Exam SC-900: Microsoft Security,
Compliance, and Identity
Fundamentals Question And Correct
Answers New Update
An organization has deployed Microsoft 365 applications to all employees. Considering
the shared responsibility model, who is responsible for the accounts and identities
relating to these employees?
-The organization.
-Microsoft, the SaaS provider.
-There's shared responsibility between an organization and Microsoft. - Answer -✔✔The
organization.
- In the shared responsibility model, the customer organization always has responsibility
for their data, including information and data relating to employees, devices, and
accounts and identities.
Which of the following measures might an organization implement as part of the
defense in-depth security methodology?
-Locating all its servers in a single physical location.
-Multifactor authentication for all users.
-Ensuring there's no segmentation of your corporate network. - Answer -✔✔Multifactor
authentication for all users.
-Multifactor authentication is an example of defense in-depth at the identity and access
layer.
The human resources organization wants to ensure that stored employee data is
encrypted. Which security mechanism would they use?
-Hashing.
-Encryption in transit.
-Encryption at rest. - Answer -✔✔Encryption at rest.
,- Encryption at rest could be part of a security strategy to protect stored employee data.
Which of the following best describes the concept of data sovereignty?
-There are regulations that govern the physical locations where data can be stored and
how and when it can be transferred, processed, or accessed internationally.
-Data, particularly personal data, is subject to the laws and regulations of the
country/region in which it's physically collected, held, or processed.
-Trust no one, verify everything. - Answer -✔✔Data, particularly personal data, is
subject to the laws and regulations of the country/region in which it's physically
collected, held, or processed.
- Data sovereignty is the concept that data, particularly personal data, is subject to the
laws and regulations of the country/region in which it's physically collected, held, or
processed.
What is a benefit of single sign-on?
-A central identity provider can be used.
-The user signs in once and can then access many applications or resources.
-Passwords always expire after 72 days. - Answer -✔✔The user signs in once and can
then access many applications or resources.
-With single sign-on, a user signs in once and can then access a number of applications
or resources.
Which relationship allows federated services to access resources?
-Claim relationship.
-Shared access relationship.
-Trust relationship. - Answer -✔✔Trust relationship.
-Federated services use a trust relationship to allow access to resources.
Authentication is the process of doing what?
-Verifying that a user or device is who they say they are.
-The process of tracking user behavior.
, -Enabling federated services. - Answer -✔✔Verifying that a user or device is who they
say they are.
-Authentication is the process of verifying that a user or device is who they say they are.
An organization is launching a new app for its customers. Customers will use a sign-in
screen that is customized with the organization's brand identity. Which type of Azure
External identity solution should the organization use?
-Azure AD B2B
-Azure AD B2C
-Azure AD Hybrid identities - Answer -✔✔Azure AD B2C
- Azure AD B2C is an authentication solution for customers that you can customize with
your brand identity.
An organization has completed a full migration to the cloud and has purchased devices
for all its employees. All employees sign in to the device through an organizational
account configured in Azure AD. Select the option that best describes how these
devices are set up in Azure AD.
-These devices are set up as Azure AD registered.
-These devices are set up as Azure AD joined.
-These devices are set up as Hybrid Azure AD joined. - Answer -✔✔These devices are
set up as Azure AD joined.
-An Azure AD joined device is a device joined to Azure AD through an organizational
account, which is then used to sign in to the device. Azure AD joined devices are
generally owned by the organization.
A developer wants an application to connect to Azure resources that support Azure AD
authentication, without having to manage any credentials and without incurring any
extra cost. Which option best describes the identity type of the application?
-Service principal
-Managed identity
-Hybrid identity - Answer -✔✔Managed identity
Compliance, and Identity
Fundamentals Question And Correct
Answers New Update
An organization has deployed Microsoft 365 applications to all employees. Considering
the shared responsibility model, who is responsible for the accounts and identities
relating to these employees?
-The organization.
-Microsoft, the SaaS provider.
-There's shared responsibility between an organization and Microsoft. - Answer -✔✔The
organization.
- In the shared responsibility model, the customer organization always has responsibility
for their data, including information and data relating to employees, devices, and
accounts and identities.
Which of the following measures might an organization implement as part of the
defense in-depth security methodology?
-Locating all its servers in a single physical location.
-Multifactor authentication for all users.
-Ensuring there's no segmentation of your corporate network. - Answer -✔✔Multifactor
authentication for all users.
-Multifactor authentication is an example of defense in-depth at the identity and access
layer.
The human resources organization wants to ensure that stored employee data is
encrypted. Which security mechanism would they use?
-Hashing.
-Encryption in transit.
-Encryption at rest. - Answer -✔✔Encryption at rest.
,- Encryption at rest could be part of a security strategy to protect stored employee data.
Which of the following best describes the concept of data sovereignty?
-There are regulations that govern the physical locations where data can be stored and
how and when it can be transferred, processed, or accessed internationally.
-Data, particularly personal data, is subject to the laws and regulations of the
country/region in which it's physically collected, held, or processed.
-Trust no one, verify everything. - Answer -✔✔Data, particularly personal data, is
subject to the laws and regulations of the country/region in which it's physically
collected, held, or processed.
- Data sovereignty is the concept that data, particularly personal data, is subject to the
laws and regulations of the country/region in which it's physically collected, held, or
processed.
What is a benefit of single sign-on?
-A central identity provider can be used.
-The user signs in once and can then access many applications or resources.
-Passwords always expire after 72 days. - Answer -✔✔The user signs in once and can
then access many applications or resources.
-With single sign-on, a user signs in once and can then access a number of applications
or resources.
Which relationship allows federated services to access resources?
-Claim relationship.
-Shared access relationship.
-Trust relationship. - Answer -✔✔Trust relationship.
-Federated services use a trust relationship to allow access to resources.
Authentication is the process of doing what?
-Verifying that a user or device is who they say they are.
-The process of tracking user behavior.
, -Enabling federated services. - Answer -✔✔Verifying that a user or device is who they
say they are.
-Authentication is the process of verifying that a user or device is who they say they are.
An organization is launching a new app for its customers. Customers will use a sign-in
screen that is customized with the organization's brand identity. Which type of Azure
External identity solution should the organization use?
-Azure AD B2B
-Azure AD B2C
-Azure AD Hybrid identities - Answer -✔✔Azure AD B2C
- Azure AD B2C is an authentication solution for customers that you can customize with
your brand identity.
An organization has completed a full migration to the cloud and has purchased devices
for all its employees. All employees sign in to the device through an organizational
account configured in Azure AD. Select the option that best describes how these
devices are set up in Azure AD.
-These devices are set up as Azure AD registered.
-These devices are set up as Azure AD joined.
-These devices are set up as Hybrid Azure AD joined. - Answer -✔✔These devices are
set up as Azure AD joined.
-An Azure AD joined device is a device joined to Azure AD through an organizational
account, which is then used to sign in to the device. Azure AD joined devices are
generally owned by the organization.
A developer wants an application to connect to Azure resources that support Azure AD
authentication, without having to manage any credentials and without incurring any
extra cost. Which option best describes the identity type of the application?
-Service principal
-Managed identity
-Hybrid identity - Answer -✔✔Managed identity
