Microsoft Fundamentals SC-900 Questions & Answers

• Question 1:

  Which pillar of identity relates to tracking the resources accessed by a user?

  A. authorization

  B. auditing

  C. administration

  D. authentication

  Correct Answer: B

  Audit logs in Azure Active Directory

  As an IT administrator, you want to know how your IT environment is doing. The information about your system's health enables you to assess whether and how you need to respond to potential issues.

  To support you with this goal, the Azure Active Directory portal gives you access to three activity logs:

  Sign-ins

• Question 2:

  You have an Azure subscription that contains a Log Analytics workspace.

  You need to onboard Microsoft Sentinel.

  What should you do first?

  A. Create a hunting query.

  B. Correlate alerts into incidents.

  C. Connect to your security sources.

  D. Create a custom detection rule.

  Correct Answer: C

  https://learn.microsoft.com/en-us/azure/sentinel/connect-data-sources After you onboard Microsoft Sentinel into your workspace, use data connectors to start ingesting your data into Microsoft Sentinel. Microsoft Sentinel comes with many out of the box connectors for Microsoft services, which integrate in real time. For example, the Microsoft 365 Defender connector is a service-to-service connector that integrates data from Office 365, Azure Active Directory (Azure AD), Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps.

• Question 3:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Compliance score How to read your compliance score The Compliance Manager dashboard displays your overall compliance score. This score measures your progress in completing recommended improvement actions within controls. Your score can help you understand your current compliance posture. It can also help you prioritize actions based on their potential to reduce

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide

• Question 4:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  Microsoft Purview allows you to apply sensitivity labels to assets, enabling you to classify and protect your data.

  Box 2: Yes

  Microsoft Sentinel content is Security Information and Event Management (SIEM) content that enables customers to ingest data, monitor, alert, hunt, investigate, respond, and connect with different products, platforms, and services in

  Microsoft Sentinel.

  Content sources for Microsoft Sentinel content and solutions

  Each piece of content or solution has one of the following content sources:

  Content hub - Content or solutions deployed by the content hub that support lifecycle management

  Custom - Content or solutions you've customized in your workspace

  Gallery content- Content or solutions from the gallery that don't support lifecycle management

  Repositories - Content or solutions from a repository connected to your workspace

  Box 3: No

  Microsoft Purview provides a unified data governance solution to help manage and govern your on-premises, multicloud, and software as a service (SaaS) data.

  Reference:

  https://docs.microsoft.com/en-us/azure/purview/create-sensitivity-label

  https://docs.microsoft.com/en-us/azure/sentinel/sentinel-solutions

• Question 5:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

• Question 6:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Microsoft 365 Compliance center.

  Add users to an insider risk management role group

  Complete the following steps to add users to an insider risk management role group:

  1.

  Sign into Microsoft Purview compliance portal using credentials for an admin account in your Microsoft 365 organization.

  2.

  In the Security and Compliance Center, go to Permissions. Select the link to view and manage roles in Office 365.

  3.

  Select the insider risk management role group you want to add users to, then select Edit role group.

  4.

  Select Choose members from the left navigation pane, then select Edit.

  5.

  Select Add and then select the checkbox for all users you want to add to the role group.

  6.

  Select Add, then select Done.

  7.

  Select Save to add the users to the role group. Select Close to complete the steps.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-configure?view=o365-worldwide

• Question 7:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 8:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 9:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

• Question 10:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Azure monitor workbook templates Create interactive reports by using workbooks After you onboard to Microsoft Sentinel, monitor your data by using the integration with Azure Monitor workbooks.

  Workbooks display differently in Microsoft Sentinel than in Azure Monitor. But it may be useful for you to see how to create a workbook in Azure Monitor. Microsoft Sentinel allows you to create custom workbooks across your data. Microsoft Sentinel also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source.

  Reference: https://learn.microsoft.com/en-us/azure/sentinel/overview