Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 21:

  Which feature helps organizations track activities performed on labeled content?

  A. Content explorer
  B. Activity explorer
  C. Compliance Manager
  D. Audit log
  B. Activity explorer

  ---

  Explanation

  Activity explorer provides visibility into actions taken on labeled content, helping organizations monitor usage and potential risks.

• Question 22:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Box 2: Yes

  Identity Protection detects risks of many types, including:

  Anonymous IP address use

  Atypical travel

  Malware linked IP address

  Unfamiliar sign-in properties Leaked credentials Password spray and more...

  Box 3:Yes

  The risk signals can trigger remediation efforts such as requiring: perform multifactor authentication, reset their password using self-service password reset, or block access until an administrator takes action.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

• Question 23:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 24:

  What does the Zero Trust principle "verify explicitly" mean?

  A. Trust all internal users
  B. Always authenticate and authorize based on all available data
  C. Only verify external users
  D. Trust devices by default
  B. Always authenticate and authorize based on all available data

  ---

  Explanation

  Zero Trust requires continuous verification using multiple signals such as identity, location, and device compliance before granting access.

• Question 25:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Azure Active Directory B2C provides business-to-customer identity as a service. Your customers use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs.

  Box 2: No

  Azure AD B2C is a separate service from Azure Active Directory (Azure AD). It is built on the same technology as Azure AD but for a different purpose. It allows businesses to build customer facing applications, and then allow anyone to sign up into those applications with no restrictions on user account.

  Box 3: Yes

  Custom-branded identity solution

  Azure AD B2C is a white-label authentication solution. You can customize the entire user experience with your brand so that it blends seamlessly with your web and mobile applications.

  Customize every page displayed by Azure AD B2C when your users sign up, sign in, and modify their profile information. Customize the HTML, CSS, and JavaScript in your user journeys so that the Azure AD B2C experience looks and feels like it's a native part of your application.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory-b2c/overview

• Question 26:

  What can you use to view the Microsoft Secure Score for Devices?

  A. Microsoft Defender for Cloud Apps
  B. Microsoft Defender for Endpoint
  C. Microsoft Defender for Identity
  D. Microsoft Defender for Office 365
  B. Microsoft Defender for Endpoint

  ---

  Explanation

  Artikel

  12.05.2022

  3 Minuten Lesedauer

  Microsoft Secure Score for DevicesApplies to:

  1. Microsoft Defender for Endpoint Plan 2

  2. Microsoft Defender Vulnerability Management

  3. Microsoft 365 Defender

  Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

  To sign up for the Defender Vulnerability Management public preview or if you have any questions, contact us ([email protected]).

  Already have Microsoft Defender for Endpoint P2? Sign up for a free trial of the Defender Vulnerability Management Add-on.

  Configuration score is now part of vulnerability management as Microsoft Secure Score for Devices.

  Your score for devices is visible in the Defender Vulnerability Management dashboard of the Microsoft 365 Defender portal. A higher Microsoft Secure Score for Devices means your endpoints are more resilient from cybersecurity threat attacks. It reflects the collective security configuration state of your devices across the following categories:

  1. Application

  2. Operating system

  3. Network

  4. Accounts

  5. Security controls

  Select a category to go to the Security recommendations page and view the relevant recommendations.

  Turn on the Microsoft Secure Score connectorForward Microsoft Defender for Endpoint signals, giving Microsoft Secure Score visibility into the device security posture. Forwarded data is stored and processed in the same location as your Microsoft Secure Score data.

  Changes might take up to a few hours to reflect in the dashboard.

  1. In the navigation pane, go to Settings > Endpoints > General > Advanced features 2. Scroll down to Microsoft Secure Score and toggle the setting to On.

  3. Select Save preferences.

  How it worksMicrosoft Secure Score for Devices currently supports configurations set via Group Policy. Due to the current partial Intune support, configurations which might have been set through Intune might show up as misconfigured. Contact your IT Administrator to verify the actual configuration status in case your organization is using Intune for secure configuration management.

  The data in the Microsoft Secure Score for Devices card is the product of meticulous and ongoing vulnerability discovery process. It is aggregated with configuration discovery assessments that continuously:

  1. Compare collected configurations to the collected benchmarks to discover misconfigured assets 2. Map configurations to vulnerabilities that can be remediated or partially remediated (risk reduction)

  3. Collect and maintain best practice configuration benchmarks (vendors, security feeds, internal research teams) 4. Collect and monitor changes of security control configuration state from all assets

• Question 27:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

• Question 28:

  You have an Azure subscription.

  You need to implement approval-based, time-bound role activation.

  What should you use?

  A. access reviews in Azure AD
  B. Azure AD Privileged Identity Management (PIM)
  C. Azure AD Identity Protection
  D. Conditional access in Azure AD
  B. Azure AD Privileged Identity Management (PIM)

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

• Question 29:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 30:

  Which two types of devices can be managed by using Endpoint data loss prevention (Endpoint DLP)?

  Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Windows 11
  B. Linux
  C. iOS
  D. macOS
  E. Android
  A. Windows 11
  D. macOS