Microsoft Cybersecurity Architect Expert
(SC-100) Exam (AGACNP-C) 2026–2027
| Comprehensive Question Practice Test
with Answers & Rationales| Free Pdf
Access
1. What is the primary responsibility of a Microsoft Cybersecurity Architect?
A. Design enterprise cybersecurity strategies and architectures using Microsoft security
technologies and Zero Trust principles
B. Develop Windows desktop applications
C. Install operating systems
D. Repair computer hardware
Correct Answer: A
Rationale: SC-100 focuses on designing enterprise cybersecurity architectures rather than
day-to-day administration.
2. Which security model assumes that no user, device, or network should be
trusted by default?
A. Zero Trust
B. Trusted Network
C. Castle-and-Moat
,D. Open Access
Correct Answer: A
Rationale: Zero Trust continuously verifies every access request.
3. Which three foundational principles define Microsoft's Zero Trust model?
A. Verify explicitly, use least privilege, assume breach
B. Trust users, verify devices, disable auditing
C. Encrypt data, disable MFA, trust administrators
D. Share passwords, monitor networks, trust insiders
Correct Answer: A
Rationale: Microsoft's Zero Trust strategy is built on these three principles.
4. Which Microsoft service provides identity management?
A. Microsoft Entra ID
B. Microsoft Intune
C. Microsoft Teams
D. SharePoint Online
Correct Answer: A
Rationale: Microsoft Entra ID provides authentication and identity services.
5. Which Microsoft feature evaluates access requests based on user, device,
location, and risk?
A. Conditional Access
,B. BitLocker
C. Windows Firewall
D. Microsoft Forms
Correct Answer: A
Rationale: Conditional Access enforces adaptive access decisions.
6. Which authentication method significantly strengthens account security?
A. Multi-Factor Authentication (MFA)
B. Shared Passwords
C. Weak Passwords
D. Anonymous Login
Correct Answer: A
Rationale: MFA requires multiple forms of authentication.
7. Which principle grants users only the permissions they require?
A. Least Privilege
B. Full Control
C. Global Administrator
D. Shared Administrator
Correct Answer: A
Rationale: Least privilege minimizes attack surface.
8. Which Microsoft solution provides privileged identity governance?
, A. Microsoft Entra Privileged Identity Management (PIM)
B. Microsoft Forms
C. Microsoft Planner
D. Windows Update
Correct Answer: A
Rationale: PIM provides just-in-time privileged access.
9. Which Microsoft Entra feature detects risky users and sign-ins?
A. Microsoft Entra ID Protection
B. SharePoint Online
C. OneDrive
D. Exchange Online
Correct Answer: A
Rationale: Identity Protection identifies suspicious authentication behavior.
10. Which Microsoft architecture principle assumes attackers may already be
inside the network?
A. Assume Breach
B. Implicit Trust
C. Perimeter Security
D. Static Authentication
Correct Answer: A
(SC-100) Exam (AGACNP-C) 2026–2027
| Comprehensive Question Practice Test
with Answers & Rationales| Free Pdf
Access
1. What is the primary responsibility of a Microsoft Cybersecurity Architect?
A. Design enterprise cybersecurity strategies and architectures using Microsoft security
technologies and Zero Trust principles
B. Develop Windows desktop applications
C. Install operating systems
D. Repair computer hardware
Correct Answer: A
Rationale: SC-100 focuses on designing enterprise cybersecurity architectures rather than
day-to-day administration.
2. Which security model assumes that no user, device, or network should be
trusted by default?
A. Zero Trust
B. Trusted Network
C. Castle-and-Moat
,D. Open Access
Correct Answer: A
Rationale: Zero Trust continuously verifies every access request.
3. Which three foundational principles define Microsoft's Zero Trust model?
A. Verify explicitly, use least privilege, assume breach
B. Trust users, verify devices, disable auditing
C. Encrypt data, disable MFA, trust administrators
D. Share passwords, monitor networks, trust insiders
Correct Answer: A
Rationale: Microsoft's Zero Trust strategy is built on these three principles.
4. Which Microsoft service provides identity management?
A. Microsoft Entra ID
B. Microsoft Intune
C. Microsoft Teams
D. SharePoint Online
Correct Answer: A
Rationale: Microsoft Entra ID provides authentication and identity services.
5. Which Microsoft feature evaluates access requests based on user, device,
location, and risk?
A. Conditional Access
,B. BitLocker
C. Windows Firewall
D. Microsoft Forms
Correct Answer: A
Rationale: Conditional Access enforces adaptive access decisions.
6. Which authentication method significantly strengthens account security?
A. Multi-Factor Authentication (MFA)
B. Shared Passwords
C. Weak Passwords
D. Anonymous Login
Correct Answer: A
Rationale: MFA requires multiple forms of authentication.
7. Which principle grants users only the permissions they require?
A. Least Privilege
B. Full Control
C. Global Administrator
D. Shared Administrator
Correct Answer: A
Rationale: Least privilege minimizes attack surface.
8. Which Microsoft solution provides privileged identity governance?
, A. Microsoft Entra Privileged Identity Management (PIM)
B. Microsoft Forms
C. Microsoft Planner
D. Windows Update
Correct Answer: A
Rationale: PIM provides just-in-time privileged access.
9. Which Microsoft Entra feature detects risky users and sign-ins?
A. Microsoft Entra ID Protection
B. SharePoint Online
C. OneDrive
D. Exchange Online
Correct Answer: A
Rationale: Identity Protection identifies suspicious authentication behavior.
10. Which Microsoft architecture principle assumes attackers may already be
inside the network?
A. Assume Breach
B. Implicit Trust
C. Perimeter Security
D. Static Authentication
Correct Answer: A
