Microsoft Microsoft Certifications SC-900 Questions & Answers

• Question 51:

  Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription?

  A. resource health

  B. secure score

  C. the status of recommendations

  D. completed controls

  Correct Answer: B

• Question 52:

  What can you use to deploy Azure resources across multiple subscriptions in a consistent manner?

  A. Microsoft Sentinel

  B. Microsoft Defender for Cloud

  C. Azure Policy

  D. Azure Blueprints

  Correct Answer: D

• Question 53:

  You plan to move resources to the cloud.

  You are evaluating the use of Infrastructure as a service (laaS), Platform as a service (PaaS), and Software as a service (SaaS) cloud models.

  You plan to manage only the data, user accounts, and user devices for a cloud-based app.

  Which cloud model will you use?

  A. IaaS

  B. SaaS

  C. PaaS

  Correct Answer: B

  https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility Responsibility always retained by the customer:

  1.

  Information and Data

  2.

  Devices (Mobile and PCs)

  3.

  Accounts and Identities

• Question 54:

  What should you use to associate the same identity to more than one Azure virtual machine?

  A. an Azure AD user account

  B. a user-assigned managed identity

  C. a system-assigned managed identity

  D. an Azure AD security group

  Correct Answer: B

  When using a user-assigned managed identity, you assign the managed identity to the "source" Azure Resource, such as a Virtual Machine, Azure Logic App or an Azure Web App.

  What should you use to associate the same identity to more than one Azure virtual machine? User assigned managed identities can be used on more than one resource.

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

• Question 55:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365-worldwide

• Question 56:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  YES - As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.

  NO - The most restrictive lock in the inheritance takes precedence.

  NO - If you delete a resource group with a locked resource, the portal UI will give you an error and no resources are deleted.

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json

• Question 57:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 58:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center?view=o365-worldwide

• Question 59:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview

• Question 60:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No Advanced Audit helps organizations to conduct forensic and compliance investigations by increasing audit log retention.

  Box 2: No

  Box 3: Yes Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide