Microsoft Fundamentals SC-900 Questions & Answers

• Question 21:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

• Question 22:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Authentication

  What is the difference between authentication and authorization in Azure?

  In simple terms, authentication is the process of verifying who a user is, while authorization is the process of verifying what they have access to.

  Reference: https://auth0.com/docs/get-started/identity-fundamentals/authentication-and-authorization

• Question 23:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

• Question 24:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Box 1: vulnerabilities Microsoft 365 Defender portal is the new home for monitoring and managing security across your identities, data, devices, and apps, you will need to access various portals for certain specialized tasks. It used to monitor and respond to threat activity and strengthen security posture across your identities, email, data, endpoints, and apps with Microsoft 365 Defender

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/portals

• Question 25:

  HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

• Question 26:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-admin-mfa

• Question 27:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

• Question 28:

  HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  Microsoft Secure Score has updated improvement actions to support security defaults in Azure Active Directory, which make it easier to help protect your organization with pre-configured security settings for common attacks.

  If you turn on security defaults, you'll be awarded full points for the following improvement actions:

  Ensure all users can complete multi-factor authentication for secure access (9 points)

  Require MFA for administrative roles (10 points)

  Enable policy to block legacy authentication (7 points)

  Box 2: Yes

  Each improvement action is worth 10 points or less, and most are scored in a binary fashion. If you implement the improvement action, like create a new policy or turn on a specific setting, you get 100% of the points. For other improvement

  actions, points are given as a percentage of the total configuration.

  Note: Following the Secure Score recommendations can protect your organization from threats. From a centralized dashboard in the Microsoft 365 Defender portal, organizations can monitor and work on the security of their Microsoft 365

  identities, apps, and devices.

  Box 3: Yes

  Microsoft Secure Score is a measurement of an organization's security posture, with a higher number indicating more improvement actions taken.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score

• Question 29:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes A certificate is required that provides a private and a public key. Box 2: Yes The public key is used to validate the private key that is associated with a digital signature. Box 3: NO

• Question 30:

  HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  From Microsoft Defender for cloud you can enable Microsoft Defender for Storage to get alerted about suspicious activities related to your storage resources.

  Note: Microsoft Defender for Storage is an Azure-native layer of security intelligence that detects unusual and potentially harmful attempts to access or exploit your storage accounts.

  Defender for Storage continually analyzes the telemetry stream generated by the Azure Blob Storage and Azure Files services. When potentially malicious activities are detected, security alerts are generated. These alerts are displayed in

  Microsoft Defender for Cloud, together with the details of the suspicious activity along with the relevant investigation steps, remediation actions, and security recommendations.

  Box 2: No Box 3: Yes

  Microsoft Defender for Cloud is a solution for cloud security posture management (CSPM) and cloud workload protection (CWP) that finds weak spots across your cloud configuration, helps strengthen the overall security posture of your environment, and can protect workloads across multicloud and hybrid environments from evolving threats.

  Microsoft Defender for Servers is one of the plans provided by Microsoft Defender for Cloud's enhanced security features. Defender for Servers protects your Windows and Linux machines in Azure, AWS, GCP, and on-premises.

  Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-servers-introduction