Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 141:

  What can you use to provision Azure resources across multiple subscriptions in a consistent manner?

  A. Microsoft Defender for Cloud
  B. Azure Blueprints
  C. Microsoft Sentinel
  D. Azure Policy
  B. Azure Blueprints

• Question 142:

  Which two cards are available in the Microsoft 365 Defender portal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Devices at risk
  B. Compliance Score
  C. Service Health
  D. User Management
  E. Users at risk
  A. Devices at risk
  E. Users at risk

  ---

  Explanation

  A: The Devices at risk card includes a View details button. Selecting that button takes us to the Device inventory page, as shown in the following image

  

  E: The Microsoft 365 Defender portal cards fall into these categories:

  Identities-Monitor the identities in your organization and keep track of suspicious or risky behaviors. Here you can find the Users at risk card.

  Data - Help track user activity that could lead to unauthorized data disclosure.

  Devices - Get up-to-date information on alerts, breach activity, and other threats on your devices.

  Apps - Gain insight into how cloud apps are being used in your organization.

  Incorrect:

  Not C: The Service Health card can be reached from the Microsoft 365 admin center.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-business/mdb-respond-mitigate-threats

• Question 143:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Box 2: No

  Conditional Access policies are enforced after first-factor authentication is completed.

  Box 3: Yes

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

• Question 144:

  Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

  A. Microsoft Secure Score
  B. Productivity Score
  C. Secure score in Azure Security Center
  D. Compliance score
  D. Compliance score

  ---

  Explanation

  The Compliance Manager dashboard displays your overall compliance score. This score measures your progress in completing recommended improvement actions within controls. Your score can help you understand your current compliance posture. It can also help you prioritize actions based on their potential to reduce risk.

  A score value is assigned at these levels:

  * Improvement action: Each action has a different impact on your score depending on the potential risk involved. See Action types and points below for details.

  * Assessment: This score is calculated using improvement action scores. Each Microsoft action and each improvement action managed by your organization is counted once, regardless of how often it's referenced in a control.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwidehttps://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide

• Question 145:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center?view=o365-worldwide

• Question 146:

  Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

  A. conditional access policies
  B. Azure AD Identity Protection
  C. Azure AD Privileged Identity Management (PIM)
  D. authentication method policies
  C. Azure AD Privileged Identity Management (PIM)

  ---

  Explanation

  Azure AD Privileged Identity Management (PIM) provides just-in-time privileged access to Azure AD and Azure resources

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

• Question 147:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Federation is a collection of domains that have established trust.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

• Question 148:

  What is a key benefit of using sensitivity labels?

  A. They prevent malware infections
  B. They classify and protect sensitive data
  C. They monitor network traffic
  D. They manage user roles
  B. They classify and protect sensitive data

  ---

  Explanation

  Sensitivity labels classify and protect data by applying encryption, access restrictions, or visual markings such as watermarks.

• Question 149:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  No - Sentinel uses Logic Apps to automate workflows via playbooks

  No - Sentinel uses analytics to correlate alerts into incidents

  Yes -

  https://learn.microsoft.com/en-us/azure/sentinel/overview#hunt-for-security-threats-by-using-built-in-queries

• Question 150:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Box 2: Yes

  Leaked Credentials indicates that the user's valid credentials have been leaked.

  Box 3: Yes

  Multi-Factor Authentication can be required based on conditions, one of which is user risk.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protectionhttps://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-riskshttps://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-risk-based-sspr-mfa