Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 101:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point

  

  

  ---

  Box 1: Yes

  Microsoft Secure Score has updated improvement actions to support security defaults in Azure Active Directory, which make it easier to help protect your organization with pre-configured security settings for common attacks.

  If you turn on security defaults, you'll be awarded full points for the following improvement actions:

  Ensure all users can complete multi-factor authentication for secure access (9 points) Require MFA for administrative roles (10 points) Enable policy to block legacy authentication (7 points)

  Box 2: Yes

  Each improvement action is worth 10 points or less, and most are scored in a binary fashion. If you implement the improvement action, like create a new policy or turn on a specific setting, you get 100% of the points. For other improvement actions, points are given as a percentage of the total configuration.

  Note: Following the Secure Score recommendations can protect your organization from threats. From a centralized dashboard in the Microsoft 365 Defender portal, organizations can monitor and work on the security of their Microsoft 365 identities, apps, and devices.

  Box 3: Yes

  Microsoft Secure Score is a measurement of an organization's security posture, with a higher number indicating more improvement actions taken.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score

• Question 102:

  What does Conditional Access evaluate by using Microsoft Entra ID Protection?

  A. user actions
  B. group membership
  C. device compliance
  D. user risk
  C. device compliance

• Question 103:

  Which service includes Microsoft Secure Score for Devices?

  A. Microsoft Defender for IoT
  B. Microsoft Defender for Endpoint
  C. Microsoft Defender for Identity
  D. Microsoft Defender for Office 365
  B. Microsoft Defender for Endpoint

• Question 104:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  You can use sensitivity labels to provide protection settings that include encryption of emails and documents to prevent unauthorized people from accessing this data.

  Box 2: Yes

  You can use sensitivity labels to mark the content when you use Office apps, by adding watermarks, headers, or footers to documents that have the label applied.

  Box 3: Yes

  You can use sensitivity labels to mark the content when you use Office apps, by adding headers, or footers to email that have the label applied.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

• Question 105:

  You need to connect to an Azure virtual machine by using Azure Bastion.

  What should you use?

  A. an SSH client
  B. PowerShell remoting
  C. the Azure portal
  D. the Remote Desktop Connection client
  C. the Azure portal

  ---

  Explanation

  You can create an RDP connection to a Windows VM using Azure Bastion.

  References:

  https://docs.microsoft.com/en-us/azure/bastion/bastion-connect-vm-rdp-windows

• Question 106:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

• Question 107:

  Which Microsoft 365 compliance center feature can you use to identify all the documents on a Microsoft SharePoint Online site that contain a specific key word?

  A. Audit
  B. Compliance Manager
  C. Content Search
  D. Alerts
  C. Content Search

  ---

  Explanation

  The Content Search tool in the Security & Compliance Center can be used to quickly find email in Exchange mailboxes, documents in SharePoint sites and OneDrive locations, and instant messaging conversations in Skype for Business.

  The first step is to starting using the Content Search tool to choose content locations to search and configure a keyword query to search for specific items.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/search-for-content?view=o365-worldwide

• Question 108:

  What feature supports email as a method of authenticating users?

  A. Microsoft Entra ID Protection
  B. Microsoft Entra Multi-Factor Authentication (MFA)
  C. self-service password reset (SSPR)
  D. Microsoft Entra Password Protection
  B. Microsoft Entra Multi-Factor Authentication (MFA)

• Question 109:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

• Question 110:

  You have a Microsoft OneDrive for Business folder that contains the files shown in the following table.

  

  In Microsoft Cloud App Security, you create a file policy to automatically apply a classification.

  What is the effect of applying the policy?

  A. The policy will apply to only the .docx and .txt files. The policy will classify the files within 24 hours.
  B. The policy will apply to all the files. The policy will classify only 100 files daily.
  C. The policy will apply to only the .docx files. The policy will classify only 100 files daily.
  D. The policy will apply to only the .docx and .txt files. The policy will classify the files immediately.
  C. The policy will apply to only the .docx files. The policy will classify only 100 files daily.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/cloud-app-security/azip-integration