SC-900 - Kyndryl

An organization has deployed Microsoft 365 applications to all employees. Who is responsible for the security of the personal data relating to these employees?

• The organization.

• Microsoft, the SaaS provider.

• The shared responsibility between your organization and Microsoft.

Which of the following measures might an organization implement as part of the defense in-depth security methodology?

• Locating all its servers in a single physical location.

• Multi-factor authentication for all users.

• Ensuring there's no segmentation of your corporate network

The human resources organization want to ensure that stored employee data is encrypted. Which security mechanism would they use?

• Hashing

• Encryption in transit

• Encryption at rest

What type of security risk does a phishing scam pose?

• Ethical risk

• Physical risk

• Identity risk

What is a benefit of single sign-on?

• A central identity provider can be used.

• The user signs in once and then can access many applications or resources.

• Passwords always expire after 72 days.

Authentication is the process of doing what?

• Verifying that a user or device is who they say they are.

• he process of profiling user behavior

• Enabling federated services

Within your organization, all your users have Microsoft 365 cloud identities. Which identity model should you use?

• Hybrid
• Cloud-only

• On-premises only

You've been asked to implement conditional access for your organization, what must you do?

• Create and assign a policy that enforces organizational rules.

• Check that all users have multi-factor authentication enabled.

• Amend your apps to allow conditional access.

Your organization is project-oriented with employees often working on more than one project at a time. Which solution is best suited to managing user access to your organization’s resources?

• Azure Terms of Use.
• Identity protection.
• Entitlement management.

Admins in the organization are using the Microsoft 365 Defender portal on a daily basis. They want to quickly get an understanding of your organization's current security posture. Which capability in the Microsoft 365 Defender portal will they use?

• Reports.
• Secure score.
• Policies.