SC-100 Certification Practice Question #28

Question

You are designing a security operations strategy based on the Zero Trust framework.

You need to increase the operational efficiency of the Microsoft Security Operations Center (SOC).

Based on the Zero Trust framework, which three deployment objectives should you prioritize in sequence? To answer move the appropriate objectives from the list of objectives to the answer area and arrange them in the correct order.

Accepted Answer

The question maps directly to the Microsoft Learn "Integrated SecOps with Zero Trust" deployment guide for the visibility, automation, and orchestration pillar, which is the pillar concerned with improving SOC operational efficiency. MS Learn prescribes the exact ordered sequence: establish visibility first (turn on Defender XDR / Sentinel to get the signal), then enable automation (automated investigation and remediation to reduce analyst load), then add additional protection and detection controls. The two recovery-themed tiles are distractors from other guidance and are excluded. The community is unanimous on V-A-C and two top comments cite the same anchor URL, so confidence is high; it is held just below the 95+ band only because the file records no official Suggested Answer letter.

More SC-100 practice questions