Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 221:

  Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

  A. Adoption Score
  B. Microsoft Secure Score
  C. Secure score in Microsoft Defender for Cloud
  D. Compliance score
  D. Compliance score

  ---

  Explanation

  https://learn.microsoft.com/en-us/purview/compliance-score-calculation

• Question 222:

  Which feature allows administrators to review and validate user access periodically?

  A. Access Reviews
  B. Conditional Access
  C. Azure RBAC
  D. Microsoft Sentinel
  A. Access Reviews

  ---

  Explanation

  Access Reviews enable organizations to regularly review user access to groups, applications, and roles to ensure appropriate permissions.

• Question 223:

  HOTSPOT

  Which service should you use to view your Azure secure score? To answer, select the appropriate service in the answer area.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/security-center/secure-score-access-and-track

• Question 224:

  In a Core eDiscovery workflow, what should you do before you can search for content?

  A. Create an eDiscovery hold.
  B. Run Express Analysis.
  C. Configure attorney-client privilege detection.
  D. Export and download results.
  A. Create an eDiscovery hold.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-core-ediscovery?view=o365-worldwide

• Question 225:

  What should you use in the Microsoft 365 Defender portal to view security trends and track the protection status of identities?

  A. Reports
  B. Incidents
  C. Hunting
  D. Secure score
  A. Reports

  ---

  Explanation

  Keywords = trends and track = Reports

• Question 226:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/governance/policy/overview

• Question 227:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 228:

  What can you use to deploy Azure resources across multiple subscriptions in a consistent manner?

  A. Microsoft Sentinel
  B. Microsoft Defender for Cloud
  C. Azure Policy
  D. Azure Blueprints
  D. Azure Blueprints

• Question 229:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Microsoft's identity solutions span on-premises and cloud-based capabilities. These solutions create a common user identity for authentication and authorization to all resources, regardless of location. We call this hybrid identity.

  With hybrid identity to Azure AD and hybrid identity management these scenarios become possible.

  To achieve hybrid identity with Azure AD, one of three authentication methods can be used, depending on your scenarios. The three methods are:

  Password hash synchronization (PHS) Pass-through authentication (PTA) Federation (AD FS)

  Note: Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash of a user's password from an on-premises Active Directory instance to a cloud-based Azure AD instance.

  Box 2: No

  Need to configure password synchronization.

  The user accounts created on-premises would then be synchronized to the cloud.

  Box 3: Yes

  Federated authentication

  Federated authentication is primarily for large enterprise organizations with more complex authentication requirements. AD DS identities are synchronized with Microsoft 365 and users accounts are managed on-premises. With federated authentication, users have the same password on-premises and in the cloud and they do not have to sign in again to use Microsoft 365.

  For third-party authentication and identity providers, on-premises directory objects may be synchronized to Microsoft 365 and cloud resource access that are primarily managed by a third-party identity provider (IdP). If your organization uses a third-party federation solution, you can configure sign-on with that solution for Microsoft 365 provided that the third-party federation solution is compatible with Azure AD.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-hybrid-identityhttps://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phshttps://learn.microsoft.com/en-us/microsoft-365/enterprise/deploy-identity-solution-identity-model?

• Question 230:

  Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. text message (SMS)
  B. Microsoft Authenticator app
  C. email verification
  D. phone call
  E. security question
  A. text message (SMS)
  B. Microsoft Authenticator app
  D. phone call

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods