SOC) using Microsoft Sentinel. Which TWO of the following are best practices for managing incident response in Sentinel?

A company is implementing a Zero Trust security model using Microsoft 365 Defender. Which THREE of the following are key principles they should follow?

Which THREE of the following are best practices for securing Azure Kubernetes Service (AKS)?

Which TWO of the following are true about Azure Policy initiatives?

Which TWO of the following are valid methods to secure traffic between on-premises and Azure?