SC-900 Exam (Part 2)

Which of the following can be used to provide just-in-time access to resources?

• A. Azure AD Identity Protection

• B. Azure AD Privileged Identity Management

• C. Azure Multi-Factor Authentication

• D. Azure Blueprints

Which of the following provides "Network Address Translation"

• A. Azure Bastion

• B. Azure Firewall

• C. Network Security Group

• D. Azure DDoS protection

Which of the following provides XDR (Extended Detection & Response) capabilities

that helps to protect multi-cloud and hybrid workloads?

• A. Azure Policy

• B. Azure Defender

• C. Azure Blueprints

• D. Azure Identity Protection

Can Microsoft Defender for Endpoint be used for Windows 2016-based Azure Virtual Machine?

• A. Yes

• B. No

What is the maximum time frame for which you can retain audit logs in Microsoft 365?

• A. 1 month

• B. 1 year

• C. 5 year

• D. 10 year

Can Azure Bastion be used to restrict traffic from the Internet onto an Azure Virtual machine?

• A. Yes

• B. No

Azure Sentinel provides intelligent security analytics across your enterprise.

The data for this analysis is stored in ___________________ ?

• A. Azure Monitor

• B. Azure Blob Storage

• C. Azure DataLake

• D. Azure Log Analytics Workspace

A lead admin for an organization is looking to protect against malicious threats

posed by email messages, links (URLs), and collaboration tools. Which solution from the

Microsoft 365 Defender suite is best suited for this purpose?

• A. Microsoft Defender for Office 365.

• B. Microsoft Defender for Endpoint.

• C. Microsoft Defender for Identity.

Which of the following describes what an admin would need to select to view

security cards grouped by risk, detection trends, configuration, and health, among others?

• A. Group by topic.

• B. Group by risk

• C. Group by category

Your new colleagues on the admin team are unfamiliar with the concept of

shared controls in Compliance Manager. How would the concept of shared controls be

explained?

• A. Controls that both external regulators and Microsoft share responsibility for

  implementing.

• B. Controls that both your organization and external regulators share responsibility for

  implementing.

• C. Controls that both your organization and Microsoft share responsibility for

  implementing.