Microsoft Cybersecurity Architect (SC-100) - 340 Questions

1. A cybersecurity architect is designing a ransomware resiliency strategy for a large enterprise with hybrid infrastructure. The organization requires that backups remain recoverable even if an attacker gains Global Administrator credentials. Which combination of Azure Backup features should the architect recommend?

2. A cybersecurity architect is reviewing Microsoft Security Best Practices for an organization that recently suffered a ransomware attack. The attacker moved laterally from a compromised endpoint to domain controllers within minutes. Which architectural principle should the architect prioritize to prevent this lateral movement in the future?

3. An organization is designing a Privileged Access Workstation (PAW) strategy for administrators who manage Azure subscriptions and on-premises Active Directory. Which design constraint is MOST critical when defining the PAW architecture?

4. A cybersecurity architect is designing a recovery strategy for a financial institution. The RTO is 4 hours and the RPO is 1 hour for Tier-1 workloads. The solution must remain recoverable after a complete primary region failure. Which Azure architecture best meets these requirements?

5. An architect is designing the identity security strategy for an organization that still uses on-premises applications requiring legacy authentication protocols (NTLM, basic authentication). The organization wants to align with Microsoft Security Best Practices. Which recommendation should the architect make?