Released Microsoft SC-900 Updated Questions PDF [Q31-Q51]

Released Microsoft SC-900 Updated Questions PDF

SC-900 Dumps and Practice Test (87 Exam Questions)

Schedule exam

Languages: English, Japanese, Chinese (Simplified), Korean, French, Spanish, Portuguese (Brazil), Russian, Arabic (Saudi Arabia), Indonesian (Indonesia), German, Chinese (Traditional), Italian

Retirement date: none

This exam measures your ability to describe the following: concepts of security, compliance, and identity; capabilities of Microsoft identity and access management solutions; capabilities of Microsoft security solutions; and capabilities of Microsoft compliance solutions.

Microsoft SC-900 Exam Syllabus Topics:

Topic	Details
Topic 1	Describe the Zero-Trust methodology Describe security methodologies Describe security concepts
Topic 2	Describe the different authentication methods Describe self-service password reset
Topic 3	Describe information protection and governance capabilities of Microsoft 365 Describe the compliance management capabilities in Microsoft
Topic 4	Describe access management capabilities of Azure AD Describe uses and benefits of conditional access
Topic 5	Describe the Concepts of Security, Compliance, and Identity Describe Microsoft Security and compliance principles
Topic 6	Describe the Capabilities of Microsoft Compliance Solutions Describe security management capabilities of Microsoft 365
Topic 7	Describe the shared responsibility model Describe the offerings of the service trust portal
Topic 8	Describe the identity protection & governance capabilities of Azure AD Describe Azure AD Identity Protection
Topic 9	Describe the authentication capabilities of Azure AD Describe password protection and management capabilities
Topic 10	Describe Microsoft's privacy principles Describe encryption Define defense in depth
Topic 11	Describe the role and value of Azure Sentinel to provide integrated threat protection Describe the value of content and activity explorer
Topic 12	Define common Identity Attacks Describe the capabilities of Microsoft Identity and Access Management Solutions
Topic 13	Define identity principles/concepts define identity as the primary security perimeter describe the concept of Federated services
Topic 14	Describe the capabilities of Microsoft Security Solutions Describe security management capabilities of Azure
Topic 15	Describe the basic identity services and identity types of Azure AD describe the different external identity types (Guest Users)
Topic 16	Describe incidents and incident management capabilities Describe the endpoint security with the Microsoft Endpoint Manager admin center

Skills measured

Describe the capabilities of Microsoft security solutions (35-40%)
Describe the capabilities of Microsoft compliance solutions (25-30%)
Describe the capabilities of Microsoft identity and access management solutions (30-35%)
The content of this exam was updated on July 26, 2021. Please download the exam skills outline below to see what changed.
Describe the concepts of security, compliance, and identity (10-15%)

NEW QUESTION 31
Match the Azure networking service to the appropriate description.
To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/networking/fundamentals/networking-overview https://docs.microsoft.com/en-us/azure/bastion/bastion-overview https://docs.microsoft.com/en-us/azure/firewall/features
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

NEW QUESTION 32
Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. security question
B. text message (SMS)
C. Microsoft Authenticator app
D. phone call
E. email verification

Answer: B,C,D

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

NEW QUESTION 33
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 34
What can you protect by using the information protection solution in the Microsoft 365 compliance center?

A. users from phishing attempts
B. computers from zero-day exploits
C. sensitive data from being exposed to unauthorized users
D. files from malware and viruses

Answer: C

NEW QUESTION 35
Select the answer that correctly completes the sentence.

Answer:

Explanation:
Explanation
Text Description automatically generated

NEW QUESTION 36
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer:

Explanation:

Section: Describe the Capabilities of Microsoft Compliance Solutions
Explanation:
Box 1: No
Box 2: Yes
Leaked Credentials indicates that the user's valid credentials have been leaked.
Box 3: Yes
Multi-Factor Authentication can be required based on conditions, one of which is user risk.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-risk-based-sspr-mfa

NEW QUESTION 37
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

A. Azure Active Directory (Azure AD) Identity Protection
B. Azure Multi-Factor Authentication (MFA)
C. conditional access policies
D. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Answer: C

NEW QUESTION 38
Select the answer that correctly completes the sentence.

Answer:

Explanation:

Explanation
Graphical user interface, text, application Description automatically generated

NEW QUESTION 39
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/roles/concept-understand-roles https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

NEW QUESTION 40
What can you use to provision Azure resources across multiple subscriptions in a consistent manner?

A. Azure Blueprints
B. Azure Policy
C. Azure Defender
D. Azure Sentinel

Answer: A

NEW QUESTION 41
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Conditional access policies can be applied to all users
Box 2: No
Conditional access policies are applied after first-factor authentication is completed.
Box 3: Yes
Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.

NEW QUESTION 42
Select the answer that correctly completes the sentence.

Answer:

Explanation:

Explanation
Text, letter Description automatically generated

NEW QUESTION 43
In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?

A. Azure Ad Privileged Identity Management (PIM)
B. Azure AD Connect
C. Azure Sentinel
D. Active Directory Federation Services (AD FS)

Answer: B

Explanation:
Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation/Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect

NEW QUESTION 44
Match the Azure networking service to the appropriate description.
To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, application Description automatically generated

Box 1: Azure Firewall
Azure Firewall provide Source Network Address Translation and Destination Network Address Translation.
Box 2: Azure Bastion
Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS.
Box 3: Network security group (NSG)
You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network.

NEW QUESTION 45
Select the answer that correctly completes the sentence.

Answer:

Explanation:

Explanation
Text, letter Description automatically generated

NEW QUESTION 46
Select the answer that correctly completes the sentence.

Answer:

Explanation:

Explanation
Text, letter Description automatically generated

Biometrics templates are stored locally on a device. Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

NEW QUESTION 47
Select the answer that correctly completes the sentence.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender/threat-analytics?view=o365-worldwide

NEW QUESTION 48
Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

A. Secure score in Azure Security Center
B. Microsoft Secure Score
C. Compliance score
D. Productivity Score

Answer: C

Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365- worldwide

NEW QUESTION 49
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, text, application Description automatically generated

NEW QUESTION 50
Select the answer that correctly completes the sentence.

Answer:

Explanation:

Explanation

Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.