SC-100 — Most Debated Topics

Community-voted ranking of 27 topics, sorted by disagreement level. Higher dispute = more test-takers disagree on the answer.

#1
Enabling multi-user authorization with Resource Guard to protect backups from a compromised admin
A-Grade Dispute: 50% 4 comments
#2
Using Microsoft Entra Permissions Management to find unused RBAC assignments
S-Grade Dispute: 47% 13 comments
#3
Scenarios supported by compliant network check in Global Secure Access
S-Grade Dispute: 45% 5 comments
#4
Removing the inbound firewall rule for an Entra application proxy connector
S-Grade Dispute: 45% 5 comments
#5
Changing DNS MX records to route all inbound mail through Defender for Office 365
S-Grade Dispute: 44% 7 comments
#6
Applying customer-managed key encryption at the file level in Data Lake Storage
S-Grade Dispute: 44% 7 comments
#7
Adding only the PA device-management group to the local Administrators group
S-Grade Dispute: 37% 5 comments
#8
Using Dapr to manage secrets and mTLS for AKS microservices
S-Grade Dispute: 37% 6 comments
#9
Using the Permissions Management analytics dashboard to find privileged role assignments
S-Grade Dispute: 36% 5 comments
#10
Deploying an Azure key vault to each enterprise-scale landing zone
S-Grade Dispute: 33% 9 comments
#11
Using Azure Lighthouse to delegate the Security Operator role to customer tenants
A-Grade Dispute: 33% 3 comments
#12
Using a private endpoint to connect an App Service to SQL Server on Azure VMs
S-Grade Dispute: 29% 6 comments
#13
Using Microsoft Purview Data Loss Prevention to identify sensitive documents
S-Grade Dispute: 29% 5 comments
#14
Using B2B direct connect for shared Microsoft Teams channels across tenants
S-Grade Dispute: 22% 6 comments
#15
Using Entra Permissions Management to discover permissions across Azure, AWS, and GCP
A-Grade Dispute: 20% 3 comments
#16
Using Defender for Identity to mark a sensitive AD group and alert in Sentinel
A-Grade Dispute: 20% 4 comments
#17
Using Entra Internet Access to restrict users to authenticating only to their tenant
A-Grade Dispute: 20% 4 comments
#18
Using Virtual Network Manager security admin rules to force Bastion-only RDP
A-Grade Dispute: 17% 3 comments
#19
Deploying the Global Secure Access client to devices via Intune for web filtering
A-Grade Dispute: 17% 3 comments
#20
Restricting storage account access to branch static IPs with Storage firewall rules
S-Grade Dispute: 12% 5 comments
#21
Using Private Access for the on-premises app and Internet Access for the SaaS app
A-Grade Dispute: 12% 4 comments
#22
Using malware scanning in Defender for Storage to detect threats in uploaded blobs
A-Grade Dispute: 12% 4 comments
#23
Using Intune Endpoint Privilege Management to run admin apps as a standard user
A-Grade Dispute: 0% 3 comments
#24
Continuous access evaluation covers both SharePoint Online and Exchange Online
A-Grade Dispute: 0% 4 comments
#25
Applying a DLP policy to Defender for Cloud Apps to control third-party uploads
A-Grade Dispute: 0% 3 comments
#26
Using Azure SQL Database with Intel SGX enclaves (Always Encrypted) for sensitive data
A-Grade Dispute: 0% 4 comments
#27
Using Azure Policy to maintain MCSB compliance for deployed App Services
A-Grade Dispute: 0% 4 comments

Ready to practice?

Access 110 SC-100 questions with instant feedback and detailed explanations.

View SC-100 Practice Questions →

← Back to SC-100 Cybersecurity Architect Study Guide