Microsoft Microsoft Certifications SC-900 Questions & Answers

• Question 161:

  Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. text message (SMS)

  B. Microsoft Authenticator app

  C. email verification

  D. phone call

  E. security question

  Correct Answer: ABD

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

• Question 162:

  Which Microsoft 365 feature can you use to restrict communication and the sharing of information between members of two departments at your organization?

  A. sensitivity label policies

  B. Customer Lockbox

  C. information batteries

  D. Privileged Access Management (PAM)

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/information-barriers

• Question 163:

  Which three authentication methods does Windows Hello for Business support? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. fingerprint

  B. facial recognition

  C. PIN

  D. email verification

  E. security question

  Correct Answer: ABC

  Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication

• Question 164:

  You are implementing a data classification solution.

  The research department at your company requires that documents containing programming code be labeled as Confidential. The department provides samples of the code from its document library. The solution must minimize administrative

  effort.

  What should you do?

  A. Create a custom classifier.

  B. Create a sensitive info type that uses Exact Data Match (EDM).

  C. Use the source code classifier.

  D. Create a sensitive info type that uses a regular expression.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-learn-about?view=o365-worldwide

• Question 165:

  You have a new Microsoft 365 tenant.

  You need to ensure that custom trainable classifiers can be created in the tenant.

  To which role should you be assigned to perform the configuration?

  A. Security administrator

  B. Security operator

  C. Global administrator

  D. Compliance administrator

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide

• Question 166:

  You need to automatically apply a sensitivity label to documents that contain information about your company's network including computer names, IP addresses, and configuration information.

  Which two objects should you use?

  Each correct answer presents part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.

  A. an Information protection auto-labeling policy

  B. a custom trainable classifier

  C. a sensitive info type that uses a regular expression

  D. a data loss prevention (DLP) policy

  E. a sensitive info type that uses keywords

  F. a sensitivity label that has auto-labeling

  Correct Answer: AB

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-learn-about?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

• Question 167:

  You have a Microsoft OneDrive for Business folder that contains the files shown in the following table.

  

  In Microsoft Cloud App Security, you create a file policy to automatically apply a classification. What is the effect of applying the policy?

  A. The policy will apply to only the .docx and .txt files. The policy will classify the files within 24 hours.

  B. The policy will apply to all the files. The policy will classify only 100 files daily.

  C. The policy will apply to only the .docx files. The policy will classify only 100 files daily.

  D. The policy will apply to only the .docx and .txt files. The policy will classify the files immediately.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/azip-integration

• Question 168:

  What can you use to provision Azure resources across multiple subscriptions in a consistent manner?

  A. Azure Defender

  B. Azure Blueprints

  C. Azure Sentinel

  D. Azure Policy

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

• Question 169:

  You create three sensitivity labels named Sensitivity1, Sensitivity2, and Sensitivity3 and perform the following actions:

  Publish Sensitivity1.

  Create an auto-labeling policy for Sensitivity2.

  You plan to create a file policy named Policy1 in Microsoft Cloud App Security.

  Which sensitivity labels can you apply to Microsoft SharePoint Online in Policy1?

  A. Sensitivity1 only

  B. Sensitivity1, Sensitivity2, and Sensitivity3

  C. Sensitivity2 only

  D. Sensitivity1 and Sensitivity2 only

  Correct Answer: D

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide https://docs.microsoft.com/en-us/cloud- app-security/azip-integration

• Question 170:

  Which Microsoft 365 compliance feature can you use to encrypt content automatically based on specific conditions?

  A. Content Search

  B. sensitivity labels

  C. retention policies

  D. eDiscovery

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection?view=o365-worldwide