Free SC-900 Exam Dumps Preview

Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

References:
https://docs.microsoft.com/en-us/defender-for-identity/what-is

References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview
https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-features

https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
Responsibility always retained by the customer:
1. Information and Data
2. Devices (Mobile and PCs)
3. Accounts and Identities

Box 1: No
Microsoft Sentinel data connectors are available for non-Microsoft services like Amazon Web Services.

Box 2: Yes
Once you have connected your data sources to Microsoft Sentinel, you can visualize and monitor the data using the Microsoft Sentinel adoption of Azure Monitor Workbooks, which provides versatility in creating custom dashboards. While the Workbooks are displayed differently in Microsoft Sentinel, it may be useful for you to see how to create interactive reports with Azure Monitor Workbooks. Microsoft Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source.

Box 3: Yes
To help security analysts look proactively for new anomalies that weren't detected by your security apps or even by your scheduled analytics rules, Microsoft Sentinel's built-in hunting queries guide you into asking the right questions to find issues in the data you already have on your network.

References:
https://docs.microsoft.com/en-us/azure/sentinel/data-connectors-reference
https://docs.microsoft.com/en-us/azure/sentinel/monitor-your-data
https://docs.microsoft.com/en-us/azure/sentinel/hunting

Azure Defender for Cloud Microsoft Defender for Cloud is a solution for cloud security posture management (CSPM) and cloud workload protection (CWP) that finds weak spots across your cloud configuration, helps strengthen the overall security posture of your environment, and can protect workloads across multicloud and hybrid environments from evolving threats.

Microsoft Defender for Servers is one of the plans provided by Microsoft Defender for Cloud's enhanced security features. Defender for Servers protects your Windows and Linux machines in Azure, AWS, GCP, and on-premises.

References:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction
https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-servers-introduction

Azure Key Vault can store application secrets.
Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets.

References:
https://docs.microsoft.com/en-us/azure/key-vault/secrets/quick-create-portal

References:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/get-started/

You can create an RDP connection to a Windows VM using Azure Bastion.

References:
https://docs.microsoft.com/en-us/azure/bastion/bastion-connect-vm-rdp-windows

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management?view=o365-worldwide

To on-board Azure Sentinel, you first need to connect to your security sources. Azure Sentinel comes with a number of connectors for Microsoft solutions, including Microsoft 365 Defender solutions, and Microsoft 365 sources, including Office 365, Azure AD, Microsoft Defender for Identity, and Microsoft Cloud App Security, etc.

References:
https://docs.microsoft.com/en-us/azure/sentinel/overview

When you register an application through the Azure portal, an application object and service principal are automatically created in your home directory or tenant.

References:
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal

Box: know
Multifactor authentication combines two or more independent credentials: what the user knows, such as a password; what the user has, such as a security token; and what the user is, by using biometric verification
methods.

References:
https://www.techtarget.com/searchsecurity/definition/multifactor-authentication-MFA

The Compliance Manager dashboard displays your overall compliance score. This score measures your progress in completing recommended improvement actions within controls. Your score can help you understand your current compliance posture. It can also help you prioritize actions based on their potential to reduce risk.

A score value is assigned at these levels:

* Improvement action: Each action has a different impact on your score depending on the potential risk involved. See Action types and points below for details.

* Assessment: This score is calculated using improvement action scores. Each Microsoft action and each improvement action managed by your organization is counted once, regardless of how often it's referenced in a control.

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide

https://learn.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-solution-catalog?view=o365-worldwide

References:
https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/2-what-is-defense-in-depth

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide
https://docs.microsoft.com/en-us/cloud-app-security/azip-integration

Azure AD Privileged Identity Management (PIM) provides just-in-time privileged access to Azure AD and Azure resources

References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Box 1: Yes
Azure Active Directory B2C provides business-to-customer identity as a service. Your customers use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs.

Box 2: No
Azure AD B2C is a separate service from Azure Active Directory (Azure AD). It is built on the same technology as Azure AD but for a different purpose. It allows businesses to build customer facing applications, and then allow anyone to sign up into those applications with no restrictions on user account.

Box 3: Yes
Custom-branded identity solution
Azure AD B2C is a white-label authentication solution. You can customize the entire user experience with your brand so that it blends seamlessly with your web and mobile applications.

Customize every page displayed by Azure AD B2C when your users sign up, sign in, and modify their profile information. Customize the HTML, CSS, and JavaScript in your user journeys so that the Azure AD
B2C experience looks and feels like it's a native part of your application.

References:
https://learn.microsoft.com/en-us/azure/active-directory-b2c/overview

References:
https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies#create-a-new-file-policy

Box 1: No
Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service.

Box 2: Yes
Microsoft 365 uses Azure Active Directory (Azure AD). Azure Active Directory (Azure AD) is included with your Microsoft 365 subscription.

Box 3: Yes
Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service.

References:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

References:
https://docs.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview

https://learn.microsoft.com/en-us/purview/endpoint-dlp-getting-started?view=o365-worldwide#see-also
Microsoft Endpoint DLP allows you to monitor onboarded Windows 10, and Windows 11 and onboarded macOS devices running any of the three latest released versions.

There is also an variation of this question where iOS is mentioned.

iOS = for mobile OS
MacOS = for desktops/laptops iOS = not supported for Endpoint Data Loss Prevention.

Conditional Access policies can enforce device compliance requirements before granting access to resources, ensuring only secure devices are allowed.

"you can configure DLP policies for all workloads through the Microsoft Purview compliance portal,"
https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlp-policy

Box 1: No
Software as a service is a method for delivering software applications over the internet, on demand, and typically on a subscription basis. With SaaS, cloud providers host and manage the software application and underlying infrastructure. These providers also handle any maintenance, like software upgrades and security patching. Users connect to the application over the internet, usually with a web browser on their phone, tablet, or PC.

Box 2: Yes
IaaS lets you bypass the cost and complexity of buying and managing physical servers and datacenter infrastructure. Each resource is offered as a separate service component, and you only pay for a particular resource for as long as you need it. A cloud computing service provider like Azure manages the infrastructure, while you purchase, install, configure, and manage your own software-including operating systems, middleware, and applications.

Box 3: No
With the appropriate service agreement, a cloud service provider can offer better security for your applications and data than the security you would attain in house.

References:
https://azure.microsoft.com/en-ca/resources/cloud-computing-dictionary/what-is-iaas/

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal