SC-100 Certification Practice Question #143

Question

Your company has a Microsoft 365 E5 subscription.
The company plans to deploy 45 mobile self-service kiosks that will run Windows 10.
You need to provide recommendations to secure the kiosks. The solution must meet the following requirements:
✑ Ensure that only authorized applications can run on the kiosks.
✑ Regularly harden the kiosks against new threats.
Which two actions should you include in the recommendations? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

Two requirements must each be satisfied. "Only authorized applications can run" is met by onboarding the kiosks to Microsoft Intune (which delivers app control / kiosk configuration) together with Defender for Endpoint — answer B. "Regularly harden against new threats" is met by Defender Vulnerability Management (threat and vulnerability management), which continuously discovers, prioritizes, and remediates weaknesses — answer C; MS Learn explicitly notes vulnerability management "sits on top of" / requires Defender for Endpoint, which is why B is a prerequisite for C and the pair is the complete solution. The official Suggested Answer lists only C, but C alone leaves the app-control requirement unaddressed, so the overwhelming community consensus (71 votes, two 25-50 👍 comments) correctly adds B. Because the documented capabilities and the Most Voted align and the only dissent (PAW) is clearly a wrong fit for kiosks, confidence is high; it is capped at 90 rather than higher because the official key is the partial single-letter C.

More SC-100 practice questions