100% Free Real Updated SC-900 Questions & Answers Pass Your Exam Easily [Q77-Q95]

4.6/5 - (5 votes)

100% Free Real Updated SC-900 Questions & Answers Pass Your Exam Easily

Easily To Pass New SC-900 Verified & Correct Answers

Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals

The content of this exam was updated on July 26, 2021.

This certification is targeted to those looking to familiarize themselves with the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services.

This is a broad audience that may include business stakeholders, new or existing IT professionals, or students who have an interest in Microsoft security, compliance, and identity solutions.

Candidates should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft security, compliance, and identity solutions can span across these solution areas to provide a holistic and end-to-end solution.

Part of the requirements for: Microsoft Certified: Security, Compliance, and Identity Fundamentals

Download exam skills outline

Q77. Select the answer that correctly completes the sentence.

Q78. Select the answer that correctly completes the sentence.

Explanation
Graphical user interface, text, application Description automatically generated

Q79. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks.
Box 2: Yes
Box 3: Yes
If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure.

Q80. HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Section: Describe the Concepts of Security, Compliance, and Identity
Explanation:
Box 1: Yes
Box 2: Yes
Box 3: No
The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.
Reference:
https://docs.microsoft.com/en-us/security/zero-trust/

Q81. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application Description automatically generated

Box 1: Yes
You can use sensitivity labels to provide protection settings that include encryption of emails and documents to prevent unauthorized people from accessing this data.
Box 2: Yes
You can use sensitivity labels to mark the content when you use Office apps, by adding watermarks, headers, or footers to documents that have the label applied.
Box 3: Yes
You can use sensitivity labels to mark the content when you use Office apps, by adding headers, or footers to email that have the label applied.

Q82. Select the answer that correctly completes the sentence.

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview

Q83. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-device-management

Q84. Select the answer that correctly completes the sentence.

Q85. Select the answer that correctly completes the sentence.

Explanation
Graphical user interface, text, application Description automatically generated

Q86. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application, email Description automatically generated

Q87. Which score measures an organization’s progress in completing actions that help reduce risks associated to data protection and regulatory standards?

Microsoft Secure Score

Productivity Score

Secure score in Azure Security Center

Compliance score

Section: Describe the Concepts of Security, Compliance, and Identity
Explanation/Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365- worldwide

Q88. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/security/zero-trust/

Q89. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Q90. What is an example of encryption at rest?

sending an encrypted email

encrypting communications by using a site-to-site VPN

encrypting a virtual machine disk

accessing a website by using an encrypted HTTPS connection

Q91. HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:

Section: Describe the Capabilities of Microsoft Security Solutions
Explanation/Reference:
https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

Q92. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/bastion/bastion-overview
https://docs.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal

Q93. Select the answer that correctly completes the sentence.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender/incidents-overview?view=o365-worldwide

Q94. What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Azure Multi-Factor Authentication (MFA)

Azure Active Directory (Azure AD) Identity Protection

conditional access policies

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment

Q95. You need to create a data loss prevention (DLP) policy. What should you use?

the Microsoft 365 admin center

the Microsoft Endpoint Manager admin center

the Microsoft 365 Defender portal

the Microsoft 365 Compliance center

Loading …