Microsoft SC-900 QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
,Domain 1: Security, Compliance, and Identity Concepts (Q1–Q15)
Q1. What is the primary purpose of the CIA triad in cybersecurity?
A) To manage cloud costs
B) To guide the protection of information assets
C) To define network topology
D) To standardize programming languages
Answer: B
Rationale: The CIA triad—Confidentiality, Integrity, and Availability—is a foundational model for protecting
information assets. It is not related to cost, topology, or programming.
Q2. Which element of the CIA triad ensures that data is not modified without authorization?
A) Confidentiality
B) Integrity
,C) Availability
D) Non-repudiation
Answer: B
Rationale: Integrity ensures data is accurate and unaltered. Confidentiality prevents unauthorized disclosure;
Availability ensures access when needed.
Q3. What is the difference between authentication and authorization?
A) They are the same thing
B) Authentication verifies identity; authorization determines access
C) Authorization verifies identity; authentication determines access
D) Both relate only to passwords
Answer: B
Rationale: Authentication proves who you are. Authorization determines what you can do after authentication.
, Q4. Which term describes a security model that assumes no implicit trust based on network location?
A) Perimeter security
B) Zero Trust
C) Defense in depth
D) Least privilege
Answer: B
Rationale: Zero Trust assumes breach and verifies explicitly. It does not grant trust based on being inside a
corporate network.
Q5. Which of the following is NOT a principle of Zero Trust?
A) Verify explicitly
B) Use least privilege access
C) Assume breach
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
,Domain 1: Security, Compliance, and Identity Concepts (Q1–Q15)
Q1. What is the primary purpose of the CIA triad in cybersecurity?
A) To manage cloud costs
B) To guide the protection of information assets
C) To define network topology
D) To standardize programming languages
Answer: B
Rationale: The CIA triad—Confidentiality, Integrity, and Availability—is a foundational model for protecting
information assets. It is not related to cost, topology, or programming.
Q2. Which element of the CIA triad ensures that data is not modified without authorization?
A) Confidentiality
B) Integrity
,C) Availability
D) Non-repudiation
Answer: B
Rationale: Integrity ensures data is accurate and unaltered. Confidentiality prevents unauthorized disclosure;
Availability ensures access when needed.
Q3. What is the difference between authentication and authorization?
A) They are the same thing
B) Authentication verifies identity; authorization determines access
C) Authorization verifies identity; authentication determines access
D) Both relate only to passwords
Answer: B
Rationale: Authentication proves who you are. Authorization determines what you can do after authentication.
, Q4. Which term describes a security model that assumes no implicit trust based on network location?
A) Perimeter security
B) Zero Trust
C) Defense in depth
D) Least privilege
Answer: B
Rationale: Zero Trust assumes breach and verifies explicitly. It does not grant trust based on being inside a
corporate network.
Q5. Which of the following is NOT a principle of Zero Trust?
A) Verify explicitly
B) Use least privilege access
C) Assume breach
