Microsoft Microsoft Certifications SC-900 Questions & Answers

• Question 121:

  What are three uses of Microsoft Cloud App Security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. to discover and control the use of shadow IT

  B. to provide secure connections to Azure virtual machines

  C. to protect sensitive information hosted anywhere in the cloud

  D. to provide pass-through authentication to on-premises applications

  E. to prevent data leaks to noncompliant apps and limit access to regulated data

  Correct Answer: ACE

  Reference: https://docs.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps

• Question 122:

  Which type of identity is created when you register an application with Active Directory (Azure AD)?

  A. a user account

  B. a user-assigned managed identity

  C. a system-assigned managed identity

  D. a service principal

  Correct Answer: D

  When you register an application through the Azure portal, an application object and service principal are automatically created in your home directory or tenant.

• Question 123:

  You have a Microsoft 365 E3 subscription.

  You plan to audit user activity by using the unified audit log and Basic Audit.

  For how long will the audit records be retained?

  A. 15 days

  B. 30 days

  C. 90 days

  D. 180 days

  Correct Answer: C

• Question 124:

  To which type of resource can Azure Bastion provide secure access?

  A. Azure Files

  B. Azure SQL Managed Instances

  C. Azure virtual machines

  D. Azure App Service

  Correct Answer: C

  Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS.

• Question 125:

  What can you use to view the Microsoft Secure Score for Devices?

  A. Microsoft Defender for Cloud Apps

  B. Microsoft Defender for Endpoint

  C. Microsoft Defender for Identity

  D. Microsoft Defender for Office 365

  Correct Answer: B

  Artikel 3 Minuten Lesedauer Microsoft Secure Score for DevicesApplies to:

  1.

  Microsoft Defender for Endpoint Plan 2

  2.

  Microsoft Defender Vulnerability Management

  3.

  Microsoft 365 Defender

  Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

  To sign up for the Defender Vulnerability Management public preview or if you have any questions, contact us ([email protected]).

  Already have Microsoft Defender for Endpoint P2? Sign up for a free trial of the Defender Vulnerability Management Add-on.

  Configuration score is now part of vulnerability management as Microsoft Secure Score for Devices.

  Your score for devices is visible in the Defender Vulnerability Management dashboard of the Microsoft 365 Defender portal. A higher Microsoft Secure Score for Devices means your endpoints are more resilient from cybersecurity threat

  attacks. It reflects the collective security configuration state of your devices across the following categories:

  1.

  Application

  2.

  Operating system

  3.

  Network

  4.

  Accounts

  5.

  Security controls

  Select a category to go to the Security recommendations page and view the relevant recommendations.

  Turn on the Microsoft Secure Score connectorForward Microsoft Defender for Endpoint signals, giving Microsoft Secure Score visibility into the device security posture. Forwarded data is stored and processed in the same location as your

  Microsoft Secure Score data.

  Changes might take up to a few hours to reflect in the dashboard.

  1.

  In the navigation pane, go to Settings > Endpoints > General > Advanced features

  2.

  Scroll down to Microsoft Secure Score and toggle the setting to On.

  3.

  Select Save preferences.

  How it worksMicrosoft Secure Score for Devices currently supports configurations set via Group Policy. Due to the current partial Intune support, configurations which might have been set through Intune might show up as misconfigured.

  Contact your IT Administrator to verify the actual configuration status in case your organization is using Intune for secure configuration management.

  The data in the Microsoft Secure Score for Devices card is the product of meticulous and ongoing vulnerability discovery process. It is aggregated with configuration discovery assessments that continuously:

  1.

  Compare collected configurations to the collected benchmarks to discover misconfigured assets

  2.

  Map configurations to vulnerabilities that can be remediated or partially remediated (risk reduction)

  3.

  Collect and maintain best practice configuration benchmarks (vendors, security feeds, internal research teams)

  4.

  Collect and monitor changes of security control configuration state from all assets

• Question 126:

  What can you use to provision Azure resources across multiple subscriptions in a consistent manner?

  A. Microsoft Defender for Cloud

  B. Azure Blueprints

  C. Microsoft Sentinel

  D. Azure Policy

  Correct Answer: B

• Question 127:

  Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?

  A. Windows 10 and newer only

  B. Windows 10 and newer and Android only

  C. Windows 10 and newer and macOS only

  D. Windows 10 and newer, Android, and iOS

  Correct Answer: C

  https://learn.microsoft.com/en-us/purview/endpoint-dlp-getting-started?view=o365-worldwide#see-also

  Microsoft Endpoint DLP allows you to monitor onboarded Windows 10, and Windows 11 and onboarded macOS devices running any of the three latest released versions.

  There is also an variation of this question where iOS is mentioned. iOS = for mobile OS MacOS = for desktops/laptops

  iOS = not supported for Endpoint Data Loss Prevention.

• Question 128:

  Which two cards are available in the Microsoft 365 Defender portal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Devices at risk

  B. Compliance Score

  C. Service Health

  D. User Management

  E. Users at risk

  Correct Answer: AE

  A: The Devices at risk card includes a View details button. Selecting that button takes us to the Device inventory page, as shown in the following image

  

  E: The Microsoft 365 Defender portal cards fall into these categories:

  Identities- Monitor the identities in your organization and keep track of suspicious or risky behaviors. Here you can find the Users at risk card.

  Data - Help track user activity that could lead to unauthorized data disclosure.

  Devices - Get up-to-date information on alerts, breach activity, and other threats on your devices.

  Apps - Gain insight into how cloud apps are being used in your organization.

  Incorrect:

  Not C: The Service Health card can be reached from the Microsoft 365 admin center.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-business/mdb-respond-mitigate-threats

• Question 129:

  What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?

  A. applications

  B. network controls

  C. operating systems

  D. accounts and identities

  Correct Answer: D

• Question 130:

  Which service includes the Attack simul-ation training feature?

  A. Microsoft Defender for Cloud Apps

  B. Microsoft Defender for Office 365

  C. Microsoft Defender for Identity

  D. Microsoft Defender for SQL

  Correct Answer: B

  Attack simulation training in Microsoft Defender for Office 365 Plan 2 or Microsoft 365 E5 lets you run benign cyberattack simulations in your organization. These simulations test your security policies and practices, as well as train your employees to increase their awareness and decrease their susceptibility to attacks.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training