SC-900 Exam Questions

Which type of identity is created when you register an application with Microsoft Entra ID?

Which three tasks can be performed by using Microsoft Entra ID Protection? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E3 subscription. You plan to audit user activity by using the unified audit log and Basic Audit. For how long will the audit records be retained?

To which type of resource can Azure Bastion provide secure access?

What are three uses of Microsoft Cloud App Security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Which three statements accurately describe the guiding principles of Zero Trust? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

What can you use to view the Microsoft Secure Score for Devices?

Which two Azure resources can a network security group (NSG) be associated with? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

What can you use to provision Azure resources across multiple subscriptions in a consistent manner?

You need to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site. What should you apply to the site?

What is an assessment in Compliance Manager?

You need to create a data loss prevention (DLP) policy. What should you use?

What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?

Which compliance feature should you use to identify documents that are employee resumes?

What should you use to ensure that the members of a Microsoft Entra group use multi-factor authentication (MFA) when they sign in?

Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?

Which two cards are available in the Microsoft 365 Defender portal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Which service includes the Attack simulation training feature?

You need to connect to an Azure virtual machine by using Azure Bastion. What should you use?

What is a characteristic of a sensitivity label in Microsoft 365?

Which type of alert can you manage from the Microsoft 365 Defender portal?

What does Conditional Access evaluate by using Microsoft Entra ID Protection?

Which statement represents a Microsoft privacy principle?

Which pillar of identity relates to tracking the resources accessed by a user?

What can be created in Active Directory Domain Services (AD DS)?

What is a function of Conditional Access session controls?

What can you use to ensure that all the users in a specific group must use multi-factor authentication (MFA) to sign in to Microsoft Entra?

Which three authentication methods can Microsoft Entra users use to reset their password? Each correct answer presents a complete solution. NOTE: Each correct selection is worth on...

Which security feature is available in the free mode of Microsoft Defender for Cloud?

What is the maximum number of resources that Azure DDoS Protection Standard can protect without additional costs?

What are two reasons to deploy multiple virtual networks instead of using just one virtual network? Each correct answer presents a complete solution. NOTE: Each correct selection i...

You have an Azure subscription that contains multiple resources. You need to assess compliance and enforce standards for the existing resources. What should you use?

Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription?

You need to ensure repeatability when creating new resources in an Azure subscription. What should you use?

What should you use to associate the same identity to more than one Azure virtual machine?

Hotspot Question For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Which thr...

Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?

You have an Azure subscription that contains a Log Analytics workspace. You need to onboard Microsoft Sentinel. What should you do first?

You plan to move resources to the cloud. You are evaluating the use of Infrastructure as a service (IaaS), Platform as a service (PaaS), and Software as a service (SaaS) cloud mode...

Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

You have an Azure subscription. You need to implement approval-based, time-bound role activation. What should you use?

What should you use in the Microsoft 365 Defender portal to view security trends and track the protection status of identities?

Which portal contains the solution catalog?

When you enable Microsoft Entra Multi-Factor Authentication (MFA), how many factors are required for authentication?

Which Microsoft Purview solution can be used to identify data leakage?

Which solution performs security assessments and automatically generates alerts when a vulnerability is found?

What can you use to protect against malicious links sent in email messages, chat messages, and channels?

Which service includes Microsoft Secure Score for Devices?

Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?

You have an Azure subscription that contains a Log Analytics workspace. You need to onboard Microsoft Sentinel. What should you do first?