Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 241:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

• Question 242:

  DRAG DROP

  Match the types of Conditional Access signals to the appropriate definitions.

  To answer, drag the appropriate Conditional Access signal type from the column on the left to its definition on the right. Each signal type may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

• Question 243:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/cloud-services-security-baseline

• Question 244:

  What is a function of Conditional Access session controls?

  A. prompting multi-factor authentication (MFA)
  B. enable limited experiences, such as blocking download of sensitive information
  C. enforcing device compliance
  D. enforcing client app compliance
  B. enable limited experiences, such as blocking download of sensitive information

  ---

  Explanation

  Conditional Access session controls enable user app access and sessions to be monitored and controlled in real time based on access and session policies. Based on this definition, the best answer for your question is B. enable limited experiences, such as blocking download of sensitive information.

  https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/conceptconditional-access-session

• Question 245:

  You have an Azure subscription that contains a Log Analytics workspace.

  You need to onboard Microsoft Sentinel.

  What should you do first?

  A. Create a hunting query.
  B. Correlate alerts into incidents.
  C. Connect to your security sources.
  D. Create a custom detection rule.
  C. Connect to your security sources.

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/sentinel/connect-data-sourcesAfteryouonboardMicrosoftSentinelintoyourworkspace,usedataconnectorstostartingestingyourdataintoMicrosoftSentinel.MicrosoftSentinelcomeswithmanyoutoftheboxconnectorsforMicrosoftservices,whichintegrateinrealtime.Forexample,theMicrosoft365Defenderconnectorisaservice-to-serviceconnectorthatintegratesdatafromOffice365,AzureActiveDirectory(AzureAD),MicrosoftDefenderforIdentity,andMicrosoftDefenderforCloudApps.

• Question 246:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Box: integrity

  Data integrity is a concept and process that ensures the accuracy, completeness, consistency, and validity of an organization's data. By following the process, organizations not only ensure the integrity of the data but guarantee they have accurate and correct data in their database.

  References:

  https://www.fortinet.com/resources/cyberglossary/data-integrity

• Question 247:

  Which Azure Active Directory (Azure AD) feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?

  A. network security groups (NSGs)
  B. Azure AD Privileged Identity Management (PIM)
  C. conditional access policies
  D. resource locks
  C. conditional access policies

• Question 248:

  Which three authentication methods can Azure AD users use to reset their password? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. mobile app notification
  B. text message to a phone
  C. security questions
  D. certificate
  E. picture password
  A. mobile app notification
  B. text message to a phone
  C. security questions

  ---

  Explanation

  Azure Active Directory (Azure AD) self-service password reset (SSPR) gives users the ability to change or reset their password, with no administrator or help desk involvement. If a user's account is locked or they forget their password, they can follow prompts to unblock themselves and get back to work. This ability reduces help desk calls and loss of productivity when a user can't sign in to their device or an application.

  Authentication methods

  When a user is enabled for SSPR, they must register at least one authentication method. We highly recommend that you choose two or more authentication methods so that your users have more flexibility in case they're unable to access one method when they need it. For more information, see What are authentication methods?.

  The following authentication methods are available for SSPR:

  Mobile app notification

  Mobile app code

  Email

  Mobile phone

  Office phone (available only for tenants with paid subscriptions)

  Security questions

  Users can only reset their password if they have registered an authentication method that the administrator has enabled.

  Note: Select authentication methods and registration options.

  When users need to unlock their account or reset their password, they're prompted for another confirmation method. This extra authentication factor makes sure that Azure AD finished only approved SSPR events. You can choose which authentication methods to allow, based on the registration information the user provides.

  1. From the menu on the left side of the Authentication methods page, set the Number of methods required to reset to 2.

  To improve security, you can increase the number of authentication methods required for SSPR.

  2. Choose the Methods available to users that your organization wants to allow. For this tutorial, check the boxes to enable the following methods:

  Mobile app notification

  Mobile app code

  Email

  Mobile phone

  You can enable other authentication methods, like Office phone or Security questions, as needed to fit your business requirements.

  3. To apply the authentication methods, select Save.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworkshttps://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr

• Question 249:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft 365 Compliance center.

  Add users to an insider risk management role group Complete the following steps to add users to an insider risk management role group:

  1. Sign into Microsoft Purview compliance portal using credentials for an admin account in your Microsoft 365 organization.

  2. In the Security & Compliance Center, go to Permissions. Select the link to view and manage roles in Office 365.

  3. Select the insider risk management role group you want to add users to, then select Edit role group.

  4. Select Choose members from the left navigation pane, then select Edit.

  5. Select Add and then select the checkbox for all users you want to add to the role group.

  6. Select Add, then select Done.

  7. Select Save to add the users to the role group. Select Close to complete the steps.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-configure?view=o365-worldwide

• Question 250:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365-worldwide