SC-900 Quiz

Your company Airbus has developed an app that shares airline parts’ inventory information with its suppliers. Since the app contains sensitive data, you need to ensure the external users read & accept compliance requirements before accessing the app. Which of the following would help?

• Azure AD Terms of use

• Privileged Identity Management

• Azure App protection policies

• Conditional Access policies

You need to update your name (changed during your post-graduation) on school records with your educational institution that uses Microsoft cloud services. Which of the following federal laws ensures that you can request the changes?

• COPPA

• You can access your records, but you cannot request changes

• GDPR

• FERPA

• HIPAA

You create an access package in entitlement management and a set of resources to help onboard new team members. Which of the following types of resources can you directly manage the user’s access to with an access package (Select four options)?

• Azure AD enterprise apps

• Azure AD security groups

• SharePoint Online sites

• Microsoft 365 licenses

• Microsoft 365 groups

Which of the following operates on the principle of “trust no one, verify everything”?

• Defense in depth

• Principle of need to know

• Zero-Trust Methodology

• The Principle of Least Privilege

Which of the following security features do security defaults in Azure AD NOT enable?

• Blocking legacy authentication protocols like IMAP, SMPT

• Requiring users to perform multi-factor authentication for every sign-in

• Protecting access to Azure PowerShell with MFA

• Requiring users to perform multi-factor authentication registration within 14 days

You manage users who access resources in both the cloud and the on-premises environments. As an admin, you enable them to reset their passwords. What is the minimum edition of Azure Active Directory required to ensure that those updated passwords are written back to the on-premises Active Directory Domain Services?

• Azure Active Directory Premium P2

• Azure Active Directory Premium P1

• Office 365 Apps

• Azure Active Directory Free

CIA is a way to think about security trade-offs. What does the CIA stand for?

• Credentials, Integrity, Accessibility

• Confidentiality, Integrity, Accessibility

• Credentials, Integrity, Availability

• Confidentiality, Integrity, Availability

Last week, a couple of employees left your project. You need to ensure that the IT analyst removes their access to Azure resources. By using which Azure AD service, can you delegate this task to him for only 4 hours?

• Azure AD Identity Protection

• Azure AD Conditional Access

• Azure AD Connect

• Azure AD Privileged Identity Management

Your organization has acquired Azure Active Directory Premium P1 license for its users. You would like the users to perform additional authentication with MFA for all the sign-ins identified as risky. Is it possible?

• No

• Yes

Which of the following is NOT an identity governance feature in Azure Active Directory?

• Access Reviews

• Entitlement management

• Conditional Access

• Privileged Identity Management