Skip to main content

SC-900 Real Exam Questions

Microsoft Security Compliance and Identity Fundamentals

267 questions available · Page 1 of 27

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Which feature helps organizations track activities performed on labeled content?

  1. A

    Content explorer

  2. B

    Activity explorer

  3. C

    Compliance Manager

  4. D

    Audit log

Show answer and explanation

Correct answer: B

Explanation

Activity explorer provides visibility into actions taken on labeled content, helping organizations monitor usage and potential risks.

Question 2 Hotspot

HOTSPOT

Select the answer that correctly completes the sentence.

Question diagram
Show answer and explanation
Correct answer diagram
Question 3 Hotspot

HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question diagram
Show answer and explanation
Correct answer diagram
Explanation

Box 1: Yes
The MailItemsAccessed event is a mailbox auditing action and is triggered when mail data is accessed by mail protocols and mail clients.

Box 2: No
Basic Audit retains audit records for 90 days.

Advanced Audit retains all Exchange, SharePoint, and Azure Active Directory audit records for one year.
This is accomplished by a default audit log retention policy that retains any audit record that contains the value of Exchange, SharePoint, or AzureActiveDirectory for the Workload property (which indicates the service in which the activity occurred) for one year.

Box 3: yes
Advanced Audit in Microsoft 365 provides high-bandwidth access to the Office 365 Management Activity
API.

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/auditing-solutions-overview?view=o365-worldwide#licensing-requirements
https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#advanced-audit

Question 4 Hotspot

HOTSPOT

Select the answer that correctly completes the sentence.

Question diagram
Show answer and explanation
Correct answer diagram
Explanation

Microsoft 365 Compliance center.

Add users to an insider risk management role group Complete the following steps to add users to an insider risk management role group:

1. Sign into Microsoft Purview compliance portal using credentials for an admin account in your Microsoft
365 organization.
2. In the Security & Compliance Center, go to Permissions. Select the link to view and manage roles in Office 365.
3. Select the insider risk management role group you want to add users to, then select Edit role group.
4. Select Choose members from the left navigation pane, then select Edit.
5. Select Add and then select the checkbox for all users you want to add to the role group.
6. Select Add, then select Done.
7. Select Save to add the users to the role group. Select Close to complete the steps.

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-configure?view=o365-worldwide

Question 5 Single choice

You have a new Microsoft 365 tenant.

You need to ensure that custom trainable classifiers can be created in the tenant.

To which role should you be assigned to perform the configuration?

  1. A

    Security administrator

  2. B

    Security operator

  3. C

    Global administrator

  4. D

    Compliance administrator

Show answer and explanation

Correct answer: D

Explanation

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide

Question 6 Hotspot

HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question diagram
Show answer and explanation
Correct answer diagram
Explanation

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365-worldwide

Question 7 Single choice

You have an Azure subscription.

You need to implement approval-based, time-bound role activation.

What should you use?

  1. A

    Windows Hello for Business

  2. B

    Azure Active Directory (Azure AD) Identity Protection

  3. C

    access reviews in Azure Active Directory (Azure AD)

  4. D

    Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Show answer and explanation

Correct answer: D

Explanation

References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Question 8 Single choice

What is an example of encryption at rest?

  1. A

    encrypting communications by using a site-to-site VPN

  2. B

    encrypting a virtual machine disk

  3. C

    accessing a website by using an encrypted HTTPS connection

  4. D

    sending an encrypted email

Show answer and explanation

Correct answer: B

Explanation

References:
https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

Question 9 Hotspot

HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question diagram
Show answer and explanation
Correct answer diagram
Question 10 Single choice

What feature supports email as a method of authenticating users?

  1. A

    Microsoft Entra ID Protection

  2. B

    Microsoft Entra Multi-Factor Authentication (MFA)

  3. C

    self-service password reset (SSPR)

  4. D

    Microsoft Entra Password Protection

Show answer and explanation

Correct answer: B