Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 191:

  You need to create a data loss prevention (DLP) policy.

  What should you use?

  A. the Microsoft 365 admin center
  B. the Microsoft Endpoint Manager admin center
  C. the Microsoft 365 Defender portal
  D. the Microsoft 365 Compliance center
  A. the Microsoft 365 admin center

  ---

  Explanation

  "you can configure DLP policies for all workloads through the Microsoft Purview compliance portal,"

  https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlp-policy

• Question 192:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender/incidents-overview?view=o365-worldwide

• Question 193:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Box: know

  Multifactor authentication combines two or more independent credentials: what the user knows, such as a password; what the user has, such as a security token; and what the user is, by using biometric verification methods.

  References:

  https://www.techtarget.com/searchsecurity/definition/multifactor-authentication-MFA

• Question 194:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Azure Key Vault can store application secrets.

  Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets.

  References:

  https://docs.microsoft.com/en-us/azure/key-vault/secrets/quick-create-portal

• Question 195:

  What is the purpose of Azure Active Directory (Azure AD) Password Protection?

  A. to control how often users must change their passwords
  B. to identify devices to which users can sign in without using multi-factor authentication (MFA)
  C. to encrypt a password by using globally recognized encryption standards
  D. to prevent users from using specific words in their passwords
  D. to prevent users from using specific words in their passwords

  ---

  Explanation

  Azure AD Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization.

  With Azure AD Password Protection, default global banned password lists are automatically applied to all users in an Azure AD tenant. To support your own business and security needs, you can define entries in a custom banned password list.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises

• Question 196:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Asymmetric encryption uses a mathematically related pair of keys for encryption and decryption: a public key and a private key. If the public key is used for encryption, then the related private key is used for decryption. If the private key is used for encryption, then the related public key is used for decryption.

  Box 2: No

  Symmetric encryption uses the same key to perform both encryption and decryption functions. Symmetric encryption uses a shared private key while asymmetric encryption uses a public/private key pair. Another difference between asymmetric and symmetric encryption is the length of the keys.

  Box 3: No

  Hashing is on-way.

  Decryption of a "hash" is impossible.

  References:

  https://www.techtarget.com/searchsecurity/definition/asymmetric-cryptographyhttps://www.techtarget.com/searchsecurity/definition/asymmetric-cryptography

• Question 197:

  When a user authenticates by using passwordless sign-in, what should the user select in the Microsoft Authenticator app?

  A. an answer to a security question
  B. a number
  C. an alphanumeric key
  D. a passphrase
  B. a number

• Question 198:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Microsoft Exchange Online does not natively support Information Barriers for restricting communication between users. Information Barriers are typically a feature found in Microsoft Teams and SharePoint Online to prevent certain users or groups from communicating or collaborating with each other.

• Question 199:

  What is a characteristic of a sensitivity label in Microsoft 365?

  A. encrypted
  B. restricted to predefined categories
  C. persistent
  C. persistent

  ---

  Explanation

  How sensitivity labels work in Power BI

  When you apply a sensitivity label to Power BI content and files, it's similar to applying a tag on that resource that has the following benefits:

  Customizable - you can create categories for different levels of sensitive content in your organization, such as Personal, Public, General, Confidential, and Highly Confidential.

  Clear text - since the label is in clear text, it's easy for users to understand how to treat the content according to sensitivity label guidelines.

  Persistent - after a sensitivity label has been applied to content, it accompanies that content when it's exported to Excel, PowerPoint and PDF files, downloaded to .pbix, or saved (in Desktop) and becomes the basis for applying and enforcing policies.

  References:

  https://docs.microsoft.com/en-us/power-bi/enterprise/service-security-sensitivity-label-overview

• Question 200:

  Which Microsoft 365 compliance feature can you use to encrypt content automatically based on specific conditions?

  A. Content Search
  B. sensitivity labels
  C. retention policies
  D. eDiscovery
  B. sensitivity labels

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection?view=o365-worldwide