Microsoft Cybersecurity Architect (SC-100)

1. A cybersecurity architect is designing a ransomware resiliency strategy for a large enterprise with hybrid infrastructure. The organization requires that backups remain recoverable even if an attacker gains Global Administrator credentials. Which combination of Azure Backup features should the architect recommend?

2. A cybersecurity architect is reviewing Microsoft Security Best Practices for an organization that recently suffered a ransomware attack. The attacker moved laterally from a compromised endpoint to domain controllers within minutes. Which architectural principle should the architect prioritize to prevent this lateral movement in the future?

3. A cybersecurity architect is designing a Microsoft Sentinel deployment for an enterprise with 50 Azure subscriptions, on-premises Active Directory, and Microsoft 365. The architect must design the Log Analytics workspace topology. Which design provides the best balance of centralized visibility and operational efficiency?

4. A cybersecurity architect is designing a SOAR capability in Microsoft Sentinel. The SOC team wants to automatically isolate a compromised Windows endpoint when a high-severity malware alert fires. Which Sentinel component executes the automated isolation action?

5. A cybersecurity architect is designing FedRAMP compliance for a U.S. federal agency that will use Azure services. The agency must use only FedRAMP-authorized services. Which Microsoft offering should the architect specify in the architecture?