Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 11:

  You need to test Microsoft Office 365 Message Encryption (OME) capabilities for your company. The test must verify the following information:

  1. The acquired default template names

  2. The encryption and decryption verification status

  Which PowerShell cmdlet should you run?

  A. Test-ClientAccessRule
  B. Test-Mailflow
  C. Test-OAuthConnectivity
  D. Test-IRMConfiguration
  D. Test-IRMConfiguration

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities?view=o365-worldwide

• Question 12:

  What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?

  A. automated remediation
  B. automated investigation
  C. advanced hunting
  D. network protection
  D. network protection

  ---

  Explanation

  Network protection helps protect devices from Internet-based events. Network protection is an attack surface reduction capability.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide

• Question 13:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overviewAserviceprincipalofaspecialtypeiscreatedinAzureADfortheidentity.TheserviceprincipalistiedtothelifecycleofthatAzureresource.WhentheAzureresourceisdeleted,Azureautomaticallydeletestheserviceprincipalforyou.

• Question 14:

  Which three statements accurately describe the guiding principles of Zero Trust? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Define the perimeter by physical locations.
  B. Use identity as the primary security boundary.
  C. Always verify the permissions of a user explicitly.
  D. Always assume that the user system can be breached.
  E. Use the network as the primary security boundary.
  B. Use identity as the primary security boundary.
  C. Always verify the permissions of a user explicitly.
  D. Always assume that the user system can be breached.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/security/zero-trust/

• Question 15:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  A certificate is required that provides a private and a public key.

  Box 2: Yes

  The public key is used to validate the private key that is associated with a digital signature.

  Box 3: No

  References:

  https://support.microsoft.com/en-us/office/obtain-a-digital-certificate-and-create-a-digital-signature-e3d9d813-3305-4164-a820-2e063d86e512https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/fin-ops/organization-administration/electronic-signature-overview

• Question 16:

  What is the maximum number of resources that Azure DDoS Protection Standard can protect without additional costs?

  A. 50
  B. 100
  C. 500
  D. 1000
  B. 100

  ---

  Explanation

  Network Protection will have a fixed monthly charge, which includes protection for 100 public IP resources. Protection for additional public IP resources will be charged on a monthly per-resource basis. A single Azure DDoS Protection plan in a tenant can be used across multiple subscriptions.

  Note: A resource is a Public IP attached to an IaaS VM, Load Balancer (Classic & Standard Load Balancers), Application Gateway (including WAF) cluster, Service Fabric or an IaaS based Network Virtual Appliance (NVA). Protection also covers public IP ranges brought to Azure via custom IP prefixes (BYOIPs). Additional protected resources may be added in the future.

  References:

  https://azure.microsoft.com/en-us/pricing/details/ddos-protection/

• Question 17:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  The MailItemsAccessed event is a mailbox auditing action and is triggered when mail data is accessed by mail protocols and mail clients.

  Box 2: No

  Basic Audit retains audit records for 90 days.

  Advanced Audit retains all Exchange, SharePoint, and Azure Active Directory audit records for one year. This is accomplished by a default audit log retention policy that retains any audit record that contains the value of Exchange, SharePoint, or AzureActiveDirectory for the Workload property (which indicates the service in which the activity occurred) for one year.

  Box 3: yes

  Advanced Audit in Microsoft 365 provides high-bandwidth access to the Office 365 Management Activity API.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwidehttps://docs.microsoft.com/en-us/microsoft-365/compliance/auditing-solutions-overview?view=o365-worldwide#licensing-requirementshttps://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#advanced-audit

• Question 18:

  Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription?

  A. resource health
  B. secure score
  C. the status of recommendations
  D. completed controls
  B. secure score

• Question 19:

  You are implementing a data classification solution.

  The research department at your company requires that documents containing programming code be labeled as Confidential. The department provides samples of the code from its document library. The solution must minimize administrative effort.

  What should you do?

  A. Create a custom classifier.
  B. Create a sensitive info type that uses Exact Data Match (EDM).
  C. Use the source code classifier.
  D. Create a sensitive info type that uses a regular expression.
  C. Use the source code classifier.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-learn-about?view=o365-worldwide

• Question 20:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.