Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 151:

  What is an assessment in Compliance Manager?

  A. A grouping of controls from a specific regulation, standard or policy.
  B. Recommended guidance to help organizations align with their corporate standards.
  C. A dictionary of words that are not allowed in company documents.
  D. A policy initiative that includes multiple policies.
  A. A grouping of controls from a specific regulation, standard or policy.

  ---

  Explanation

  Microsoft Purview Compliance Manager is a feature in the Microsoft Purview compliance portal that helps you manage your organization's compliance requirements with greater ease and convenience. Compliance Manager can help you throughout your compliance journey, from taking inventory of your data protection risks to managing the complexities of implementing controls, staying current with regulations and certifications, and reporting to auditors.

  Watch the video below to learn how Compliance Manager can help simplify how your organization manages compliance:

  Compliance Manager helps simplify compliance and reduce risk by providing: Pre-built assessments for common industry and regional standards and regulations, or custom assessments to meet your unique compliance needs (available assessments depend on your licensing agreement; learn more). Workflow capabilities to help you efficiently complete your risk assessments through a single tool.

  Detailed step-by-step guidance on suggested improvement actions to help you comply with the standards and regulations that are most relevant for your organization. For actions that are managed by Microsoft, you'll see implementation details and audit results.

  A risk-based compliance score to help you understand your compliance posture by measuring your progress in completing improvement actions.

  https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide#assessments

• Question 152:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

• Question 153:

  Which Microsoft 365 feature allows organizations to retain content for a specific period and then delete it automatically?

  A. Sensitivity labels
  B. Retention policies
  C. Data loss prevention (DLP)
  D. eDiscovery
  B. Retention policies

  ---

  Explanation

  Retention policies help organizations manage data lifecycle by retaining content for a specified period and deleting it automatically after that period expires.

• Question 154:

  DRAG DROP

  You are evaluating the compliance score in Compliance Manager.

  Match the compliance score action subcategories to the appropriate actions.

  To answer, drag the appropriate action subcategory from the column on the left to its action on the right. Each action subcategory may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Preventative

  Preventative actions address specific risks. For example, protecting information at rest using encryption is a preventative action against attacks and breaches. Separation of duties is a preventative action to manage conflict of interest and guard against fraud.

  Box 2: Detective

  Detective actions actively monitor systems to identify irregular conditions or behaviors that represent risk, or that can be used to detect intrusions or breaches. Examples include system access auditing and privileged administrative actions. Regulatory compliance audits are a type of detective action used to find process issues.

  Box 3: Corrective

  Corrective actions try to keep the adverse effects of a security incident to a minimum, take corrective action to reduce the immediate effect, and reverse the damage if possible. Privacy incident response is a corrective action to limit damage and restore systems to an operational state after a breach.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation

• Question 155:

  What are two capabilities of Microsoft Defender for Endpoint? Each correct selection presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. automated investigation and remediation
  B. transport encryption
  C. shadow IT detection
  D. attack surface reduction
  A. automated investigation and remediation
  D. attack surface reduction

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint?view=o365-worldwide

• Question 156:

  Which authentication method is considered passwordless in Microsoft Entra ID?

  A. Security questions
  B. SMS verification
  C. Windows Hello for Business
  D. Email verification
  C. Windows Hello for Business

  ---

  Explanation

  Windows Hello for Business is a passwordless authentication method that uses biometrics or PIN tied to a device, improving security by eliminating traditional passwords.

• Question 157:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Advanced Audit helps organizations to conduct forensic and compliance investigations by increasing audit log retention.

  Box 2: No

  Box 3: Yes

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide

• Question 158:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

• Question 159:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

• Question 160:

  You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure.

  Which security methodology does this represent?

  A. threat modeling
  B. identity as the security perimeter
  C. defense in depth
  D. the shared responsibility model
  C. defense in depth

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/2-what-is-defense-in-depth