SC-900 Exam (Part 1)

Which of the following is NOT a Zero Trust guiding principle?

• A. Verify explicitly

• B. Least privileged access

• C. Assume breach.

• D. Multi factor authentication

Which of the following is NOT a type of identity?

• A. Users

• B. Services

• C. Devices

• D. Networks

Which of the following measures might an organization implement as part of the defense in-depth security methodology?

• A. Locating all its servers in a single physical location.

• B. Multi-factor authentication for all users.

• C. Ensuring there's no segmentation of your corporate network.

A compliance admin is looking for regulatory information relevant to a specific region, which one link will provide the needed information?

• A. Microsoft Privacy Principles.

• B. Service Trust Portal.

• C. Microsoft Compliance Manager.

Among the 4 pillars of identity, which pillar tells the story of how much assurance for a particular identity is enough.

• A. Administration

• B. Authentication

• C. Authorization

• D. Auditing

With federation, trust is always bidirectional.

• A. True

• B. False

How many editions of the azure active directory (AAD) are available?

• A. 1

• B. 2

• C. 3

• D. 4

An organization is launching a new app for its customers. Customers will use a sign-in screen that is customized with the organization's brand identity. Which type of Azure External identity solution should the organization use?

• A. Azure AD B2B

• B. Azure AD B2C

• Azure AD Hybrid identities

A system-assigned managed identity can be associated with more than one Azure resource.

• A. True

• B. False

A company's IT organization has been asked to find ways to reduce IT costs, without compromising security. Which feature should they consider implementing?

• A. Self-service password reset.

• B. Bio-metric sign-in on all devices.

• C. FIDO2.