Exam SC-100 All Questions

View all questions & answers for the SC-100 exam

Exam SC-100 topic 1 question 36 discussion

Actual exam question from Microsoft's SC-100

Question #: 36
Topic #: 1

You have an Azure subscription.

You plan to deploy enterprise-scale landing zones based on the Microsoft Cloud Adoption Framework for Azure. The deployment will include a single-platform landing zone for all shared services and three application landing zones that will each host a different Azure application.

You need to recommend which resource to deploy to each landing zone. The solution must meet the Cloud Adoption Framework best-practice recommendations for enterprise-scale landing zones.

What should you recommend?

A. an Azure firewall
B. an Azure virtual network gateway
C. an Azure Private DNS zone
D. an Azure key vault

Show Suggested Answer

Suggested Answer: D 🗳️

by 676ae1a at Jan. 29, 2025, 11:19 a.m.

Comments

Submit Cancel

424ede1

4 months, 2 weeks ago

Selected Answer: D

Landing Zone Subscription --> Azure Key Vault Connectivity Subscription --> Azure Firewall https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/define-an-azure-network-topology#virtual-wan-network-topology

upvoted 2 times

...

424ede1

4 months, 4 weeks ago

Selected Answer: D

Based on the provided picture and the conceptual architecture of the landing zone, both landing zone subscriptions include KeyVault. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/#azure-landing-zone-architecture

upvoted 1 times

...

Er_01

6 months, 2 weeks ago

Selected Answer: D

The question related to ent scale application landing zones from the document only shows Azure Key Vault in each one. Also, in the access section it states to “separate key vaults for each application environment in each region”. Pg 419

upvoted 4 times

...

sweetykaur

6 months, 2 weeks ago

Selected Answer: A

The best recommendation to meet the Cloud Adoption Framework best-practice recommendations for enterprise-scale landing zones is A. an Azure firewall. Deploying an Azure firewall in each landing zone provides centralized protection against network threats and supports security and compliance requirements. This aligns with the Cloud Adoption Framework's best-practices for securing your environment and ensuring consistent security controls across all landing zones.

upvoted 1 times

...

jim85

6 months, 2 weeks ago

Selected Answer: A

should be A for app landing zone and D for single-platform landing zone

upvoted 1 times

...

Ali96

6 months, 2 weeks ago

Selected Answer: C

an Azure Private DNS zone

upvoted 1 times

...

tuyi2

6 months, 3 weeks ago

Selected Answer: D

From Chat GPT: The Microsoft Cloud Adoption Framework for Azure recommends deploying an Azure Key Vault in each landing zone to securely manage and store secrets, keys, and certificates for the applications and resources hosted in the landing zone. This approach ensures that sensitive information is isolated and secured within each application landing zone.

upvoted 1 times

...

676ae1a

6 months, 3 weeks ago

Selected Answer: D

Azure key vault es uno de los recursos que debe tener una zona de aterrizaje en relación a seguridad y cumplimiento y por lo tanto sería la opción más óptima pese a que se recomiende un Azure firewall relativo a redes y conectividad

upvoted 1 times

...

676ae1a

6 months, 3 weeks ago

Selected Answer: A

Azure firewall es uno de los recursos que debe tener la zona de aterrizaje

upvoted 1 times

...