[Oct 04, 2021] SC-900 Ultimate Study Guide - Exam4Labs
Ultimate Guide to Prepare SC-900 Certification Exam for Microsoft Certified in 2021
NEW QUESTION 25
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview
NEW QUESTION 26
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/roles/concept-understand-roles https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
NEW QUESTION 27
Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?
- A. Productivity Score
- B. Microsoft Secure Score
- C. Secure score in Azure Security Center
- D. Compliance score
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365- worldwide
NEW QUESTION 28
What can you use to provision Azure resources across multiple subscriptions in a consistent manner?
- A. Azure Defender
- B. Azure Sentinel
- C. Azure Policy
- D. Azure Blueprints
Answer: D
Explanation:
Section: Describe the Capabilities of Microsoft Compliance Solutions
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
NEW QUESTION 29
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Federation is a collection of domains that have established trust. Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
NEW QUESTION 30
Which Microsoft 365 compliance feature can you use to encrypt content automatically based on specific conditions?
- A. retention policies
- B. sensitivity labels
- C. Content Search
- D. eDiscovery
Answer: B
NEW QUESTION 31
What should you use in the Microsoft 365 security center to view security trends and track the protection status of identities?
- A. Reports
- B. Hunting
- C. Attack simulator
- D. Incidents
Answer: A
NEW QUESTION 32
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Box 1: Yes
System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks.
Box 2: Yes
Box 3: Yes
If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure.
NEW QUESTION 33
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Multi-factor authentication is a process where a user is prompted during the sign-in process for an additional form of identification, such as to enter a code on their cellphone or to provide a fingerprint scan.
NEW QUESTION 34
Which two tasks can you implement by using data loss prevention (DLP) policies in Microsoft 365? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Protect documents in Microsoft OneDrive that contain sensitive information.
- B. Display policy tips to users who are about to violate your organization's policies.
- C. Apply security baselines to devices.
- D. Enable disk encryption on endpoints.
Answer: A,B
NEW QUESTION 35
Select the answer that correctly completes the sentence.
Answer:
Explanation:
NEW QUESTION 36
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide
NEW QUESTION 37
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
Graphical user interface, text Description automatically generated with medium confidence
NEW QUESTION 38
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?
- A. Azure Active Directory (Azure AD) Identity Protection
- B. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
- C. Azure Multi-Factor Authentication (MFA)
- D. conditional access policies
Answer: D
Explanation:
Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation/Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policy- common
NEW QUESTION 39
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-device-management
NEW QUESTION 40
Which two tasks can you implement by using data loss prevention (DLP) policies in Microsoft 365? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Protect documents in Microsoft OneDrive that contain sensitive information.
- B. Display policy tips to users who are about to violate your organization's policies.
- C. Apply security baselines to devices.
- D. Enable disk encryption on endpoints.
Answer: A,B
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide
NEW QUESTION 41
HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:
Answer:
Explanation:
Section: Describe the Capabilities of Microsoft Security Solutions
Explanation/Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender/threat-analytics?view=o365-worldwide
NEW QUESTION 42
What is the purpose of Azure Active Directory (Azure AD) Password Protection?
- A. to control how often users must change their passwords
- B. to prevent users from using specific words in their passwords
- C. to identify devices to which users can sign in without using multi-factor authentication (MFA)
- D. to encrypt a password by using globally recognized encryption standards
Answer: B
Explanation:
Explanation
Azure AD Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization.
With Azure AD Password Protection, default global banned password lists are automatically applied to all users in an Azure AD tenant. To support your own business and security needs, you can define entries in a custom banned password list.
NEW QUESTION 43
What is the purpose of Azure Active Directory (Azure AD) Password Protection?
- A. to control how often users must change their passwords
- B. to prevent users from using specific words in their passwords
- C. to identify devices to which users can sign in without using multi-factor authentication (MFA)
- D. to encrypt a password by using globally recognized encryption standards
Answer: B
Explanation:
Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation:
Azure AD Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization.
With Azure AD Password Protection, default global banned password lists are automatically applied to all users in an Azure AD tenant. To support your own business and security needs, you can define entries in a custom banned password list.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises
NEW QUESTION 44
In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?
- A. Active Directory Federation Services (AD FS)
- B. Azure Ad Privileged Identity Management (PIM)
- C. Azure Sentinel
- D. Azure AD Connect
Answer: D
NEW QUESTION 45
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: Describe the Capabilities of Microsoft Compliance Solutions
Explanation:
Box 1: Yes
You can use sensitivity labels to provide protection settings that include encryption of emails and documents to prevent unauthorized people from accessing this data.
Box 2: Yes
You can use sensitivity labels to mark the content when you use Office apps, by adding watermarks, headers, or footers to documents that have the label applied.
Box 3: Yes
You can use sensitivity labels to mark the content when you use Office apps, by adding headers, or footers to email that have the label applied.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide
NEW QUESTION 46
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Box 1: Yes
Azure Defender provides security alerts and advanced threat protection for virtual machines, SQL databases, containers, web applications, your network, your storage, and more Box 2: Yes Cloud security posture management (CSPM) is available for free to all Azure users.
Box 3: Yes
Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud - whether they're in Azure or not - as well as on premises.
NEW QUESTION 47
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Box 1: Yes
Box 2: Yes
Box 3: No
The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.
NEW QUESTION 48
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation:
Box 1: Yes
Azure AD supports custom roles.
Box 2: Yes
Global Administrator has access to all administrative features in Azure Active Directory.
Box 3: No
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/roles/concept-understand-roles
https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
NEW QUESTION 49
HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:
Answer:
Explanation:
Section: Describe the Capabilities of Microsoft Security Solutions
Explanation:
Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
NEW QUESTION 50
......
Microsoft Certified Fundamentals-SC-900 Exam-Practice-Dumps: https://www.exam4labs.com/SC-900-practice-torrent.html
Use Real SC-900 Dumps - Microsoft Correct Answers: https://drive.google.com/open?id=1kkXt1n_nmyqXbtZ_jhVDPiQQcAQpqVdR