SC-900 practice questions 181–190

1. Question 181 · 223 in bank

   Select 2

   Which two types of resources can be protected by using Azure Firewall? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AAzure virtual machines
   • BAzure Active Directory (Azure AD) users
   • CMicrosoft Exchange Online inboxes
   • DAzure virtual networks
   • EMicrosoft SharePoint Online sites

   Show answer

   Answer: AD

   Explanation

   Protecting SharePoint Online with an Azure Firewall can provide several benefits. Azure Firewall is a cloud-native stateful firewall as a service that can be deployed in your virtual networks or in Azure Virtual WAN hub deployments for filtering traffic flowing between cloud resources, the Internet, and on-premises. You can create rules or policies specifying allow/deny traffic using layer 3 to layer 7 controls. You can also filter traffic going to the internet using both Azure Firewall and third parties by directing some or all traffic through third-party security providers for advanced filtering and user protection. This can help to improve the security of your SharePoint Online deployment by providing an additional layer of protection against web attacks and simplifying security management without requiring any application changes.

   Source: Adapted from community discussion — Paddy71

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 182 · 223 in bank

   You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure. Which security methodology does this represent?

   • Athreat modeling
   • Bidentity as the security perimeter
   • Cdefense in depth
   • Dthe shared responsibility model

   Show answer

   Answer: C

   Explanation

   C is the answer. https://learn.microsoft.com/en-us/training/modules/describe-security-concepts-methodologies/3-describe-defense-depth Defense in depth uses a layered approach to security, rather than relying on a single perimeter. A defense in-depth strategy uses a series of mechanisms to slow the advance of an attack. Each layer provides protection so that, if one layer is breached, a subsequent layer will prevent an attacker getting unauthorized access to data.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   Next question

3. Question 183 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 184 · 223 in bank

   Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

   • AMicrosoft Secure Score
   • BProductivity Score
   • CSecure score in Azure Security Center
   • DCompliance score

   Show answer

   Answer: D

   Explanation

   Am I the only one who has serious trouble identifying the differences between Microsoft 365 Defender, Defender for Cloud, Defender for Endpoint and the remaining 300 similar named Microsoft Defenders? What;s wrong with these Microsoft people, they are masochists or sth?

   Source: Adapted from community discussion — lalalakis

   References

   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn

   Next question

5. Question 185 · 223 in bank

   What can you use to scan email attachments and forward the attachments to recipients only if the attachments are free from malware?

   • AMicrosoft Defender for Office 365
   • BMicrosoft Defender Antivirus
   • CMicrosoft Defender for Identity
   • DMicrosoft Defender for Endpoint

   Show answer

   Answer: A

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 186 · 223 in bank

   Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?

   • Aintegration with the Microsoft 365 compliance center
   • Bsupport for threat hunting
   • Cintegration with Microsoft 365 Defender
   • Dsupport for Azure Monitor Workbooks

   Show answer

   Answer: C

   Explanation

   Correct The Microsoft 365 Defender connector for Azure Sentinel (preview) sends all Microsoft 365 Defender incidents and alerts information to Azure Sentinel and keeps the incidents synchronized. Once you add the connector, Microsoft 365 Defender incidents—which include all associated alerts, entities, and relevant information received from Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, and Microsoft Cloud App Security—are streamed to Azure Sentinel as security information and event management (SIEM) data, providing you with context to perform triage and incident response with Azure Sentinel. Once in Azure Sentinel, incidents remain bi-directionally synchronized with Microsoft 365 Defender, allowing you to take advantage of the benefits of both the Microsoft 365 Defender portal and Azure Sentinel in the Azure portal for incident investigation and response. https://docs.microsoft.com/en-us/microsoft-365/security/defender/microsoft-365-defender-integration-with-azure-sentinel?view=o365-worldwide

   Source: Adapted from community discussion — JayHall

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 187 · 223 in bank

   What can you use to provide threat detection for Azure SQL Managed Instance?

   • AMicrosoft Secure Score
   • Bapplication security groups
   • CMicrosoft Defender for Cloud
   • DAzure Bastion

   Show answer

   Answer: C

   Explanation

   Microsoft Defender for SQL is a Defender plan in Microsoft Defender for Cloud. Microsoft Defender for SQL includes functionality for surfacing and mitigating potential database vulnerabilities, and detecting anomalous activities that could indicate a threat to your database. It provides a single go-to location for enabling and managing these capabilities. Microsoft Defender for SQL https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql

   Source: Adapted from community discussion — OrangeSG

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 188 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YYY is the answer. https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score?view=o365-worldwide#products-included-in-secure-score Currently there are recommendations for the following products: - Microsoft 365 (including Exchange Online) - Azure Active Directory - Microsoft Defender for Endpoint - Microsoft Defender for Identity - Microsoft Defender for Cloud Apps - Microsoft Teams https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score?view=o365-worldwide#how-it-works You're given points for the following actions: - Configuring recommended security features - Doing security-related tasks - Addressing the recommended action with a third-party application or software, or an alternate mitigation

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 189 · 223 in bank

   Which Azure Active Directory (Azure AD) feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?

   • Anetwork security groups (NSGs)
   • BAzure AD Privileged Identity Management (PIM)
   • Cconditional access policies
   • Dresource locks

   Show answer

   Answer: C

   Explanation

   C is the answer. https://learn.microsoft.com/en-us/mem/intune/protect/conditional-access-intune-common-ways-use#device-based-conditional-access With Intune, you deploy device compliance policies to determine if a device meets your expected configuration and security requirements. The compliance policy evaluation determines the devices compliance status, which is reported to both Intune and Azure AD. It's in Azure AD that Conditional Access policies can use a device's compliance status to make decisions on whether to allow or block access to your organization's resources from that device.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 190 · 223 in bank

    HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

    Source: Adapted from community discussion — An_is_here

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 181. 223 questions available.