SC-900 practice questions 151–160

1. Question 151 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service. Reference: https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 152 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The answer is: Microsoft Endpoint Manager "Endpoint Manager combines services you may know and already be using, including Microsoft Intune, Configuration Manager, Desktop Analytics, co-management, and Windows Autopilot. These services are part of the Microsoft 365 stack to help secure access, protect data, respond to risk, and manage risk." Source - https://docs.microsoft.com/en-us/mem/endpoint-manager-overview

   Source: Adapted from community discussion — gustavomelquiades

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 153 · 223 in bank

   Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

   • Aconditional access policies
   • BAzure AD Identity Protection
   • CAzure AD Privileged Identity Management (PIM)
   • Dauthentication method policies

   Show answer

   Answer: C

   Explanation

   PIM in correct, but in practice it is not always just-in-time. Sometimes, a user has to wait between 30 minutes to 2 hours for the requested role to be activated.

   Source: Adapted from community discussion — PN20

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 154 · 223 in bank

   Select 3

   Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Atext message (SMS)
   • BMicrosoft Authenticator app
   • Cemail verification
   • Dphone call
   • Esecurity question

   Show answer

   Answer: ABD

   Explanation

   Available verification methods When users sign in to an application or service and receive an MFA prompt, they can choose from one of their registered forms of additional verification. Users can access My Profile to edit or add verification methods. The following additional forms of verification can be used with Azure AD Multi-Factor Authentication: Microsoft Authenticator app Windows Hello for Business FIDO2 security key OATH hardware token (preview) OATH software token SMS Voice call https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

   Source: Adapted from community discussion — HK010

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 155 · 223 in bank

   Which Microsoft 365 feature can you use to restrict communication and the sharing of information between members of two departments at your organization?

   • Asensitivity label policies
   • BCustomer Lockbox
   • Cinformation barriers
   • DPrivileged Access Management (PAM)

   Show answer

   Answer: C

   Explanation

   Microsoft Purview Information Barriers (IB) is a compliance solution that allows you to restrict two-way communication and collaboration between groups and users in Microsoft Teams, SharePoint, and OneDrive.

   Source: Adapted from community discussion — ltp1120

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 156 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

   References

   • Microsoft Learn

   

   Next question

7. Question 157 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Yes - Conditional access policies can be applied to all users Box 2: No - Conditional access policies are applied after first-factor authentication is completed. Box 3: Yes - Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies. Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

   Source: Adapted from community discussion — OG_Diablo

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 158 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   When you register an application through the Azure portal, an application object and service principal are automatically created in your home directory or tenant. Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal

   Source: Adapted from community discussion — Clouddog

   References

   • Microsoft Learn

   

   Next question

9. Question 159 · 223 in bank

   Select 3

   Which three authentication methods does Windows Hello for Business support? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Afingerprint
   • Bfacial recognition
   • CPIN
   • Demail verification
   • Esecurity question

   Show answer

   Answer: ABC

   Explanation

   correct Windows Hello in Windows 10 enables users to sign in to their device using a PIN. https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-why-pin-is-better-than-password Windows Hello lets your employees use fingerprint or facial recognition as an alternative method to unlocking a device. With Windows Hello, authentication happens when the employee provides his or her unique biometric identifier while accessing the device-specific Windows Hello credentials. https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise

   Source: Adapted from community discussion — JayHall

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 160 · 223 in bank

    HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

    Source: Adapted from community discussion — Cereb7

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 151. 223 questions available.