SC-900 PRACTICE TEST QUESTIONS
AND ANSWERS 2026 UPDATED
VERSION VERIFIED A+
◉ Which of the following measures might an organization implement as
part of the defense in-depth security methodology?
A. Locating all its servers in a single physical location.
B. Multi-factor authentication for all users.
C. Ensuring there's no segmentation of your corporate network.
Answer: Multi-factor Authentication for all users
◉ The human resources organization want to ensure that stored
employee data is encrypted. Which security mechanism would they use?
A. Encryption in transit.
B. Digital signing.
C. Encryption at rest.
Answer: Encryption at rest
◉ What is the best way of staying current with Microsoft compliance
documentation available through the Service Trust Portal?
A. Save the documents to your My Library.
B. Print each document so you can easily refer to them.
C. Download each document.
Answer: Save the documents to your My Library.
,◉ A compliance admin is looking for regulatory information relevant to
a specific region, which one link will provide the needed information?
A. Microsoft Privacy Principles.
B. Service Trust Portal.
C. Microsoft Compliance Manager.
Answer: Service Trust Portal.
◉ What type of security risk does a phishing scam pose?
A. Ethical risk.
B. Physical risk.
C. Identity risk.
Answer: Identity risk.
◉ What is a benefit of single sign-on?
A. A central identity provider can be used.
B. The user signs in once and can then access many applications or
resources.
C. Passwords always expire after 72 days.
Answer: The user signs in once and can then access many applications
or resources.
◉ Which relationship allows federated services to access resources?
A. Claim relationship.
, B. Shared access relationship.
C. Trust relationship.
Answer: Trust relationship.
◉ Authentication is the process of doing what?
A. Verifying that a user or device is who they say they are.
B. The process of profiling user behavior.
C. Enabling federated services.
Answer: Verifying that a user or device is who they say they are.
◉ An organization is launching a new app for its customers. Customers
will use a sign-in screen that is customized with the organization's brand
identity. Which type of Azure External identity solution should the
organization use?
A. Azure AD B2B
B. Azure AD B2C
C. Azure AD Hybrid identities
Answer: Azure AD B2C
◉ All users in an organization have Microsoft 365 cloud identities.
Which identity model applies?
A. Hybrid
B. Cloud-only
C. On-premises only
AND ANSWERS 2026 UPDATED
VERSION VERIFIED A+
◉ Which of the following measures might an organization implement as
part of the defense in-depth security methodology?
A. Locating all its servers in a single physical location.
B. Multi-factor authentication for all users.
C. Ensuring there's no segmentation of your corporate network.
Answer: Multi-factor Authentication for all users
◉ The human resources organization want to ensure that stored
employee data is encrypted. Which security mechanism would they use?
A. Encryption in transit.
B. Digital signing.
C. Encryption at rest.
Answer: Encryption at rest
◉ What is the best way of staying current with Microsoft compliance
documentation available through the Service Trust Portal?
A. Save the documents to your My Library.
B. Print each document so you can easily refer to them.
C. Download each document.
Answer: Save the documents to your My Library.
,◉ A compliance admin is looking for regulatory information relevant to
a specific region, which one link will provide the needed information?
A. Microsoft Privacy Principles.
B. Service Trust Portal.
C. Microsoft Compliance Manager.
Answer: Service Trust Portal.
◉ What type of security risk does a phishing scam pose?
A. Ethical risk.
B. Physical risk.
C. Identity risk.
Answer: Identity risk.
◉ What is a benefit of single sign-on?
A. A central identity provider can be used.
B. The user signs in once and can then access many applications or
resources.
C. Passwords always expire after 72 days.
Answer: The user signs in once and can then access many applications
or resources.
◉ Which relationship allows federated services to access resources?
A. Claim relationship.
, B. Shared access relationship.
C. Trust relationship.
Answer: Trust relationship.
◉ Authentication is the process of doing what?
A. Verifying that a user or device is who they say they are.
B. The process of profiling user behavior.
C. Enabling federated services.
Answer: Verifying that a user or device is who they say they are.
◉ An organization is launching a new app for its customers. Customers
will use a sign-in screen that is customized with the organization's brand
identity. Which type of Azure External identity solution should the
organization use?
A. Azure AD B2B
B. Azure AD B2C
C. Azure AD Hybrid identities
Answer: Azure AD B2C
◉ All users in an organization have Microsoft 365 cloud identities.
Which identity model applies?
A. Hybrid
B. Cloud-only
C. On-premises only
