Security Management and Access Control

An organization has deployed Microsoft 365 applications to all employees. Who is responsible for the security of the personal data relating to these employees?

• The organization.

• Microsoft, the SaaS provider.

• The shared responsibility between your organization and Microsoft.

• The employees themselves.

Which of the following measures might an organization implement as part of the defense-in-depth security methodology?

• Locating servers at different locations in your organization.

• Multi-factor authentication for all users.

• Ensuring there's no segmentation of your corporate network.

• Implementing a single firewall for all network traffic.

The human resources organization wants to ensure that stored employee data is encrypted. Which security mechanism would they use?

• Hashing.

• Digital signing.

• Encryption at rest.

• Data masking.

When browsing Microsoft compliance documentation, you have found several documents that are specific to your industry. What is the best way of ensuring you keep up to date with the information they contain?

• Save the documents to your My Library.

• Print each document so you can easily refer to them.

• Download each document.

• Set up a recurring calendar reminder to check for updates.

A colleague has asked for your help in locating compliance and regulatory information relevant to your industry. You want to provide one link that will provide all the information they might need. Which Microsoft link should you send?

• Microsoft Privacy Principles.

• Service Trust Portal.

• Microsoft Compliance Manager.

• Azure Security Center.

What type of security risk does a phishing scam pose?

• Ethical risk.

• Physical risk.

• Identity risk.

• Operational risk.

What is a benefit of single sign-on?

• A central identity provider can be used.

• The user signs in once and then can access many applications or resources.

• Passwords always expire after 72 days.

• It eliminates the need for passwords.

Which relationship allows federated services to gain access to resources?

• Claim relationship.

• Shared access relationship.

• Trust relationship.

• Service principal relationship.

Authentication is the process of doing what?

• Verifying that a user or device is who they say they are.

• The process of profiling user behavior.

• Enabling federated services.

• Granting access to resources.

Your organization is launching a new app for customers. You want your customers to use a sign-in screen that is customized with your brand identity. Which type of Azure External identity authentication solution should you use?

• Azure AD B2B

• Azure AD B2C

• Azure AD Hybrid identities

• Azure AD Domain Services