SC-900 practice questions 161–170

1. Question 161 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-admin-mfa

   References

   • Microsoft Learn

   

   Next question

2. Question 162 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Federation is a collection of domains that have established trust. Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

   Source: Adapted from community discussion — gustavomelquiades

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 163 · 223 in bank

   Select 2

   When security defaults are enabled for an Azure Active Directory (Azure AD) tenant, which two requirements are enforced? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AAll users must authenticate from a registered device.
   • BAdministrators must always use Azure Multi-Factor Authentication (MFA).
   • CAzure Multi-Factor Authentication (MFA) registration is required for all users.
   • DAll users must authenticate by using passwordless sign-in.
   • EAll users must authenticate by using Windows Hello.

   Show answer

   Answer: BC

   Explanation

   The answer is: Administrators must always use Azure Multi-Factor Authentication (MFA). Azure Multi-Factor Authentication (MFA) registration is required for all users. https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults

   Source: Adapted from community discussion — LegendaryZA

   References

   • Microsoft Learn

   Next question

4. Question 164 · 223 in bank

   Which type of identity is created when you register an application with Active Directory (Azure AD)?

   • Aa user account
   • Ba user-assigned managed identity
   • Ca system-assigned managed identity
   • Da service principal

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

5. Question 165 · 223 in bank

   Select 3

   Which three tasks can be performed by using Azure Active Directory (Azure AD) Identity Protection? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AConfigure external access for partner organizations.
   • BExport risk detection to third-party utilities.
   • CAutomate the detection and remediation of identity based-risks.
   • DInvestigate risks that relate to user authentication.
   • ECreate and automatically assign sensitivity labels to data.

   Show answer

   Answer: BCD

   Explanation

   Directly from the SC-900 Fundamentals training slides: Azure Identity Protection Enables organizations to accomplish three key tasks: • Automate the detection and remediation of identity based risks. • Investigate risks using data in the portal. • Export risk detection data to third party utilities for further analysis.

   Source: Adapted from community discussion — KoosDuppen

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 166 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: know - Multifactor authentication combines two or more independent credentials: what the user knows, such as a password; what the user has, such as a security token; and what the user is, by using biometric verification methods. Reference: https://www.techtarget.com/searchsecurity/definition/multifactor-authentication-MFA

   Source: Adapted from community discussion — RodrigoAB

   

   Next question

7. Question 167 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: No - The Microsoft Authenticator app helps you sign in to your accounts when you're using two-factor verification. Two-factor verification helps you to use your accounts more securely because passwords can be forgotten, stolen, or compromised. Two-factor verification uses a second factor like your phone to make it harder for other people to break in to your account. Box 2: Yes - In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN. Box 3: No - Windows Hello credentials are based on certificate or asymmetrical key pair. Windows Hello credentials can be bound to the device, and the token that is obtained using the credential is also bound to the device. Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

   Source: Adapted from community discussion — OG_Diablo

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 168 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Here are some of the benefits of using managed identities: You don't need to manage credentials. Credentials aren't even accessible to you. You can use managed identities to authenticate to any resource that supports Azure AD authentication, including your own applications. Reference: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 169 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/incidents-overview?view=o365-worldwide

   References

   • Microsoft Learn

   

   Next question

10. Question 170 · 223 in bank

    Select 2

    What are two capabilities of Microsoft Defender for Endpoint? Each correct selection presents a complete solution. NOTE: Each correct selection is worth one point.

    • Aautomated investigation and remediation
    • Btransport encryption
    • Cshadow IT detection
    • Dattack surface reduction

    Show answer

    Answer: AD

    Explanation

    Answers are CORRECT Microsoft Defender for Endpoint offers automatic investigation and remediation capabilities that help reduce the volume of alerts in minutes at scale. While The attack surface reduction set of capabilities provides the first line of defence in the stack. https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint?view=o365-worldwide#microsoft-defender-for-endpoint

    Source: Adapted from community discussion — An_is_here

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 161. 223 questions available.