Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 1:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

• Question 2:

  You need to automatically apply a sensitivity label to documents that contain information about your company's network including computer names, IP addresses, and configuration information.

  Which two objects should you use?

  Each correct answer presents part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.

  A. an Information protection auto-labeling policy
  B. a custom trainable classifier
  C. a sensitive info type that uses a regular expression
  D. a data loss prevention (DLP) policy
  E. a sensitive info type that uses keywords
  F. a sensitivity label that has auto-labeling
  A. an Information protection auto-labeling policy
  B. a custom trainable classifier

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-learn-about?view=o365-worldwidehttps://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

• Question 3:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://learn.microsoft.com/en-us/microsoft-365/compliance/information-barriers?view=o365-worldwide

  https://learn.microsoft.com/en-us/microsoft-365/compliance/communication-compliance?view=o365-worldwide#integration-with-microsoft-365-services

• Question 4:

  You receive an email that contains a list of words that will be used for a sensitive information type.

  You need to create a file that can be used as the source of a keyword dictionary.

  In which format should you save the list?

  A. a JSON file that has an element for each word
  B. an ACCDB database file that contains a table named Dictionary
  C. an XML file that contains a keyword tag for each word
  D. a CSV file that contains words separated by commas
  D. a CSV file that contains words separated by commas

• Question 5:

  In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?

  A. Active Directory Federation Services (AD FS)
  B. Azure Sentinel
  C. Azure AD Connect
  D. Azure Ad Privileged Identity Management (PIM)
  C. Azure AD Connect

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect

• Question 6:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal

• Question 7:

  Which Microsoft 365 feature can you use to restrict users from sending email messages that contain lists of customers and their associated credit card numbers?

  A. retention policies
  B. data loss prevention (DLP) policies
  C. conditional access policies
  D. information barriers
  B. data loss prevention (DLP) policies

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

• Question 8:

  DRAG DROP

  Match the types of compliance score actions to the appropriate tasks.

  To answer, drag the appropriate action type from the column on the left to its task on the right. Each type may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Preventative

  Preventative actions address specific risks. For example, protecting information at rest using encryption is a preventative action against attacks and breaches. Separation of duties is a preventative action to manage conflict of interest and guard against fraud.

  Box 2: Detective

  Detective actions actively monitor systems to identify irregular conditions or behaviors that represent risk, or that can be used to detect intrusions or breaches. Examples include system access auditing and privileged administrative actions. Regulatory compliance audits are a type of detective action used to find process issues.

  Incorrect:

  Corrective actions try to keep the adverse effects of a security incident to a minimum, take corrective action to reduce the immediate effect, and reverse the damage if possible. Privacy incident response is a corrective action to limit damage and restore systems to an operational state after a breach.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide

• Question 9:

  When you enable Azure AD Multi-Factor Authentication (MFA), how many factors are required for authentication?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 10:

  HOTSPOT

  You need to implement an information compliance policy to meet the following requirements: Documents that contain passport numbers from the United States, Germany, Australia, and Japan must be identified automatically.

  When a user attempts to send an email or an attachment that contains a passport number, the user must receive a tooltip in Microsoft Outlook.

  Users must be blocked from using Microsoft SharePoint Online or OneDrive for Business to share a document that contains a passport number.

  What is the minimum number of sensitivity labels and auto-labeling policies you should create? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365-worldwide