SC-900 practice test

1. Question 1 · 1

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   Choose an option for each prompt.

   

   All Azure Active Directory (Azure AD) license editions include the same features.

   • • Yes
   • • No

   You can manage an Azure Active Directory (Azure AD) tenant by using the Azure portal.

   • • Yes
   • • No

   You must deploy Azure virtual machines to host an Azure Active Directory (Azure AD) tenant.

   • • Yes
   • • No

2. Question 2 · 1

   In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

   Choose one answer.

   • the management of mobile devices
   • the permissions for the user data stored in Azure
   • the creation and management of user accounts
   • the management of the physical hardware

3. Question 3 · 1

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   Choose an option for each prompt.

   

   You can add a resource lock to an Azure subscription.

   • • Yes
   • • No

   You can add only one resource lock to an Azure resource.

   • • Yes
   • • No

   You can delete a resource group containing resources that have resource locks.

   • • Yes
   • • No

4. Question 4 · 1

   Which two tasks can you implement by using data loss prevention (DLP) policies in Microsoft 365? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • Display policy tips to users who are about to violate your organization's policies.
   • Enable disk encryption on endpoints.
   • Protect documents in Microsoft OneDrive that contain sensitive information.
   • Apply security baselines to devices.

5. Question 5 · 1

   Which Microsoft 365 compliance feature can you use to encrypt content automatically based on specific conditions?

   Choose one answer.

   • Content Search
   • sensitivity labels
   • retention policies
   • eDiscovery

6. Question 6 · 1

   Which two cards are available in the Microsoft 365 Defender portal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   Choose all answers that apply.

   • Devices at risk
   • Compliance Score
   • Service Health
   • User Management
   • Users at risk

7. Question 7 · 1

   What should you use to ensure that the members of an Azure Active Directory group use multi-factor authentication (MFA) when they sign in?

   Choose one answer.

   • Azure role-based access control (Azure RBAC)
   • Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
   • Azure Active Directory (Azure AD) Identity Protection
   • a conditional access policy

8. Question 8 · 1

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   Choose an option for each prompt.

   

   Azure Active Directory (Azure AD) Identity Protection generates risk detections once a user is authenticated.

   • • Yes
   • • No

   Azure Active Directory (Azure AD) Identity Protection assigns a risk level of Low, Medium, or High to each risk event.

   • • Yes
   • • No

   A user risk in Azure Active Directory (Azure AD) Identity Protection represents the probability that a given identity or account is compromised.

   • • Yes
   • • No

9. Question 9 · 1

   You need to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site. What should you apply to the site?

   Choose one answer.

   • a retention policy
   • an insider risk policy
   • a data loss prevention (DLP) policy
   • a sensitivity label policy

10. Question 10 · 1

    You need to create a data loss prevention (DLP) policy. What should you use?

    Choose one answer.

    • the Microsoft 365 Compliance center
    • the Microsoft Endpoint Manager admin center
    • the Microsoft 365 admin center
    • the Microsoft 365 Defender portal

11. Question 11 · 1

    What is an assessment in Compliance Manager?

    Choose one answer.

    • A policy initiative that includes multiple policies.
    • A dictionary of words that are not allowed in company documents.
    • A grouping of controls from a specific regulation, standard or policy.
    • Recommended guidance to help organizations align with their corporate standards.

12. Question 12 · 1

    What can you use to view the Microsoft Secure Score for Devices?

    Choose one answer.

    • Microsoft Defender for Cloud Apps
    • Microsoft Defender for Endpoint
    • Microsoft Defender for Identity
    • Microsoft Defender for Office 365

13. Question 13 · 1

    DRAG DROP - Match the Microsoft Defender for Office 365 feature to the correct description. To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place:

    Match each destination with an option.

    

    Provides intelligence on prevailing cybersecurity issues

    • • Threat Explorer
    • • Threat Trackers
    • • Anti-phishing protection

    Provides real-time reports to identify and analyze recent threats

    • • Threat Explorer
    • • Threat Trackers
    • • Anti-phishing protection

    Detects impersonation attempts

    • • Threat Explorer
    • • Threat Trackers
    • • Anti-phishing protection

14. Question 14 · 1

    HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

    Choose an option for each prompt.

    

    Each network security group (NSG) rule must have a unique name.

    • • Yes
    • • No

    Network security group (NSG) default rules can be deleted.

    • • Yes
    • • No

    Network security group (NSG) rules can be configured to check TCP, UDP, or ICMP network protocol types.

    • • Yes
    • • No

15. Question 15 · 1

    HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

    Choose an option for each prompt.

    

    When users attempt to access an application or a service

    • • administration
    • • auditing
    • • authentication
    • • authorization

Paid access to all 162 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.