Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 111:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  The Microsoft Authenticator app helps you sign in to your accounts when you're using two-factor verification. Two-factor verification helps you to use your accounts more securely because passwords can be forgotten, stolen, or compromised. Two-factor verification uses a second factor like your phone to make it harder for other people to break in to your account.

  Box 2: Yes

  In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN.

  Box 3: No

  Windows Hello credentials are based on certificate or asymmetrical key pair. Windows Hello credentials can be bound to the device, and the token that is obtained using the credential is also bound to the device.

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

• Question 112:

  What can you use to protect against malicious links sent in email messages, chat messages, and channels?

  A. Microsoft Defender for Cloud Apps
  B. Microsoft Defender for Office 365
  C. Microsoft Defender for Endpoint
  D. Microsoft Defender for Identity
  B. Microsoft Defender for Office 365

• Question 113:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Information barriers and Exchange Online IB policies aren't available to restrict communication and collaboration between groups and users in email messages.

  Box 2: Yes

  Microsoft Purview Information Barriers (IB) is a compliance solution that allows you to restrict two-way communication and collaboration between groups and users in Microsoft Teams, SharePoint, and OneDrive.

  Box 3: Yes

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/information-barriers?view=o365-worldwide

• Question 114:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Sign in to Compliance Manager

  Go to the Microsoft Purview compliance portal and sign in with your Microsoft 365 global administrator account.

  Select Compliance Manager on the left navigation pane. You'll arrive at your Compliance Manager dashboard.

  The direct link to access Compliance Manager is

  https://compliance.microsoft.com/compliancemanagerNote:Microsoft365complianceisnowcalledMicrosoftPurviewandthesolutionswithinthecomplianceareahavebeenrebranded.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup

• Question 115:

  Which two types of resources can be protected by using Azure Firewall? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Azure virtual machines
  B. Azure Active Directory (Azure AD) users
  C. Microsoft Exchange Online inboxes
  D. Azure virtual networks
  E. Microsoft SharePoint Online sites
  A. Azure virtual machines
  D. Azure virtual networks

  ---

  Explanation

  Firewall is really not directly protecting the Virtual Networks though DDOS would have been ideal for VNETS

• Question 116:

  Which pillar of identity relates to tracking the resources accessed by a user?

  A. authorization
  B. auditing
  C. administration
  D. authentication
  B. auditing

  ---

  Explanation

  Audit logs in Azure Active Directory

  As an IT administrator, you want to know how your IT environment is doing. The information about your system's health enables you to assess whether and how you need to respond to potential issues.

  To support you with this goal, the Azure Active Directory portal gives you access to three activity logs:

  Sign-ins ?Information about sign-ins and how your resources are used by your users.

  Audit ?Information about changes applied to your tenant such as users and group management or updates applied to your tenant's resources. Provisioning ?Activities performed by the provisioning service, such as the creation of a group in ServiceNow or a user imported from Workday.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-audit-logs

• Question 117:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

• Question 118:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point

  

  

  ---

  Box 1: No

  Microsoft Sentinel data connectors are available for non-Microsoft services like Amazon Web Services.

  Box 2: Yes

  Once you have connected your data sources to Microsoft Sentinel, you can visualize and monitor the data using the Microsoft Sentinel adoption of Azure Monitor Workbooks, which provides versatility in creating custom dashboards. While the Workbooks are displayed differently in Microsoft Sentinel, it may be useful for you to see how to create interactive reports with Azure Monitor Workbooks. Microsoft Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source.

  Box 3: Yes

  To help security analysts look proactively for new anomalies that weren't detected by your security apps or even by your scheduled analytics rules, Microsoft Sentinel's built-in hunting queries guide you into asking the right questions to find issues in the data you already have on your network.

  References:

  https://docs.microsoft.com/en-us/azure/sentinel/data-connectors-referencehttps://docs.microsoft.com/en-us/azure/sentinel/monitor-your-datahttps://docs.microsoft.com/en-us/azure/sentinel/hunting

• Question 119:

  Which three authentication methods does Windows Hello for Business support? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. fingerprint
  B. facial recognition
  C. PIN
  D. email verification
  E. security question
  A. fingerprint
  B. facial recognition
  C. PIN

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication

• Question 120:

  What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

  A. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
  B. Azure Multi-Factor Authentication (MFA)
  C. Azure Active Directory (Azure AD) Identity Protection
  D. conditional access policies
  A. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

  ---

  Explanation

  Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment.

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure