StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Network security and Security Service Edge

Practice question 354 of 498 · hard

A pilot has an assigned policy, but some user traffic bypasses the service. Which two checks establish effective SWG coverage? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Inspect traffic logs and test expected allowed and denied destinations
  2. B.Ignore bypassed traffic because it cannot appear in the logs
  3. C.Use a connector heartbeat as proof of public web filtering
  4. D.Verify the intended traffic profile and actual acquisition path
  5. E.Assume successful license assignment proves all packets are routed
Show the answer and explanation

✓ Correct answers

  • Inspect traffic logs and test expected allowed and denied destinations
  • Verify the intended traffic profile and actual acquisition path

The acquisition path determines coverage, and traffic evidence plus positive/negative tests demonstrate enforcement. Licensing alone does not route traffic. Private connector health does not prove public SWG acquisition. Missing logs may reflect bypass and must be investigated.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.