SC-900 Examination Microsoft Security, Compliance, and Identity Fundamentals

SC-900 Examination Microsoft Security, Compliance, and Identity Fundamentals SC-900 Exam Build up 2022/2023 An organization has deployed Microsoft 365 applications to all employees. Who is responsible for the security of the personal data relating to these employees? Which of the following measures might an organization implement as part of the defense in-depth security methodology? The human resources organization want to ensure that stored employee data is encrypted. Which security mechanism would they use? What is the best way of staying current with Microsoft compliance documentation available through the Service Trust Portal? A compliance admin is looking for regulatory information relevant to a specific region, which one link will provide the needed information? What type of security risk does a phishing scam pose? What is a benefit of single sign-on? Which relationship allows federated services to access resources? Authentication is the process of doing what? An organization is launching a new app for its customers. Customers will use a sign-in screen that is customized with the organization's brand identity. Which type of Azure External identity solution should the organization use? All users in an organization have Microsoft 365 cloud identities. Which identity model applies? An organization has developed an app to allow users to be able to sign in with their Facebook, Google, or Twitter credentials. What type of authentication is being used? After hearing of a breach at a competitor, the security team wants to improve identity security within their organization. What should they implement immediately to provide the greatest protection to user identities? To improve identity security within the organization, the security team wants to implement Windows Hello for Business. When explaining the benefits of Windows Hello for Business, which of the following statements is true? A company's IT organization has been asked to find ways to reduce IT costs, without compromising security. Which feature should they consider implementing? An organization plans to implement Conditional Access. What do admins need to do? Sign-in risk is a signal used by Conditional Access policies to decide whether to grant or deny access. What is sign-in risk? IT admins have been asked to review Azure AD roles assigned to users, to improve organizational security. Which of the following should they implement? An organization has recently merged with a competitor, nearly doubling the number of employees. The organization needs to implement an access lifecycle system that won't add a significant amount of work for its IT administrators. Which Azure AD feature should they implement? An organization is project-oriented with employees often working on more than one project at a time. Which solution is best suited to managing user access to this organization's resources? An organization has recently conducted a security audit and found that four people who have left were still active and assigned global admin roles. The users have now been deleted but the IT organization has been asked to recommend a solution to prevent a similar security lapse happening in future. Which solution should they recommend? Your IT organization recently discovered that several user accounts in the finance department have been compromised. The CTO has asked for a solution to reduce the impact of compromised user accounts. The IT admin team is looking into Azure AD features. Which one should they recommend? The security admin wants to increase the priority of a network security group, what five sources of information will the admin need to provide? The security admin wants to protect Azure resources from DDoS attacks, which Azure DDoS Protection tier will the admin use to target Azure Virtual Network resources? An organization has several virtual machines in Azure. The security admin wants to deploy Azure Bastion to get secure access to those VMs. What limitation should the admin keep in mind? An organization is using Azure and wants to improve their security best practices. Which Azure specific benchmark would the IT security team need to consider? An organization is using Security Center to assess its resources and subscriptions for security issues. The organization's overall secure score is low and needs to improve. How could a security admin try to improve the score? Remediate security recommendations. An organization needs to continuously monitor the security status of its network. What Security Center tool would they use? A. Continuous assessment. B. Network map. C. Network assessment. Network map. As the lead admin, it's important to convince your team to start using Azure Sentinel. You've put together a presentation. What are the four security operation areas of Azure Sentinel that cover this area? Your estate has many different data sources where data is stored. Which tool should be used with Azure Sentinel to quickly gain insights across your data as soon as a data source is connected? A lead admin for an organization is looking to protect against malicious threats posed by email messages, links (URLs), and collaboration tools. Which solution from the Microsoft 365 Defender suite is best suited for this purpose? A team admin is asked to provide a short presentation on the use and benefit of Microsoft Cloud App Security. Which of the four MCAS pillars is responsible for identifying and controlling sensitive information? When considering using Microsoft Cloud App Security for an organization, what is one of the key considerations? Admins in the organization are using the Microsoft 365 security center every day. They want to quickly get an understanding of the organization's current security posture. Which section in the Microsoft 365 security center will they use? Which of the following describes what an admin would need to select to view security cards grouped by risk, detection trends, configuration, and health, among others? An admin wants to get a comprehensive view of an attack including where it started, what tactics were used, and how far it has gone in the network. What can the admin use to view this type of information? Employees are allowed to bring and use their cell phones at work. The employees don't want their phone to be under full corporate control, but admins want to allow users to read emails and use Teams while protecting corporate data. Which of the following will allow admins to accomplish these goals? An organization uses different types of devices, including Windows, iOS, and Android devices. Admins for that organization have created a security baseline profile in Intune that they want to apply across the devices. To which devices can the security baseline profile be applied? A new admin has joined the team and needs to be able to access the Microsoft 365 Compliance Center. Which of the following roles could the admin use to access the Compliance Center? Your new colleagues on the admin team are unfamiliar with the concept of shared controls in Compliance Manager. How would the concept of shared controls be explained? A customer has requested a presentation on how the Microsoft 365 Compliance Center can help improve their organization's compliance posture. The presentation will need to cover Compliance Manager and compliance score. What is the difference between Compliance Manager and compliance score? posture across the organization. Which part of the concept of know your data, protect your data, and prevent data loss addresses the need for organizations to automatically retain, delete, store data and records in a compliant manner? As part of a new data loss prevention policy, the compliance admin needs to be able to identify important information such as credit card numbers, across the organization's data. How can the admin address this requirement? Within the organization, some emails are confidential and should be encrypted so that only authorized users can read them. How can this requirement be implemented? Your organization uses Microsoft Teams to collaborate on all projects. The compliance admin wants to prevent users from accidentally sharing sensitive information in a Microsoft Teams chat session. What capability can address this requirement? Due to a certain regulation, your organization must now keep hold of all documents in a specific SharePoint site that contains customer information for five years. How can this requirement be implemented?