Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 61:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 62:

  What should you use to ensure that the members of an Azure Active Directory group use multi-factor authentication (MFA) when they sign in?

  A. Azure Active Directory (Azure AD) Identity Protection
  B. a conditional access policy
  C. Azure role-based access control (Azure RBAC)
  D. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
  B. a conditional access policy

  ---

  Explanation

  The recommended way to enable and use Azure AD Multi-Factor Authentication is with Conditional Access policies. Conditional Access lets you create and define policies that react to sign-in events and that request additional actions before a user is granted access to an application or service.

• Question 63:

  DRAG DROP

  Match the Microsoft Defender for Office 365 feature to the correct description.

  To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

• Question 64:

  What can you protect by using the information protection solution in the Microsoft 365 compliance center?

  A. computers from zero-day exploits
  B. users from phishing attempts
  C. files from malware and viruses
  D. sensitive data from being exposed to unauthorized users
  D. sensitive data from being exposed to unauthorized users

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection?view=o365-worldwide

• Question 65:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook

• Question 66:

  You need to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site.

  What should you apply to the site?

  A. a data loss prevention (DLP) policy
  B. a retention policy
  C. an insider risk policy
  D. a sensitivity label policy
  B. a retention policy

  ---

  Explanation

  In order to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site, you should enable the Recycle Bin feature in SharePoint and set the retention period to one year.

• Question 67:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  A certificate is required that provides a private and a public key.

  Box 2: Yes

  The public key is used to validate the private key that is associated with a digital signature.

  Box 3: NO

• Question 68:

  What should you use to associate the same identity to more than one Azure virtual machine?

  A. an Azure AD user account
  B. a user-assigned managed identity
  C. a system-assigned managed identity
  D. an Azure AD security group
  B. a user-assigned managed identity

  ---

  Explanation

  When using a user-assigned managed identity, you assign the managed identity to the "source" Azure Resource, such as a Virtual Machine, Azure Logic App or an Azure Web App.

  What should you use to associate the same identity to more than one Azure virtual machine?

  User assigned managed identities can be used on more than one resource.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

• Question 69:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

  https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-features

• Question 70:

  You have an Azure subscription that contains multiple resources.

  You need to assess compliance and enforce standards for the existing resources.

  What should you use?

  A. the Anomaly Detector service
  B. Microsoft Sentinel
  C. Azure Blueprints
  D. Azure Policy
  D. Azure Policy