Microsoft Fundamentals SC-900 Questions & Answers

• Question 181:

  What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

  A. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

  B. Azure Multi-Factor Authentication (MFA)

  C. Azure Active Directory (Azure AD) Identity Protection

  D. conditional access policies

  Correct Answer: A

  Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment.

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

• Question 182:

  Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

  A. Microsoft Secure Score

  B. Productivity Score

  C. Secure score in Azure Security Center

  D. Compliance score

  Correct Answer: D

  The Compliance Manager dashboard displays your overall compliance score. This score measures your progress in completing recommended improvement actions within controls. Your score can help you understand your current compliance posture. It can also help you prioritize actions based on their potential to reduce risk.

  A score value is assigned at these levels:

  *

  Improvement action: Each action has a different impact on your score depending on the potential risk involved. See Action types and points below for details.

  *

  Assessment: This score is calculated using improvement action scores. Each Microsoft action and each improvement action managed by your organization is counted once, regardless of how often it's referenced in a control.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide

• Question 183:

  Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?

  A. the Microsoft Endpoint Manager admin center

  B. Azure Cost Management + Billing

  C. Microsoft Service Trust Portal

  D. the Azure Active Directory admin center

  Correct Answer: C

  The Microsoft Service Trust Portal contains details about Microsoft's implementation of controls and processes that protect our cloud services and the customer data therein.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide

• Question 184:

  What do you use to provide real-time integration between Azure Sentinel and another security source?

  A. Azure AD Connect

  B. a Log Analytics workspace

  C. Azure Information Protection

  D. a connector

  Correct Answer: D

  To on-board Azure Sentinel, you first need to connect to your security sources. Azure Sentinel comes with a number of connectors for Microsoft solutions, including Microsoft 365 Defender solutions, and Microsoft 365 sources, including Office 365, Azure AD, Microsoft Defender for Identity, and Microsoft Cloud App Security, etc.

  Reference: https://docs.microsoft.com/en-us/azure/sentinel/overview

• Question 185:

  Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

  A. Adoption Score

  B. Microsoft Secure Score

  C. Secure score in Microsoft Defender for Cloud

  D. Compliance score

  Correct Answer: D

  https://learn.microsoft.com/en-us/purview/compliance-score-calculation

• Question 186:

  You have an Azure subscription.

  You need to implement approval-based, time-bound role activation.

  What should you use?

  A. access reviews in Azure AD

  B. Azure AD Privileged Identity Management (PIM)

  C. Azure AD Identity Protection

  D. Conditional access in Azure AD

  Correct Answer: B

  https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

• Question 187:

  What should you use in the Microsoft 365 Defender portal to view security trends and track the protection status of identities?

  A. Reports

  B. Incidents

  C. Hunting

  D. Secure score

  Correct Answer: A

  Keywords = trends and track = Reports

• Question 188:

  Which portal contains the solution catalog?

  A. Microsoft Purview compliance portal

  B. Microsoft 365 Defender portal

  C. Microsoft 365 admin center

  D. Microsoft 365 Apps admin center

  Correct Answer: A

  https://learn.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-solution-catalog?view=o365-worldwide