SC-900 Online Practice Questions and Answers

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/get-started/

Correct Answer:

Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is

Correct Answer:

Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-device-management

Correct Answer:

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center?view=o365-worldwide

Correct Answer: A

Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment.

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Correct Answer: A

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide

Correct Answer: A

Correct Answer: D

When you register an application through the Azure portal, an application object and service principal are automatically created in your home directory or tenant.

Correct Answer: B

https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility Responsibility always retained by the customer:

1.

Information and Data

2.

Devices (Mobile and PCs)

3.

Accounts and Identities

Correct Answer: B

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure