ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-100 All Questions

View all questions & answers for the SC-100 exam
Go to Exam

Exam SC-100 topic 1 question 36 discussion

Actual exam question from Microsoft's SC-100
Question #: 36
Topic #: 1
[All SC-100 Questions]

You have an Azure subscription.

You plan to deploy enterprise-scale landing zones based on the Microsoft Cloud Adoption Framework for Azure. The deployment will include a single-platform landing zone for all shared services and three application landing zones that will each host a different Azure application.

You need to recommend which resource to deploy to each landing zone. The solution must meet the Cloud Adoption Framework best-practice recommendations for enterprise-scale landing zones.

What should you recommend?

  • A. an Azure firewall
  • B. an Azure virtual network gateway
  • C. an Azure Private DNS zone
  • D. an Azure key vault
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by 676ae1a at Jan. 29, 2025, 11:19 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
424ede1
3 weeks, 2 days ago
Selected Answer: D
Landing Zone Subscription --> Azure Key Vault Connectivity Subscription --> Azure Firewall https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/define-an-azure-network-topology#virtual-wan-network-topology
upvoted 2 times
...
424ede1
1 month ago
Selected Answer: D
Based on the provided picture and the conceptual architecture of the landing zone, both landing zone subscriptions include KeyVault. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/#azure-landing-zone-architecture
upvoted 1 times
...
Er_01
2 months, 2 weeks ago
Selected Answer: D
The question related to ent scale application landing zones from the document only shows Azure Key Vault in each one. Also, in the access section it states to “separate key vaults for each application environment in each region”. Pg 419
upvoted 4 times
...
sweetykaur
2 months, 2 weeks ago
Selected Answer: A
The best recommendation to meet the Cloud Adoption Framework best-practice recommendations for enterprise-scale landing zones is A. an Azure firewall. Deploying an Azure firewall in each landing zone provides centralized protection against network threats and supports security and compliance requirements. This aligns with the Cloud Adoption Framework's best-practices for securing your environment and ensuring consistent security controls across all landing zones.
upvoted 1 times
...
jim85
2 months, 3 weeks ago
Selected Answer: A
should be A for app landing zone and D for single-platform landing zone
upvoted 1 times
...
Ali96
2 months, 3 weeks ago
Selected Answer: C
an Azure Private DNS zone
upvoted 1 times
...
tuyi2
2 months, 3 weeks ago
Selected Answer: D
From Chat GPT: The Microsoft Cloud Adoption Framework for Azure recommends deploying an Azure Key Vault in each landing zone to securely manage and store secrets, keys, and certificates for the applications and resources hosted in the landing zone. This approach ensures that sensitive information is isolated and secured within each application landing zone.
upvoted 1 times
...
676ae1a
2 months, 3 weeks ago
Selected Answer: D
Azure key vault es uno de los recursos que debe tener una zona de aterrizaje en relación a seguridad y cumplimiento y por lo tanto sería la opción más óptima pese a que se recomiende un Azure firewall relativo a redes y conectividad
upvoted 1 times
...
676ae1a
2 months, 3 weeks ago
Selected Answer: A
Azure firewall es uno de los recursos que debe tener la zona de aterrizaje
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago