SC-900 Online Practice Questions and Answers

Correct Answer:

Box 1: Yes

System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks.

Box 2: Yes

Box 3: Yes

If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure.

Reference:

https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls

Correct Answer:

Box 1: No Compliance Manager tracks Microsoft managed controls, customer-managed controls, and shared controls. Box 2: Yes

Box 3: Yes Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide

Correct Answer:

Correct Answer:

Box 1: Yes

Conditional access policies can be applied to all users

Box 2: No

Conditional access policies are applied after first-factor authentication is completed.

Box 3: Yes

Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/sentinel/overview

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview

Correct Answer:

Sign in to Compliance Manager

Go to the Microsoft Purview compliance portal and sign in with your Microsoft 365 global administrator account.

Select Compliance Manager on the left navigation pane. You'll arrive at your Compliance Manager dashboard.

The direct link to access Compliance Manager is https://compliance.microsoft.com/compliancemanager Note: Microsoft 365 compliance is now called Microsoft Purview and the solutions within the compliance area have been rebranded. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup

Correct Answer:

Box 1: vulnerabilities Microsoft 365 Defender portal is the new home for monitoring and managing security across your identities, data, devices, and apps, you will need to access various portals for certain specialized tasks. It used to monitor and respond to threat activity and strengthen security posture across your identities, email, data, endpoints, and apps with Microsoft 365 Defender

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/portals

Correct Answer: A

Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

Correct Answer: B

Reference: https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

Correct Answer: A

Microsoft Information Protection - Trainable Classifiers

Leverage user-friendly, pre-trained or trainable Machine Learning classifiers to identify various types of content in your organization.

Microsoft provides a list of classifiers which are pre-trained (based on sample documents like Legal, Finance, Manufacturing, Supply Chain etc.) and use Machine Learning to identify the classification of the documents in user-configured

target locations.

Incorrect:

Not B: How is activity explorer helpful to a compliance administrator?

Activity explorer provides a historical view of activities on your labeled content. The activity information is collected from the Microsoft 365 unified audit logs, transformed, and made available in the Activity explorer UI.

Creating a custom trainable classifier first involves giving it samples that are human picked and positively match the category.

Not C: Electronic discovery, or eDiscovery, is the process of identifying and delivering electronic information that can be used as evidence in legal cases.

Not D: Content explorer shows a current snapshot of the items that have a sensitivity label, a retention label or have been classified as a sensitive information type in your organization.

Reference: https://www.infotechtion.com/post/microsoft-trainable-classifiers

Correct Answer: D

Correct Answer: AE

A: The Devices at risk card includes a View details button. Selecting that button takes us to the Device inventory page, as shown in the following image

E: The Microsoft 365 Defender portal cards fall into these categories:

Identities- Monitor the identities in your organization and keep track of suspicious or risky behaviors. Here you can find the Users at risk card.

Data - Help track user activity that could lead to unauthorized data disclosure.

Devices - Get up-to-date information on alerts, breach activity, and other threats on your devices.

Apps - Gain insight into how cloud apps are being used in your organization.

Incorrect:

Not C: The Service Health card can be reached from the Microsoft 365 admin center.

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-business/mdb-respond-mitigate-threats

Correct Answer: D

Correct Answer: B

When using a user-assigned managed identity, you assign the managed identity to the "source" Azure Resource, such as a Virtual Machine, Azure Logic App or an Azure Web App.

What should you use to associate the same identity to more than one Azure virtual machine? User assigned managed identities can be used on more than one resource.

Reference: https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview