SC-100 · Question #249
SC-100 Question #249: Real Exam Question with Answer & Explanation
Sign in or unlock SC-100 to reveal the answer and full explanation for question #249. The question stem and answer options stay visible for context.
Question
You have an Azure subscription. The subscription contains 100 virtual machines that run Windows Server. The virtual machines are managed by using Azure Policy and Microsoft Defender for Servers. You need to enhance security on the virtual machines. The solution must meet the following requirements: - Ensure that only apps on an allowlist can be run. - Require administrators to confirm each app added to the allowlist. - Automatically add unauthorized apps to a blocklist when an attempt is made to launch the app. - Require administrators to approve an app before the app can be moved from the blocklist to the allowlist. What should you include in the solution?
Options
- Aa compute policy in Azure Policy
- Bapp governance in Microsoft Defender for Cloud Apps
- Cadmin consent settings for enterprise applications in Microsoft Entra ID
- Dadaptive application controls in Defender for Servers
Unlock SC-100 to see the answer
You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.