Disagreement ranking

SC-100 — most debated topics

Community-voted ranking of 31 topics, sorted by disagreement level. A higher dispute score means more test-takers disagree on the answer.

Full ranking

31 topics · highest disagreement first

  1. Enabling multi-user authorization with Resource Guard to protect backups from a compromised admin

    A-grade Dispute: 50% 4 comments

  2. Using Microsoft Entra Permissions Management to find unused RBAC assignments

    S-grade Dispute: 47% 13 comments

  3. Scenarios supported by compliant network check in Global Secure Access

    S-grade Dispute: 45% 5 comments

  4. Removing the inbound firewall rule for an Entra application proxy connector

    S-grade Dispute: 45% 5 comments

  5. Changing DNS MX records to route all inbound mail through Defender for Office 365

    S-grade Dispute: 44% 7 comments

  6. Applying customer-managed key encryption at the file level in Data Lake Storage

    S-grade Dispute: 44% 7 comments

  7. Adding only the PA device-management group to the local Administrators group

    S-grade Dispute: 37% 5 comments

  8. Using Dapr to manage secrets and mTLS for AKS microservices

    S-grade Dispute: 37% 6 comments

  9. Using the Permissions Management analytics dashboard to find privileged role assignments

    S-grade Dispute: 36% 5 comments

  10. Deploying an Azure key vault to each enterprise-scale landing zone

    S-grade Dispute: 33% 9 comments

  11. Using Azure Lighthouse to delegate the Security Operator role to customer tenants

    A-grade Dispute: 33% 3 comments

  12. Using a private endpoint to connect an App Service to SQL Server on Azure VMs

    S-grade Dispute: 29% 6 comments

  13. Using Microsoft Purview Data Loss Prevention to identify sensitive documents

    S-grade Dispute: 29% 5 comments

  14. Using B2B direct connect for shared Microsoft Teams channels across tenants

    S-grade Dispute: 22% 6 comments

  15. Using Entra Permissions Management to discover permissions across Azure, AWS, and GCP

    A-grade Dispute: 20% 3 comments

  16. Using Defender for Identity to mark a sensitive AD group and alert in Sentinel

    A-grade Dispute: 20% 4 comments

  17. Using Entra Internet Access to restrict users to authenticating only to their tenant

    A-grade Dispute: 20% 4 comments

  18. Using Virtual Network Manager security admin rules to force Bastion-only RDP

    A-grade Dispute: 17% 3 comments

  19. Deploying the Global Secure Access client to devices via Intune for web filtering

    A-grade Dispute: 17% 3 comments

  20. Restricting storage account access to branch static IPs with Storage firewall rules

    S-grade Dispute: 12% 5 comments

  21. Using Private Access for the on-premises app and Internet Access for the SaaS app

    A-grade Dispute: 12% 4 comments

  22. Using malware scanning in Defender for Storage to detect threats in uploaded blobs

    A-grade Dispute: 12% 4 comments

  23. Using Intune Endpoint Privilege Management to run admin apps as a standard user

    A-grade Dispute: 0% 3 comments

  24. Continuous access evaluation covers both SharePoint Online and Exchange Online

    A-grade Dispute: 0% 4 comments

  25. Applying a DLP policy to Defender for Cloud Apps to control third-party uploads

    A-grade Dispute: 0% 3 comments

  26. Using Azure SQL Database with Intel SGX enclaves (Always Encrypted) for sensitive data

    A-grade Dispute: 0% 4 comments

  27. Using Azure Policy to maintain MCSB compliance for deployed App Services

    A-grade Dispute: 0% 4 comments

  28. MCRA Zero Trust Methodology Drag and Drop

    A-grade Dispute: 0% 13 comments

  29. Mitigating Privileged Account Attacks with Fake Cached Credentials

    A-grade Dispute: 0% 4 comments

  30. MCRA Job Role Security Level Configuration

    A-grade Dispute: 0% 9 comments

  31. Enable NIST 800-53 Compliance Assessment in Defender for Cloud

    A-grade Dispute: 0% 1 comments

← Back to SC-100 Cybersecurity Architect Study Guide