Latest [Jan 24, 2023] SC-900 Exam Questions – Valid SC-900 Dumps Pdf [Q33-Q50]

Rate this post

Latest [Jan 24, 2023] SC-900 Exam Questions – Valid SC-900 Dumps Pdf

SC-900 Practice Test Questions Answers Updated 130 Questions

QUESTION 33
Select the answer that correctly completes the sentence.

Explanation
Text, letter Description automatically generated

QUESTION 34
Match the Azure networking service to the appropriate description.
To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.

Explanation
Graphical user interface, application Description automatically generated

Box 1: Azure Firewall
Azure Firewall provide Source Network Address Translation and Destination Network Address Translation.
Box 2: Azure Bastion
Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS.
Box 3: Network security group (NSG)
You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network.

QUESTION 35
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Azure Multi-Factor Authentication (MFA)

Azure Active Directory (Azure AD) Identity Protection

conditional access policies

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment

QUESTION 36
What is a use case for implementing information barrier policies in Microsoft 365?

to restrict unauthenticated access to Microsoft 365

to restrict Microsoft Teams chats between certain groups within an organization

to restrict Microsoft Exchange Online email between certain groups within an organization

to restrict data sharing to external email recipients

QUESTION 37
What is the purpose of Azure Active Directory (Azure AD) Password Protection?

to control how often users must change their passwords

to identify devices to which users can sign in without using multi-factor authentication (MFA)

to encrypt a password by using globally recognized encryption standards

to prevent users from using specific words in their passwords

Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation:
Azure AD Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization.
With Azure AD Password Protection, default global banned password lists are automatically applied to all users in an Azure AD tenant. To support your own business and security needs, you can define entries in a custom banned password list.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises

QUESTION 38
Select the answer that correctly completes the sentence.

QUESTION 39
Which two Azure resources can a network security group (NSG) be associated with? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

a network interface

an Azure App Service web app

a virtual network

a virtual network subnet

a resource group

You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

QUESTION 40
Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

text message (SMS)

Microsoft Authenticator app

email verification

phone call

security question

QUESTION 41
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Azure Defender provides security alerts and advanced threat protection for virtual machines, SQL databases, containers, web applications, your network, your storage, and more Box 2: Yes Cloud security posture management (CSPM) is available for free to all Azure users.
Box 3: Yes
Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud – whether they’re in Azure or not – as well as on premises.

QUESTION 42
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: No
Box 2: Yes
Leaked Credentials indicates that the user’s valid credentials have been leaked.
Box 3: Yes
Multi-Factor Authentication can be required based on conditions, one of which is user risk.

QUESTION 43
Select the answer that correctly completes the sentence.

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

QUESTION 44
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/security-center/azure-defender
https://docs.microsoft.com/en-us/azure/security-center/defender-for-storage-introduction https://docs.microsoft.com/en-us/azure/security-center/security-center-introduction

QUESTION 45
Select the answer that correctly completes the sentence.

Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview

QUESTION 46
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

QUESTION 47
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point

QUESTION 48
Select the answer that correctly completes the sentence.

Explanation
Graphical user interface, text Description automatically generated

QUESTION 49
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://support.microsoft.com/en-us/office/obtain-a-digital-certificate-and-create-a-digital-signature-e3d9d813-3305-4164-a820-2e063d86e512
https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/fin-ops/organization-administration/electronic-signature-overview

QUESTION 50
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

Loading …

Get to know about the Certification Path of Microsoft SC-900 certification Exam

The SC-900 exam is one of multiple exams required for the Microsoft Security, Compliance, and Identity Fundamentals certification. This exam will test your Windows system security and compliance knowledge. After passing this exam, you will have a better understanding of the concepts required to pass the other exams in the certification path. Microsoft SC-900 Dumps are effective study material for all the exams in this certification. It will help you to prepare for the SC-900 exam as well as the other exams in the certification path. It also contains a number of questions and answers that are aligned with the objectives of the exam. It contains everything you need to pass the exam. Premium question Explanation resources will also be available on our website for the convenience of the candidates. Conditional endpoint defaults are a part of SC-900 exam. Manage incorrect identities by administrator or end users is another objective of the exam. In addition, you will have to know the best practices for the configuration of Windows Server and Windows Small Business Server. Injection attacks files and web pages are also important for the SC-900 exam. Entitlement management and encryption of data are two more important concepts of the exam.

SC-900 dumps Sure Practice with 130 Questions: https://www.prepawaytest.com/Microsoft/SC-900-practice-exam-dumps.html

Get to know about the Certification Path of Microsoft SC-900 certification Exam

Leave a Reply Cancel reply