Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals |
COMPLETE QUESTIONS AND ANSWERS | 2025 LATEST UPDATED |
ALREADY GRADED A+
An organization has deployed Microsoft 365 applications to all employees. Considering the
shared responsibility model, who is responsible for the accounts and identities relating to these
employees?
-The organization.
-Microsoft, the SaaS provider.
-There's shared responsibility between an organization and Microsoft. - (answers)The
organization.
- In the shared responsibility model, the customer organization always has responsibility for their
data, including information and data relating to employees, devices, and accounts and identities.
Which of the following measures might an organization implement as part of the defense in-
depth security methodology?
-Locating all its servers in a single physical location.
-Multifactor authentication for all users.
-Ensuring there's no segmentation of your corporate network. - (answers)Multifactor
authentication for all users.
-Multifactor authentication is an example of defense in-depth at the identity and access layer.
The human resources organization wants to ensure that stored employee data is encrypted.
Which security mechanism would they use?
,-Hashing.
-Encryption in transit.
-Encryption at rest. - (answers)Encryption at rest.
- Encryption at rest could be part of a security strategy to protect stored employee data.
Which of the following best describes the concept of data sovereignty?
-There are regulations that govern the physical locations where data can be stored and how and
when it can be transferred, processed, or accessed internationally.
-Data, particularly personal data, is subject to the laws and regulations of the country/region in
which it's physically collected, held, or processed.
-Trust no one, verify everything. - (answers)Data, particularly personal data, is subject to the
laws and regulations of the country/region in which it's physically collected, held, or processed.
- Data sovereignty is the concept that data, particularly personal data, is subject to the laws and
regulations of the country/region in which it's physically collected, held, or processed.
What is a benefit of single sign-on?
-A central identity provider can be used.
-The user signs in once and can then access many applications or resources.
-Passwords always expire after 72 days. - (answers)The user signs in once and can then access
many applications or resources.
, -With single sign-on, a user signs in once and can then access a number of applications or
resources.
Which relationship allows federated services to access resources?
-Claim relationship.
-Shared access relationship.
-Trust relationship. - (answers)Trust relationship.
-Federated services use a trust relationship to allow access to resources.
Authentication is the process of doing what?
-Verifying that a user or device is who they say they are.
-The process of tracking user behavior.
-Enabling federated services. - (answers)Verifying that a user or device is who they say they are.
-Authentication is the process of verifying that a user or device is who they say they are.
An organization is launching a new app for its customers. Customers will use a sign-in screen
that is customized with the organization's brand identity. Which type of Azure External identity
solution should the organization use?
-Azure AD B2B
-Azure AD B2C
COMPLETE QUESTIONS AND ANSWERS | 2025 LATEST UPDATED |
ALREADY GRADED A+
An organization has deployed Microsoft 365 applications to all employees. Considering the
shared responsibility model, who is responsible for the accounts and identities relating to these
employees?
-The organization.
-Microsoft, the SaaS provider.
-There's shared responsibility between an organization and Microsoft. - (answers)The
organization.
- In the shared responsibility model, the customer organization always has responsibility for their
data, including information and data relating to employees, devices, and accounts and identities.
Which of the following measures might an organization implement as part of the defense in-
depth security methodology?
-Locating all its servers in a single physical location.
-Multifactor authentication for all users.
-Ensuring there's no segmentation of your corporate network. - (answers)Multifactor
authentication for all users.
-Multifactor authentication is an example of defense in-depth at the identity and access layer.
The human resources organization wants to ensure that stored employee data is encrypted.
Which security mechanism would they use?
,-Hashing.
-Encryption in transit.
-Encryption at rest. - (answers)Encryption at rest.
- Encryption at rest could be part of a security strategy to protect stored employee data.
Which of the following best describes the concept of data sovereignty?
-There are regulations that govern the physical locations where data can be stored and how and
when it can be transferred, processed, or accessed internationally.
-Data, particularly personal data, is subject to the laws and regulations of the country/region in
which it's physically collected, held, or processed.
-Trust no one, verify everything. - (answers)Data, particularly personal data, is subject to the
laws and regulations of the country/region in which it's physically collected, held, or processed.
- Data sovereignty is the concept that data, particularly personal data, is subject to the laws and
regulations of the country/region in which it's physically collected, held, or processed.
What is a benefit of single sign-on?
-A central identity provider can be used.
-The user signs in once and can then access many applications or resources.
-Passwords always expire after 72 days. - (answers)The user signs in once and can then access
many applications or resources.
, -With single sign-on, a user signs in once and can then access a number of applications or
resources.
Which relationship allows federated services to access resources?
-Claim relationship.
-Shared access relationship.
-Trust relationship. - (answers)Trust relationship.
-Federated services use a trust relationship to allow access to resources.
Authentication is the process of doing what?
-Verifying that a user or device is who they say they are.
-The process of tracking user behavior.
-Enabling federated services. - (answers)Verifying that a user or device is who they say they are.
-Authentication is the process of verifying that a user or device is who they say they are.
An organization is launching a new app for its customers. Customers will use a sign-in screen
that is customized with the organization's brand identity. Which type of Azure External identity
solution should the organization use?
-Azure AD B2B
-Azure AD B2C
