Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 71:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Microsoft's identity solutions span on-premises and cloud-based capabilities. These solutions create a common user identity for authentication and authorization to all resources, regardless of location. We call this hybrid identity.

  With hybrid identity to Azure AD and hybrid identity management these scenarios become possible.

  To achieve hybrid identity with Azure AD, one of three authentication methods can be used, depending on your scenarios. The three methods are:

  Password hash synchronization (PHS) Pass-through authentication (PTA) Federation (AD FS)

  Note: Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash of a user's password from an on-premises Active Directory instance to a cloud-based Azure AD instance.

  Box 2: No

  Need to configure password synchronization.

  The user accounts created on-premises would then be synchronized to the cloud.

  Box 3: Yes

  Federated authentication

  Federated authentication is primarily for large enterprise organizations with more complex authentication requirements. AD DS identities are synchronized with Microsoft 365 and users accounts are managed on-premises. With federated authentication, users have the same password on-premises and in the cloud and they do not have to sign in again to use Microsoft 365.

  For third-party authentication and identity providers, on-premises directory objects may be synchronized to Microsoft 365 and cloud resource access that are primarily managed by a third-party identity provider (IdP). If your organization uses a third-party federation solution, you can configure sign-on with that solution for Microsoft 365 provided that the third-party federation solution is compatible with Azure AD.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-hybrid-identityhttps://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phshttps://learn.microsoft.com/en-us/microsoft-365/enterprise/deploy-identity-solution-identity-model?

• Question 72:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  YES - As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

  NO - The most restrictive lock in the inheritance takes precedence.

  NO - If you delete a resource group with a locked resource, the portal UI will give you an error and no resources are deleted.

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json

• Question 73:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intunehttps://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-device-management

• Question 74:

  What can you use to ensure that all the users in a specific group must use multi-factor authentication (MFA) to sign in to Azure AD?

  A. Azure Policy
  B. a communication compliance policy
  C. a Conditional Access policy
  D. a user risk policy
  C. a Conditional Access policy

• Question 75:

  Which solution performs security assessments and automatically generates alerts when a vulnerability is found?

  A. cloud security posture management (CSPM)
  B. DevSecOps
  C. cloud workload protection platform (CWPP)
  D. security information and event management (SIEM)
  A. cloud security posture management (CSPM)

• Question 76:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks.

  Box 2: Yes

  Box 3: Yes

  If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure.

  References:

  https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls

• Question 77:

  Which three forms of verification can be used with Azure AD Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution.

  NOTE: Each correct answer is worth one point.

  A. security questions
  B. the Microsoft Authenticator app
  C. SMS messages
  D. a smart card
  E. Windows Hello for Business
  B. the Microsoft Authenticator app
  C. SMS messages
  E. Windows Hello for Business

  ---

  Explanation

  Available verification methods

  When users sign in to an application or service and receive an MFA prompt, they can choose from one of their registered forms of additional verification. Users can access My Profile to edit or add verification methods.

  The following additional forms of verification can be used with Azure AD Multi-Factor Authentication:

  * Microsoft Authenticator

  Authenticator Lite (in Outlook)

  * Windows Hello for Business

  FIDO2 security key

  OATH hardware token (preview)

  OATH software token

  * SMS

  Voice call References:

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

• Question 78:

  Which Microsoft 365 feature can you use to restrict communication and the sharing of information between members of two departments at your organization?

  A. sensitivity label policies
  B. Customer Lockbox
  C. information batteries
  D. Privileged Access Management (PAM)
  C. information batteries

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/information-barriers

• Question 79:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 80:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

  References:

  https://docs.microsoft.com/en-us/defender-for-identity/what-is