SC 900

Q1: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. All Azure Active Directory (Azure AD) license editions include the same features. You can manage an Azure Active Directory (Azure AD) tenant by using the Azure portal. You must deploy Azure virtual machines to host an Azure Active Directory (Azure AD) tenant.

Q2: Select the answer that correctly completes the sentence. ________ provides best practices from Microsoft employees, partners, and customers, including tools and guidance to assist in an Azure deployment. Azure Blueprints. Azure Policy. The Microsoft Cloud Adoption Framework for Azure. A resource lock.

Q3: Select the answer that correctly completes the sentence. ________ is used to identify, hold, and export electronic information that might be used in an investigation. Customer Lockbox. Data loss prevention (DLP). eDiscovery. A resource lock.

Q4: Select the answer that correctly completes the sentence. You can manage Microsoft Intune by using the ________. Azure Active Directory admin center. Microsoft 365 compliance center. Microsoft 365 Defender portal. Microsoft Endpoint Manager admin center.

Q5: Select the answer that correctly completes the sentence. Federation is used to establish ________ between organizations. multi-factor authentication (MFA). a trust relationship. user account synchronization. a VPN connection.

Q6: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. Applying system updates increases an organization’s secure score in Microsoft Defender for Cloud. The secure score in Microsoft Defender for Cloud can evaluate resources across multiple Azure subscriptions. Enabling multi-factor authentication (MFA) increases an organization’s secure score in Microsoft Defender for Cloud.

Q7: Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?. Microsoft Secure Score. Productivity Score. Secure score in Azure Security Center. Compliance score.

Q8: What do you use to provide real-time integration between Azure Sentinel and another security source?. Azure AD Connect. a Log Analytics workspace. Azure Information Protection. a connector.

Q9: Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?. the Microsoft Endpoint Manager admin center. Azure Cost Management + Billing. Microsoft Service Trust Portal. the Azure Active Directory admin center.

Q10: In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?. the management of mobile devices. the permissions for the user data stored in Azure. the creation and management of user accounts. the management of the physical hardware.

Q11: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. Verify explicitly is a guiding principle of Zero Trust. Use least privilege access is a guiding principle of Zero Trust. Trust but verify is a guiding principle of Zero Trust.

Q12: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. Microsoft provides customers with control over their privacy. Microsoft is transparent about data collection and use. Shared responsibility is a Microsoft privacy principle.

Q13: Select the answer that correctly completes the sentence. ________ a file makes the data in the file readable and usable to viewers that have the appropriate key. Archiving. Compressing. Deduplicating. Encrypting.

Q14: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. A digital signature requires the signer to have a private key. Verifying a digital signature requires the signer’s public key. Verifying a digital signature requires the signer’s private key.

Q15: Select the answer that correctly completes the sentence. A user must be ________ before the user can access Azure resources. authenticated. authorized. federated. registered.

Q16: Select the answer that correctly completes the sentence. After authentication, ________ determines whether a user can access a resource. federation. authorization. encryption. hashing.

Q17: Select the answer that correctly completes the sentence. Azure Active Directory (Azure AD) ________ allows you to securely share your company's applications and services with guest users from any other organization. business-to-business (B2B). business-to-customer (B2C). Conditional Access. Privileged Identity Management (PIM).

Q18: In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution. Plan. Manage. Adopt. Govern. Define Strategy.

Q19: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. In software as a service (SaaS), applying service packs to applications is the responsibility of the organization. In infrastructure as a service (IaaS), managing the physical network is the responsibility of the cloud provider. In all Azure cloud deployment types, managing the security of information and data is the responsibility of the organization.

Q20: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. Azure AD Connect can be used to implement hybrid identity. Hybrid identity requires the implementation of two Microsoft 365 tenants. Authentication of hybrid identities requires the synchronization of Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD).

Q21: ______ provides benchmark recommendations and guidance for protecting Azure services. Azure Application Insights. Azure Network Watcher. Log Analytics workspaces. Security baselines for Azure.

Q22: What is an example of encryption at rest?. encrypting communications by using a site-to-site VPN. encrypting a virtual machine disk. accessing a website by using an encrypted HTTPS connection. sending an encrypted email.

Q23: Which three statements accurately describe the guiding principles of Zero Trust?. Define the perimeter by physical locations. Use identity as the primary security boundary. Always verify the permissions of a user explicitly. Always assume that the user system can be breached. Use the network as the primary security boundary.

Q24: Which service should you use to view your Azure secure score? To answer, select the appropriate service in the answer area.

Q25: You are evaluating the compliance score in Compliance Manager. Match the compliance score action subcategories to the appropriate actions. Corrective. Detective. Preventative.

Q26: Compliance Manager can be directly accessed from the ______. Microsoft 365 admin center. Microsoft 365 Defender portal. Microsoft 365 Compliance Center. Microsoft Support portal.

Q27: For each of the following statements, mark the checkbox if the statement is Yes. Leave the checkbox blank if the statement is No. Enabling multi-factor authentication (MFA) increases the Microsoft Secure Score. A higher Microsoft Secure Score means a lower identified risk level in the Microsoft 365 tenant. Microsoft Secure Score measures progress in completing actions based on controls that include key regulations and standards for data protection and governance.

Q28: What can you use to provide a user with a two-hour window to complete an administrative task in Azure?. Azure Active Directory (Azure AD) Privileged Identity Management (PIM). Azure Multi-Factor Authentication (MFA). Azure Active Directory (Azure AD) Identity Protection. conditional access policies.

Q29: In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?. Active Directory Federation Services (AD FS). Microsoft Sentinel. Azure AD Connect. Azure AD Privileged Identity Management (PIM).