Which of the following is NOT a type of identity?

The human resources organization want to ensure that stored employee data is encrypted. Which security mechanism would they use?

Which of the following measures might an organization implement as part of the defense in-depth security methodology?

A compliance admin is looking for regulatory information relevant to a specific region, which one link will provide the needed information?

Among the 4 pillars of identity, which pillar tells the story of how much assurance for a particular identity is enough.

T/F: With federation, trust is always bidirectional.

How many editions of the azure active directory (AAD) are available?

An organization is launching a new app for its customers. Customers will use a sign-in screen that is customized with the organization's brand identity. Which type of Azure External identity solution should the organization use?

True/False: "A system-assigned managed identity can be associated with more than one Azure resource."

A company's IT organization has been asked to find ways to reduce IT costs, without compromising security. Which feature should they consider implementing?

IT admins have been asked to review Azure AD roles assigned to users, to improve organizational security. Which of the following should they implement?

Your IT organization recently discovered that several user accounts in the finance department have been compromised. The CTO has asked for a solution to reduce the impact of compromised user accounts. The IT admin team is looking into Azure AD features. Which one should they recommend?

A company wants to make use of Windows Hello for Business when it comes to authentication. Which of the following authentication techniques are available in Windows Hello for Business?

You are planning to make use of Azure Bastion service. Can you use the Azure Bastion service to restrict traffic from the Internet onto an Azure Virtual Machine?

Which of the following is a scalable, cloud-native security event management and security orchestration automated response solution?

Your company is planning on using Azure Active Directory. They already have user identities stored in their on-premise Active Directory. They want to sync the user identities from the on-premise Active Directory onto Azure Active Directory. Which of the following could be used?

The security admin wants to increase the priority of a network security group, what five sources of information will the admin need to provide?

An organization is using Azure and wants to improve their security best practices. Which Azure specific benchmark would the IT security team need to consider?

As the lead admin, it's important to convince your team to start using Azure Sentinel. You’ve put together a presentation. What are the four security operation areas of Azure Sentinel that cover this area?

Which of the following can be used to provide just-in-time access to resources?

Which of the following provides "Network Address Translation"?

Which of the following provides XDR (Extended Detection & Response) capabilities that helps to protect multi-cloud and hybrid workloads?

Can Microsoft Defender for Endpoint be used for Windows 2016-based Azure Virtual Machine?

What is the maximum time frame for which you can retain audit logs in Microsoft 365?

Can Azure Bastion be used to restrict traffic from the Internet onto an Azure Virtual machine?

Azure Sentinel provides intelligent security analytics across your enterprise. The data for this analysis is stored in ___________________ ?

Which of the following are examples of Microsoft Trust principle?

Which of the following Azure Active Directory license type provides ability to perform "self-service password reset" for both cloud and on-premise users?

A lead admin for an organization is looking to protect against malicious threats posed by email messages, links (URLs), and collaboration tools. Which solution from the Microsoft 365 Defender suite is best suited for this purpose?

Which of the following describes what an admin would need to select to view security cards grouped by risk, detection trends, configuration, and health, among others?

Your new colleagues on the admin team are unfamiliar with the concept of shared controls in Compliance Manager. How would the concept of shared controls be explained?

Which part of the concept of know your data, protect your data, and prevent data loss addresses the need for organizations to automatically retain, delete, store data and records in a compliant manner?

Due to a certain regulation, your organization must now keep hold of all documents in a specific SharePoint site that contains customer information for five years. How can this requirement be implemented?

Which tool can enable an organization's development team to rapidly provision and run new resources, in a repeatable way that is in line with the organization’s compliance requirements?

A hold has been placed on content relevant to a case. The hold has not taken effect yet, what has happened?

To comply with corporate policies, the compliance admin needs to be able to identify and scan for offensive language across the organization. What solution can the admin implement to address this need?

Select Yes/No : If a user uses incorrect credentials, it will not be flagged by Identity Protection since there is not of risk of credential compromise unless a bad actor uses the correct credentials.

Select Yes/No : Can you add delete lock to a resource that has a read-only lock?

Select Yes/No : Can Azure Policy service be used to check the compliance of existing resources?

In the following situation, who is responsible for ensuring security and compliance? "Operating system for a Platform as a service (PaaS) application'

Which out of the following requires the least management by the cloud customer.

_______ attack attempts to exhaust an application's resources, making the application unavailable to legitimate users.

An organization has deployed Microsoft 365 applications to all employees. Who is responsible for the security of the personal data relating to these employees?

The security perimeter can no longer be viewed as the on-premises network. It now extends to?

Among the 4 pillars of Identity, which is about tracking who does what, when, where, and how?

What type of security risk does a phishing scam pose?

Which of the following Azure active directory (AAD) is available along with Office 365 E1 & E3

All users in an organization have Microsoft 365 cloud identities. Which identity model applies?

In which type of authentication, Azure AD hands off the authentication process to a separate trusted authentication system to validate the user’s password.

True/False: "Custom roles require an Azure AD Premium P1 or P2 license.

An organization has recently merged with a competitor, nearly doubling the number of employees. The organization needs to implement an access life cycle system that won't add a significant amount of work for its IT administrators. Which Azure AD feature should they implement?

Which of the following can be used to provide a secure score for the resources defined as a part of your Azure Account?

You are looking at the capabilities of Azure Active Directory. Can AAD be used to manage device registrations?

Which of the following provides advanced and intelligent protection of Azure and hybrid resources and workloads?

Your company is planning on using Azure Cloud services. They are looking at the different security aspects when it comes to Microsoft privacy. Is Shared Responsibility Model a key Microsoft privacy principal?

Do all versions of Azure Active Directory have the same set of features?

The security admin wants to protect Azure resources from DDoS attacks, which Azure DDoS Protection tier will the admin use to target Azure Virtual Network resources?

An organization is using Security Center to assess its resources and subscriptions for security issues. The organization's overall secure score is low and needs to improve. How could a security admin try to improve the score?

Your estate has many different data sources where data is stored. Which tool should be used with Azure Sentinel to quickly gain insights across your data as soon as a data source is connected?

Can Azure AD Identity Protection be used to provide access to resources in Azure?

Which of the following will provide "a secure way to RDP/SSH into Azure Virtual Machines"

Can Microsoft Defender For Endpoint be used to protect SharePoint Online?

Can Microsoft Intune be used for a Windows 10 device?

Which of the following allows you to invite guest users and provide them access to Azure resources within your organization?

Can AAD be used to ensure user does not have the product's name as part of the password defined by the user?

__________________ are the types of resources you can manage user's access to with entitlement management?

Can Microsoft Defender for Endpoint service be used to protect Windows10 machines?

Which of the following is NOT one of the benefits of Microsoft Compliance Manager?

A team admin is asked to provide a short presentation on the use and benefit of Microsoft Cloud App Security. Which of the four MCAS pillars is responsible for identifying and controlling sensitive information?

An admin wants to get a comprehensive view of an attack including where it started, what tactics were used, and how far it has gone in the network. What can the admin use to view this type of information?

A customer has requested a presentation on how the Microsoft 365 Compliance Center can help improve their organization’s compliance posture. The presentation will need to cover Compliance Manager and compliance score. What is the difference between Compliance Manager and compliance score?

As part of a new data loss prevention policy, the compliance admin needs to be able to identify important information such as credit card numbers, across the organization's data. How can the admin address this requirement?

How can the admin address this requirement?

What capability can the admin use?

What guidance can they use to help them transition to the cloud?

What can enable the team to do more complex search tasks?

What solution can address this need?

Can Azure Policy be used to remediate issues that get detected via its compliance checks?

Can Azure Blueprints be used to create Role assignments for an Azure Subscription?

Can Blueprints be used to create Management Groups?

Which out of the following requires the most management by the cloud customer.

Which of the following are not responsibilities always retained by the customer organization?

Malware can give attackers unauthorized access, which allows them to use system resources, lock you out of your computer, and ask for ransom.

"When Microsoft does collect data, it is used to benefit you, the customer, and to make your experiences better"

Which pillar in the 4 pillar identification system is about the creation and management of identities for users, devices, and services.

What is a benefit of single sign-on?

Authentication is the process of doing what?

Which edition of the Azure active directory gives you Privileged Identity Management to help discover, restrict, and monitor administrators?

An organization has developed an app to allow users to be able to sign in with their Facebook, Google, or Twitter credentials. What type of authentication is being used?

After hearing of a breach at a competitor, the security team wants to improve identity security within their organization. What should they implement immediately to provide the greatest protection to user identities?

An organization plans to implement Conditional Access. What do admins need to do?

An organization is project-oriented with employees often working on more than one project at a time. Which solution is best suited to managing user access to this organization’s resources?

Which of the following can be used to fulfill requirement (2) above?

Which of the following can be used to fulfill requirement (1) above?

Which of the following can be used to fulfill requirement (3) above?

Which 3 of the following authentication methods are available for self service password reset?

Which of the following is available for the Azure Application Gateway service that helps to protect web applications from common exploits and vulnerabilities?

Is Control a key Microsoft privacy principal?

Select all which is an example of Zero Trust Guiding principle?

Which of the following is the process of checking if a signed-in user has access to a particular resource in Azure?

Can you make use of Network Security Groups to deny all inbound traffic from the Internet?

What Security Center tool would they use?

Which of the following would provide "Protection against large scale internet attacks"?

Can Microsoft Intune be used for Android devices?

Can Azure Bastion be used to securely RDP into an Azure Windows virtual machine via the browser and the Azure portal?