You have a Microsoft 365 subscription and an Azure subscription.

Vendor: Microsoft
Product: SC-100
Update on: Jul 31, 2025
Questions: 228

Microsoft SC-100 Question Answer

You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled.

The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications on Windows Server 2019.

You need to recommend a solution to ensure that only authorized applications can run on the virtual machines. If an unauthorized application attempts to run or be installed, the application must be blocked automatically until an administrator authorizes the application.

Which security control should you recommend?

Azure Active Directory (Azure AD) Conditional Access App Control policies

OAuth app policies in Microsoft Defender for Cloud Apps

app protection policies in Microsoft Endpoint Manager

application control policies in Microsoft Defender for Endpoint