MICROSOFT · SC-100

Microsoft SC-100 Exam Practice Questions

360 questionsInstant PDF downloadUpdated September 2026

US$39

Try 10 questions free

Card, Apple Pay or Google Pay. Your PDF is sent by email as soon as you check out.

Pass or your money backFail the exam after using this pack and we refund it. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 360 questions in this pack

Question 1

Your company has a Microsoft 365 ES subscription.

The Chief Compliance Officer plans to enhance privacy management in the working environment.

You need to recommend a solution to enhance the privacy management. The solution must meet the following requirements:

• Identify unused personal data and empower users to make smart data handling decisions.

• Provide users with notifications and guidance when a user sends personal data in Microsoft Teams.

• Provide users with recommendations to mitigate privacy risks.

What should you include in the recommendation?

  1. communication compliance in insider risk management
  2. Microsoft Viva Insights
  3. Privacy Risk Management in Microsoft Priva
  4. Advanced eDiscovery
Show answer and explanation

Correct answer: C. Privacy Risk Management in Microsoft Priva

Microsoft Priva's Privacy Risk Management feature is specifically designed to identify unused personal data, provide users with notifications and guidance when personal data is shared in Teams, and offer recommendations to mitigate privacy risks. This directly addresses all three requirements mentioned in the question.

Why the other options are wrong

  • A. Communication compliance focuses on detecting policy violations and inappropriate communications, not privacy data handling decisions.
  • B. Microsoft Viva Insights provides workplace analytics and wellbeing insights, not privacy risk management capabilities.
  • D. Advanced eDiscovery is for legal discovery and compliance investigations, not for identifying unused personal data or real-time guidance.

Question 2

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

Suspicious authentication activity alerts have been appearing in the Workload protections dashboard.

You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort.

What should you include in the recommendation?

  1. Azure Monitor webhooks
  2. Azure Event Hubs
  3. Azure Functions apps
  4. Azure Logics Apps
Show answer and explanation

Correct answer: D. Azure Logics Apps

Azure Logic Apps provide a low-code, no-code solution for workflow automation that can integrate with Microsoft Defender for Cloud to evaluate and remediate alerts. Logic Apps minimize development effort compared to other options and support complex conditional logic for alert response automation.

Why the other options are wrong

  • A. Azure Monitor webhooks are for notifications only and do not provide workflow automation capabilities for evaluation and remediation.
  • B. Azure Event Hubs is a data streaming platform for ingesting events, not for automation and remediation workflows.
  • C. Azure Functions requires more development effort than Logic Apps and is code- based rather than low-code/no-code.

Question 3

Your company is moving a big data solution to Azure.

The company plans to use the following storage workloads:

• Azure Storage blob containers

• Azure Data Lake Storage Gen2

Azure Storage file shares -

• Azure Disk Storage

Which two storage workloads support authentication by using Azure Active Directory (Azure AD)? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

  1. Azure Storage file shares
  2. Azure Disk Storage
  3. Azure Storage blob containers
  4. Azure Data Lake Storage Gen2 ✅Correct Answer: A, C
  5. Azure Storage file shares
  6. Azure Storage blob containers Azure Storage blob containers and Azure Storage file shares both support Azure AD (Microsoft Entra ID) authentication. Blob storage accepts Entra ID tokens for data plane requests with RBAC, and Azure Files supports identity-based authentication over SMB using on-premises AD DS, Microsoft Entra Domain Services, or Microsoft Entra Kerberos.
Show answer and explanation

Answer and explanation for question 3

See all 10 free questions Get the full pack, US$39

360 practice questions for Microsoft Cybersecurity Architect (SC-100), with full explanations.

Every question comes with the correct answer, the reasoning behind it, and a note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.

  • 360 questions across all four SC-100 domains, case studies included
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

A failed SC-100 attempt costs US$165 in the US, plus the weeks it takes to get ready again. This pack is US$39, paid once, and refunded if you fail.

Try 10 questions free before you buy.

Last updated September 2026 · 360 questions. Aligned to the 28 July 2026 blueprint.

What makes the SC-100 hard

The SC-100 is Microsoft’s security capstone, and it fails implementers. Knowing how to configure Defender or Sentinel is the wrong altitude: this exam asks what you would recommend, not what you would click.

Every question is a constraint puzzle: a business requirement, a compliance obligation, an existing estate, and four architecturally valid answers, with only one matching Zero Trust principles and Microsoft’s reference architectures (MCRA and the cloud security benchmark). The case-study sections compound it: one long scenario feeding a block of questions, where a misread requirement costs you all of them.

The weighting is close to even across the four domains, so there is no soft option: security operations, identity and compliance design, and infrastructure design are the heaviest at 25 to 30% each, with best practices and application and data design at 20 to 25%.

It is also an Expert-level certification with a prerequisite: AZ-500, SC-200 or SC-300 must be banked first.

About the exam

SC-100 certifies designing cybersecurity strategy and architecture across identity, security operations, infrastructure, data and applications on Microsoft platforms: Zero Trust end to end. Expert level, requiring one of AZ-500, SC-200 or SC-300. Skills measured as of 28 July 2026. Renews annually via a free online assessment.

Exam domains

  • Design solutions that align with security best practices and priorities: 20 to 25%
  • Design security operations, identity, and compliance capabilities: 25 to 30%
  • Design security solutions for infrastructure: 25 to 30%
  • Design security solutions for applications and data: 20 to 25%

Around 40 to 60 questions including case studies, 120 minutes, passing score 700 out of 1000, US$165 in the US, priced by local currency elsewhere, online proctored or test centre, renews annually for free.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Questions before you buy

What do I get when I buy the Microsoft SC-100 pack?

360 practice questions as a PDF, each with the correct answer, a full explanation and a note on why the other options are wrong, plus a separate questions-only PDF for timed practice.

How quickly do I receive it?

Straight away. The full PDF and a questions-only copy are emailed to you the moment your payment goes through, and the same links are on your order page.

Is there a free sample?

Yes. Ten questions from this pack, with answers and explanations, are free on this page and as a PDF, so you can judge the quality before you pay.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.