Microsoft Microsoft Certifications SC-900 Questions & Answers

• Question 151:

  In a Core eDiscovery workflow, what should you do before you can search for content?

  A. Create an eDiscovery hold.

  B. Run Express Analysis.

  C. Configure attorney-client privilege detection.

  D. Export and download results.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-core-ediscovery?view=o365-worldwide

• Question 152:

  What can you use to provide threat detection for Azure SQL Managed Instance?

  A. Microsoft Secure Score

  B. application security groups

  C. Microsoft Defender for Cloud

  D. Azure Bastion

  Correct Answer: C

• Question 153:

  Which Azure Active Directory (Azure AD) feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?

  A. network security groups (NSGs)

  B. Azure AD Privileged Identity Management (PIM)

  C. conditional access policies

  D. resource locks

  Correct Answer: C

• Question 154:

  Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?

  A. integration with the Microsoft 365 compliance center

  B. support for threat hunting

  C. integration with Microsoft 365 Defender

  D. support for Azure Monitor Workbooks

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/eval-overview?view=o365-worldwide

• Question 155:

  What can you use to scan email attachments and forward the attachments to recipients only if the attachments are free from malware?

  A. Microsoft Defender for Office 365

  B. Microsoft Defender Antivirus

  C. Microsoft Defender for Identity

  D. Microsoft Defender for Endpoint

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-advanced-threat-protection-service-description

• Question 156:

  What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?

  A. automated remediation

  B. automated investigation

  C. advanced hunting

  D. network protection

  Correct Answer: D

  Network protection helps protect devices from Internet-based events. Network protection is an attack surface reduction capability.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide

• Question 157:

  Which two types of resources can be protected by using Azure Firewall? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Azure virtual machines

  B. Azure Active Directory (Azure AD) users

  C. Microsoft Exchange Online inboxes

  D. Azure virtual networks

  E. Microsoft SharePoint Online sites

  Correct Answer: AD

  Firewall is really not directly protecting the Virtual Networks though DDOS would have been ideal for VNETS

• Question 158:

  You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure. Which security methodology does this represent?

  A. threat modeling

  B. identity as the security perimeter

  C. defense in depth

  D. the shared responsibility model

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/2-what-is-defense-in-depth

• Question 159:

  In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Plan

  B. Manage

  C. Adopt

  D. Govern

  E. Define Strategy

  Correct Answer: AE

  Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/overview

• Question 160:

  What is an example of encryption at rest?

  A. encrypting communications by using a site-to-site VPN

  B. encrypting a virtual machine disk

  C. accessing a website by using an encrypted HTTPS connection

  D. sending an encrypted email

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest