Microsoft Microsoft Certifications SC-900 Questions & Answers

• Question 101:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://privacy.microsoft.com/en-US/

• Question 102:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes Box 2: Yes Box 3: No

  The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.

  Reference:

  https://docs.microsoft.com/en-us/security/zero-trust/

• Question 103:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks.

  Box 2: Yes

  Box 3: Yes

  If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure.

  Reference:

  https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls

• Question 104:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  eDiscovery https://docs.microsoft.com/en-us/microsoft-365/compliance/ediscovery?view=o365-worldwide

• Question 105:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

• Question 106:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Federation is a collection of domains that have established trust.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

• Question 107:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/get-started/

• Question 108:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 109:

  DRAG DROP

  Match the Microsoft Purview Insider Risk Management workflow step to the appropriate task.

  To answer, drag the appropriate step from the column on the left to its task on the right. Each step may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Triage

  New user activities that need investigation automatically generate alerts that are assigned a Needs review status. Reviewers can quickly identify and review, evaluate, and triage these alerts.

  Alerts are resolved by opening a new case, assigning the alert to an existing case, or dismissing the alert. Using alert filters, it's easy to quickly identify alerts by status, severity, or time detected. As part of the triage process, reviewers can

  view alert details for the activities identified by the policy, view user activity associated with the policy match, see the severity of the alert, and review user profile information.

  Box 2: Investigate

  Investigate

  Quickly investigate all activities for a selected user with User activity reports (preview). These reports allow investigators in your organization to examine activities for specific users for a defined time period without having to assign them

  temporarily or explicitly to an insider risk management policy. After examining activities for a user, investigators can dismiss individual activities as benign, share or email a link to the report with other investigators, or choose to assign the user

  temporarily or explicitly to an insider risk management policy.

  Cases are created for alerts that require deeper review and investigation of the activity details and circumstances around the policy match.

  Box 3: Action

  After cases are investigated, reviewers can quickly act to resolve the case or collaborate with other risk stakeholders in your organization. If users accidentally or inadvertently violate policy conditions, a simple reminder notice can be sent to

  the user from notice templates you can customize for your organization. These notices may serve as simple reminders or may direct the user to refresher training or guidance to help prevent future risky behavior.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management

• Question 110:

  DRAG DROP

  Match the types of compliance score actions to the appropriate tasks.

  To answer, drag the appropriate action type from the column on the left to its task on the right. Each type may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Preventative

  Preventative actions address specific risks. For example, protecting information at rest using encryption is a preventative action against attacks and breaches. Separation of duties is a preventative action to manage conflict of interest and

  guard against fraud.

  Box 2: Detective

  Detective actions actively monitor systems to identify irregular conditions or behaviors that represent risk, or that can be used to detect intrusions or breaches. Examples include system access auditing and privileged administrative actions.

  Regulatory compliance audits are a type of detective action used to find process issues.

  Incorrect:

  Corrective actions try to keep the adverse effects of a security incident to a minimum, take corrective action to reduce the immediate effect, and reverse the damage if possible. Privacy incident response is a corrective action to limit damage

  and restore systems to an operational state after a breach.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide