Microsoft sc-900 study Guide 2026 uPdAte WitH
coMPLete QuestioNs ANd correct detAiLed ANsWers
(Verified ANsWers) |ALreAdy GrAded A+|BrANd NeW
VersioN!!
Zero Trust model - ANsWer-Assumes breach and verifies each request as though it
originated from an uncontrolled network.
Three principles of Zero Trust - ANsWer-Verify explicitly, least privilege access, and
assume breach.
Verify explicitly - ANsWer-Always authenticate and authorize based on the available data
points, including user identity, location, device, service or workload, data classification,
and anomalies.
Least privileged access - ANsWer-Limit user access with just-in-time and just-enough
access (JIT/JEA), risk-based adaptive policies, and data protection to protect both data
and productivity.
Assume breach - ANsWer-Segment access by network, user, devices, and application.
Use encryption to protect data, and use analytics to get visibility, detect threats, and
improve your security.
Defense in depth - ANsWer-A strategy that employs a series of mechanisms to slow the
advance of an attack that's aimed at acquiring unauthorized access to information.
Data breach - ANsWer-When data is stolen, and this includes personal data.
Dictionary attack - ANsWer-A type of identity attack where a hacker attempts to steal an
identity by trying a large number of known passwords.
,Malware - ANsWer-The term used to describe malicious applications and code that can
cause damage and disrupt normal use of devices.
Distributed Denial of Service (DDoS) attack - ANsWer-Attempts to exhaust an
application's resources, making the application unavailable to legitimate users.
Symmetric encryption - ANsWer-Uses the same key to encrypt and decrypt the data.
Asymmetric encryption - ANsWer-Uses a public key and private key pair.
Encryption at rest - ANsWer-Data that's stored on a physical device, such as a server.
Encryption in transit - ANsWer-Data moving from one location to another, such as across
the internet or through a private network.
Hashing - ANsWer-Uses an algorithm to convert the original text to a unique fixed-length
hash value.
Confidentiality (CIA) - ANsWer-Refers to the need to keep confidential sensitive data
such as customer information, passwords, or financial data.
Integrity (CIA) - ANsWer-Refers to keeping data or messages correct.
Availability (CIA) - ANsWer-Refers to making data available to those who need it.
Microsoft Cloud Adoption Framework (CAF) for Azure - ANsWer-Guidance that provides
a proven and consistent methodology for implementing cloud technologies that are
designed to help you create and implement business and technology strategies for the
cloud based on best practices, documentation, and tools.
Identity - ANsWer-How someone or something can be verified and authenticated to be
who they say they are.
, Shadow IT - ANsWer-Discovering all applications being used, sometimes called Shadow
IT because not all applications are managed centrally.
Strategy (CAF lifecycle) - ANsWer-Define business justification and expected outcomes
of adoption.
Plan (CAF lifecycle) - ANsWer-Align actionable adoption plans to business outcomes.
Ready (CAF lifecycle) - ANsWer-Prepare the cloud environment for the planned changes
and move resources in.
Govern (CAF lifecycle) - ANsWer-Establish a well-managed cloud environment.
Manage (CAF lifecycle) - ANsWer-Operations management for cloud and hybrid
solutions.
Administration - ANsWer-Administration is about the creation and
management/governance of identities for users, devices, and services.
Authentication - ANsWer-The authentication pillar tells the story of how much assurance
for a particular identity is enough.
Authorization - ANsWer-The authorization pillar is about processing the incoming
identity data to determine the level of access an authenticated person or service has
within the application or service that it wants to access.
Auditing - ANsWer-The auditing pillar is about tracking who does what, when, where, and
how.
Authentication (Who are you?) - ANsWer-The process of establishing the identity of a
person or service looking to access a resource.
coMPLete QuestioNs ANd correct detAiLed ANsWers
(Verified ANsWers) |ALreAdy GrAded A+|BrANd NeW
VersioN!!
Zero Trust model - ANsWer-Assumes breach and verifies each request as though it
originated from an uncontrolled network.
Three principles of Zero Trust - ANsWer-Verify explicitly, least privilege access, and
assume breach.
Verify explicitly - ANsWer-Always authenticate and authorize based on the available data
points, including user identity, location, device, service or workload, data classification,
and anomalies.
Least privileged access - ANsWer-Limit user access with just-in-time and just-enough
access (JIT/JEA), risk-based adaptive policies, and data protection to protect both data
and productivity.
Assume breach - ANsWer-Segment access by network, user, devices, and application.
Use encryption to protect data, and use analytics to get visibility, detect threats, and
improve your security.
Defense in depth - ANsWer-A strategy that employs a series of mechanisms to slow the
advance of an attack that's aimed at acquiring unauthorized access to information.
Data breach - ANsWer-When data is stolen, and this includes personal data.
Dictionary attack - ANsWer-A type of identity attack where a hacker attempts to steal an
identity by trying a large number of known passwords.
,Malware - ANsWer-The term used to describe malicious applications and code that can
cause damage and disrupt normal use of devices.
Distributed Denial of Service (DDoS) attack - ANsWer-Attempts to exhaust an
application's resources, making the application unavailable to legitimate users.
Symmetric encryption - ANsWer-Uses the same key to encrypt and decrypt the data.
Asymmetric encryption - ANsWer-Uses a public key and private key pair.
Encryption at rest - ANsWer-Data that's stored on a physical device, such as a server.
Encryption in transit - ANsWer-Data moving from one location to another, such as across
the internet or through a private network.
Hashing - ANsWer-Uses an algorithm to convert the original text to a unique fixed-length
hash value.
Confidentiality (CIA) - ANsWer-Refers to the need to keep confidential sensitive data
such as customer information, passwords, or financial data.
Integrity (CIA) - ANsWer-Refers to keeping data or messages correct.
Availability (CIA) - ANsWer-Refers to making data available to those who need it.
Microsoft Cloud Adoption Framework (CAF) for Azure - ANsWer-Guidance that provides
a proven and consistent methodology for implementing cloud technologies that are
designed to help you create and implement business and technology strategies for the
cloud based on best practices, documentation, and tools.
Identity - ANsWer-How someone or something can be verified and authenticated to be
who they say they are.
, Shadow IT - ANsWer-Discovering all applications being used, sometimes called Shadow
IT because not all applications are managed centrally.
Strategy (CAF lifecycle) - ANsWer-Define business justification and expected outcomes
of adoption.
Plan (CAF lifecycle) - ANsWer-Align actionable adoption plans to business outcomes.
Ready (CAF lifecycle) - ANsWer-Prepare the cloud environment for the planned changes
and move resources in.
Govern (CAF lifecycle) - ANsWer-Establish a well-managed cloud environment.
Manage (CAF lifecycle) - ANsWer-Operations management for cloud and hybrid
solutions.
Administration - ANsWer-Administration is about the creation and
management/governance of identities for users, devices, and services.
Authentication - ANsWer-The authentication pillar tells the story of how much assurance
for a particular identity is enough.
Authorization - ANsWer-The authorization pillar is about processing the incoming
identity data to determine the level of access an authenticated person or service has
within the application or service that it wants to access.
Auditing - ANsWer-The auditing pillar is about tracking who does what, when, where, and
how.
Authentication (Who are you?) - ANsWer-The process of establishing the identity of a
person or service looking to access a resource.
