SC-900 Security, Compliance, and
Identity Fundamentals Exam
Question With Correct Answers
Physical Security
Identity and Access
Perimeter
Network
Compute
Application
Data - Answer -✔✔What are the 6 layers of Microsoft's Defense in Depth security
approach?
Verify explicitly
Use lease privileged access
Assume breach - Answer -✔✔What are the 3 Zero Trust principles?
Global Data Protection Regulation - Answer -✔✔What does GDPR stand for?
Data Breach
Malware
Phishing
Denial of Service - Answer -✔✔What are 4 common security threats?
Symmetrical
Asymmetrical - Answer -✔✔What are the two types of encryption?
Asymmetrical Encryption - Answer -✔✔What type of encryption requires a public and a
private key?
Transport Layer Security - Answer -✔✔What does TLS stand for?
Transparent Data Encryption - Answer -✔✔What is TDE?
BitLocker - Answer -✔✔What is the Windows based data encryption at rest solution?
Digital Signatures - Answer -✔✔What is password hash used for?
Microsoft Service Trust Portal - Answer -✔✔What provides a variety of content, tools,
and other resources about Microsoft security, privacy, and compliance practices as well
,as contains details about Microsoft's implementation of controls and processes that
protect our cloud services and the customer data therein?
Confidentiality
Integrity
Availability - Answer -✔✔What does the CIA stand for?
Data Beach - Answer -✔✔What is it referred to when data is stolen?
Dictionary Attack - Answer -✔✔What is a type of identity attack where a hacker
attempts to steal an identity by trying a large number of known passwords?
Malware - Answer -✔✔What are malicious applications and code that can cause
damage and disrupt normal use of devices?
Ransomware - Answer -✔✔What is a type of malware that encrypts files and folders,
preventing access to important files?
Hashing - Answer -✔✔What uses an algorithm to convert the original text to a unique
fixed-length hash value?
Password-based attacks - Answer -✔✔What includes password spray attacks and brute
force attacks?
Phishing - Answer -✔✔Type of attack when a hacker sends an email that appears to
come from a reputable source?
Spear Phishing - Answer -✔✔Type of attack where Hackers build databases of
information about users, which can be used to create highly credible emails?
Identity - Answer -✔✔What is the primary security perimeter?
Administration
Authentication
Authorization
Auditing - Answer -✔✔What are the 4 pillars of identity?
Identity Provider - Answer -✔✔With modern authentication, all services, including all
authentication services, are supplied by a central?
Federation - Answer -✔✔What enables the access of services across organizational or
domain boundaries by establishing trust relationships between the respective domain's
identity provider?
, Active Directory - Answer -✔✔What is a set of directory services developed by Microsoft
as part of Windows 2000 for on-premises domain-based networks?
Active Directory Domain Services - Answer -✔✔What stores information about
members of the domain, including devices and users, verifies their credentials, and
defines their access rights?
Free
Office 365
Premium P1
Premium P2 - Answer -✔✔What 4 versions is Azure AD available in?
Service Principal - Answer -✔✔What is a security identity used by applications or
services to access specific Azure resources?
Managed Identities - Answer -✔✔What is automatically managed in Azure AD and
typically used to manage the credentials for authenticating a cloud application with an
Azure service?
System-assigned
User-assigned - Answer -✔✔What are the two types of Managed Identities?
Azure AD joined - Answer -✔✔What type of devices exist only in the cloud, are owned
by an organization and signed in with their account?
Hybrid Azure AD joined devices - Answer -✔✔What type of devices can be Windows 7,
8.1, or 10, or Windows Server 2008, or newer, owned by an organization and signed in
with an Active Directory Domain Services account belonging to that organization.
They exist in the cloud and on-premises.
Azure AD External Entities - Answer -✔✔What is a set of capabilities that enable
organizations to allow access to external users, such as customers or partners?
B2B
B2C - Answer -✔✔What are the two different Azure AD External Identities?
B2B Collaboration - Answer -✔✔What allows you to share your organization's
applications and services with guest users from other organizations, while maintaining
control over your own data?
B2C access management - Answer -✔✔What is a customer identity access
management (CIAM) solution that allows external users to sign in with their preferred
social, enterprise, or local account identities to get single sign-on to your applications?
Identity Fundamentals Exam
Question With Correct Answers
Physical Security
Identity and Access
Perimeter
Network
Compute
Application
Data - Answer -✔✔What are the 6 layers of Microsoft's Defense in Depth security
approach?
Verify explicitly
Use lease privileged access
Assume breach - Answer -✔✔What are the 3 Zero Trust principles?
Global Data Protection Regulation - Answer -✔✔What does GDPR stand for?
Data Breach
Malware
Phishing
Denial of Service - Answer -✔✔What are 4 common security threats?
Symmetrical
Asymmetrical - Answer -✔✔What are the two types of encryption?
Asymmetrical Encryption - Answer -✔✔What type of encryption requires a public and a
private key?
Transport Layer Security - Answer -✔✔What does TLS stand for?
Transparent Data Encryption - Answer -✔✔What is TDE?
BitLocker - Answer -✔✔What is the Windows based data encryption at rest solution?
Digital Signatures - Answer -✔✔What is password hash used for?
Microsoft Service Trust Portal - Answer -✔✔What provides a variety of content, tools,
and other resources about Microsoft security, privacy, and compliance practices as well
,as contains details about Microsoft's implementation of controls and processes that
protect our cloud services and the customer data therein?
Confidentiality
Integrity
Availability - Answer -✔✔What does the CIA stand for?
Data Beach - Answer -✔✔What is it referred to when data is stolen?
Dictionary Attack - Answer -✔✔What is a type of identity attack where a hacker
attempts to steal an identity by trying a large number of known passwords?
Malware - Answer -✔✔What are malicious applications and code that can cause
damage and disrupt normal use of devices?
Ransomware - Answer -✔✔What is a type of malware that encrypts files and folders,
preventing access to important files?
Hashing - Answer -✔✔What uses an algorithm to convert the original text to a unique
fixed-length hash value?
Password-based attacks - Answer -✔✔What includes password spray attacks and brute
force attacks?
Phishing - Answer -✔✔Type of attack when a hacker sends an email that appears to
come from a reputable source?
Spear Phishing - Answer -✔✔Type of attack where Hackers build databases of
information about users, which can be used to create highly credible emails?
Identity - Answer -✔✔What is the primary security perimeter?
Administration
Authentication
Authorization
Auditing - Answer -✔✔What are the 4 pillars of identity?
Identity Provider - Answer -✔✔With modern authentication, all services, including all
authentication services, are supplied by a central?
Federation - Answer -✔✔What enables the access of services across organizational or
domain boundaries by establishing trust relationships between the respective domain's
identity provider?
, Active Directory - Answer -✔✔What is a set of directory services developed by Microsoft
as part of Windows 2000 for on-premises domain-based networks?
Active Directory Domain Services - Answer -✔✔What stores information about
members of the domain, including devices and users, verifies their credentials, and
defines their access rights?
Free
Office 365
Premium P1
Premium P2 - Answer -✔✔What 4 versions is Azure AD available in?
Service Principal - Answer -✔✔What is a security identity used by applications or
services to access specific Azure resources?
Managed Identities - Answer -✔✔What is automatically managed in Azure AD and
typically used to manage the credentials for authenticating a cloud application with an
Azure service?
System-assigned
User-assigned - Answer -✔✔What are the two types of Managed Identities?
Azure AD joined - Answer -✔✔What type of devices exist only in the cloud, are owned
by an organization and signed in with their account?
Hybrid Azure AD joined devices - Answer -✔✔What type of devices can be Windows 7,
8.1, or 10, or Windows Server 2008, or newer, owned by an organization and signed in
with an Active Directory Domain Services account belonging to that organization.
They exist in the cloud and on-premises.
Azure AD External Entities - Answer -✔✔What is a set of capabilities that enable
organizations to allow access to external users, such as customers or partners?
B2B
B2C - Answer -✔✔What are the two different Azure AD External Identities?
B2B Collaboration - Answer -✔✔What allows you to share your organization's
applications and services with guest users from other organizations, while maintaining
control over your own data?
B2C access management - Answer -✔✔What is a customer identity access
management (CIAM) solution that allows external users to sign in with their preferred
social, enterprise, or local account identities to get single sign-on to your applications?
