SC900 Practise Assements

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• No

• Yes

What do you use to provide real-time integration between Azure Sentinel and another security source?

• Azure AD Connect

• a Log Analytics workspace

• Azure Information Protection

• a connector

Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?

• the Microsoft Endpoint Manager admin center

• Azure Cost Management + Billing

• Microsoft Service Trust Portal

• the Azure Active Directory admin center

In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

• the management of mobile devices

• the permissions for the user data stored in Azure

• the creation and management of user accounts

• the management of the physical hardware

What is an example of encryption at rest?

• encrypting communications by using a site-to-site VPN

• encrypting a virtual machine disk

• accessing a website by using an encrypted HTTPS connection

• sending an encrypted email

Which three statements accurately describe the guiding principles of Zero Trust? Each correct answer presents a complete solution.

• Define the perimeter by physical locations.

• Use identity as the primary security boundary.

• Always verify the permissions of a user explicitly.

• Always assume that the user system can be breached.

• Use the network as the primary security boundary.

What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

• Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

• Azure Multi-Factor Authentication (MFA)

• Azure Active Directory (Azure AD) Identity Protection

• conditional access policies

Which Azure Active Directory (Azure AD) feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?

• access reviews

• managed identities

• conditional access policies

• Azure AD Identity Protection

When security defaults are enabled for an Azure Active Directory (Azure AD) tenant, which two requirements are enforced? Each correct answer presents a complete solution.

• All users must authenticate from a registered device.

• Administrators must always use Azure Multi-Factor Authentication (MFA).

• Azure Multi-Factor Authentication (MFA) registration is required for all users.

• All users must authenticate by using passwordless sign-in.

• All users must authenticate by using Windows Hello.

Which type of identity is created when you register an application with Active Directory (Azure AD)?

• a user account

• a user-assigned managed identity

• a system-assigned managed identity

• a service principal