New (2021) Microsoft SC-900 Exam Dumps
Best Way To Study For Microsoft SC-900 Exam Brilliant SC-900 Exam Questions PDF
How to Register For Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals?
Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals
This certification is targeted to those looking to familiarize themselves with the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services.
This is a broad audience that may include business stakeholders, new or existing IT professionals, or students who have an interest in Microsoft security, compliance, and identity solutions.
Candidates should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft security, compliance, and identity solutions can span across these solution areas to provide a holistic and end-to-end solution.
Part of the requirements for: Microsoft Certified: Security, Compliance, and Identity Fundamentals
Skills measured
- The content of this exam was updated on July 26, 2021. Please download the exam skills outline below to see what changed.
- Describe the capabilities of Microsoft identity and access management solutions (30-35%)
- Describe the concepts of security, compliance, and identity (10-15%)
- Describe the capabilities of Microsoft compliance solutions (25-30%)
- Describe the capabilities of Microsoft security solutions (35-40%)
NEW QUESTION 13
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/security-center/azure-defender
https://docs.microsoft.com/en-us/azure/security-center/defender-for-storage-introduction https://docs.microsoft.com/en-us/azure/security-center/security-center-introduction
NEW QUESTION 14
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
NEW QUESTION 15
In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?
- A. the permissions for the user data stored in Azure
- B. the management of the physical hardware
- C. the creation and management of user accounts
- D. the management of mobile devices
Answer: B
NEW QUESTION 16
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service. Reference:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide
NEW QUESTION 17
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
NEW QUESTION 18
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: Describe the Concepts of Security, Compliance, and Identity
NEW QUESTION 19
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?
- A. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
- B. Azure Multi-Factor Authentication (MFA)
- C. Azure Active Directory (Azure AD) Identity Protection
- D. conditional access policies
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment
NEW QUESTION 20
Which Microsoft portal provides information about how Microsoft manages privacy, compliance, and security?
- A. Compliance Manager
- B. Microsoft Support
- C. Microsoft 365 compliance center
- D. Microsoft Service Trust Portal
Answer: D
NEW QUESTION 21
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Federation is a collection of domains that have established trust. Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
NEW QUESTION 22
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
Text Description automatically generated
NEW QUESTION 23
Match the Azure networking service to the appropriate description.
To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, application Description automatically generated
Box 1: Azure Firewall
Azure Firewall provide Source Network Address Translation and Destination Network Address Translation.
Box 2: Azure Bastion
Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS.
Box 3: Network security group (NSG)
You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network.
NEW QUESTION 24
What do you use to provide real-time integration between Azure Sentinel and another security source?
- A. a connector
- B. a Log Analytics workspace
- C. Azure AD Connect
- D. Azure Information Protection
Answer: A
Explanation:
Section: Describe the Concepts of Security, Compliance, and Identity
Explanation:
To on-board Azure Sentinel, you first need to connect to your security sources. Azure Sentinel comes with a number of connectors for Microsoft solutions, including Microsoft 365 Defender solutions, and Microsoft 365 sources, including Office 365, Azure AD, Microsoft Defender for Identity, and Microsoft Cloud App Security, etc.
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
NEW QUESTION 25
Which two types of resources can be protected by using Azure Firewall? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Azure virtual machines
- B. Azure Active Directory (Azure AD) users
- C. Microsoft Exchange Online inboxes
- D. Azure virtual networks
- E. Microsoft SharePoint Online sites
Answer: D,E
NEW QUESTION 26
Select the answer that correctly completes the sentence.
Answer:
Explanation:
NEW QUESTION 27
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
NEW QUESTION 28
HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:
Answer:
Explanation:
Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation:
Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide
NEW QUESTION 29
What should you use in the Microsoft 365 security center to view security trends and track the protection status of identities?
- A. Incidents
- B. Reports
- C. Hunting
- D. Attack simulator
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/reports-and-insights-in-security- and-compliance?view=o365-worldwide
NEW QUESTION 30
What are two capabilities of Microsoft Defender for Endpoint? Each correct selection presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. transport encryption
- B. automated investigation and remediation
- C. attack surface reduction
- D. shadow IT detection
Answer: B,C
Explanation:
Section: Describe the Capabilities of Microsoft Security Solutions
Explanation/Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint?
view=o365-worldwide
NEW QUESTION 31
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Box 1: Yes
Conditional access policies can be applied to all users
Box 2: No
Conditional access policies are applied after first-factor authentication is completed.
Box 3: Yes
Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.
NEW QUESTION 32
......
Updated Verified Pass SC-900 Exam - Real Questions & Answers: https://www.exam4tests.com/SC-900-valid-braindumps.html
Dumps Moneyack Guarantee - SC-900 Dumps Approved Dumps: https://drive.google.com/open?id=1bL4Bhm8FuJs9zZ3_jYI67n0AeGdA8CbD