Microsoft Security, Compliance, and Identity Fundamentals223 questions across 23 pages are complete and free, with no account or card.
223 questions in this bank
Free access · progress saved on this device
HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Reference: https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview
Source: Adapted from community discussion — An_is_here
You have a Microsoft 365 E3 subscription. You plan to audit user activity by using the unified audit log and Basic Audit. For how long will the audit records be retained?
Answer: D
Answer D is now correct. per: https://learn.microsoft.com/en-us/purview/audit-solutions-overview?view=o365-worldwide#licensing-requirements "The default retention period for Audit (Standard) has changed from 90 days to 180 days. Audit (Standard) logs generated before October 17, 2023 are retained for 90 days. Audit (Standard) logs generated on or after October 17, 2023 follow the new default retention of 180 days.
Source: Adapted from community discussion — marges_stud
To which type of resource can Azure Bastion provide secure access?
Answer: C
Correct, Azure Bastion is a fully managed service that provides more secure and seamless Remote Desktop Protocol (RDP) and Secure Shell Protocol (SSH) access to virtual machines (VMs) without any exposure through public IP addresses. Provision the service directly in your local or peered virtual network to get support for all the VMs within it. https://azure.microsoft.com/en-us/services/azure-bastion/
Source: Adapted from community discussion — Clouddog
What do you use to provide real-time integration between Azure Sentinel and another security source?
Answer: D
What do you use to provide real-time integration between Azure Sentinel and another security source? The Questions asks what do you use and connect to another security source (SIEM) , The answer is D " Connector " Because connector is used for real-time integration. After onboarding Microsoft Sentinel into your workspace, connect data sources to start ingesting your data into Microsoft Sentinel. Microsoft Sentinel comes with many connectors for Microsoft products, available out of the box and providing real-time integration. You can also enable out-of-the-box connectors to the broader security ecosystem for non-Microsoft products. For example, you can use Syslog, Common Event Format (CEF), or REST APIs to connect your data sources with Microsoft Sentinel. https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources
Source: Adapted from community discussion — imironman
What are three uses of Microsoft Cloud App Security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Answer: ACE
Correct. A,C,E The correct answers can be found via https://docs.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps. Look for the following title in the article "The Defender for Cloud Apps framework"
Source: Adapted from community discussion — CletusMaximus
HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box 1: vulnerabilities - Microsoft 365 Defender portal is the new home for monitoring and managing security across your identities, data, devices, and apps, you will need to access various portals for certain specialized tasks. It used to monitor and respond to threat activity and strengthen security posture across your identities, email, data, endpoints, and apps with Microsoft 365 Defender - Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/portals
Source: Adapted from community discussion — darkpangel
You need to connect to an Azure virtual machine by using Azure Bastion. What should you use?
Answer: B
Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal
Source: Adapted from community discussion — yonie
Which service includes the Attack simulation training feature?
Answer: D
Attack simulation training in Microsoft Defender for Office 365 Plan 2 or Microsoft 365 E5 lets you run benign cyberattack simulations in your organization.
Source: Adapted from community discussion — LeoDen
Which type of alert can you manage from the Microsoft 365 Defender portal?
Answer: C
C is the answer. https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-365-defender-portal?view=o365-worldwide The Microsoft 365 Defender portal combines protection, detection, investigation, and response to email, collaboration, identity, device, and cloud app threats, in a central place. The Microsoft 365 Defender portal emphasizes quick access to information, simpler layouts, and bringing related information together for easier use. It includes: - Microsoft Defender for Endpoint delivers preventative protection, post-breach detection, automated investigation, and response for devices in your organization.
Source: Adapted from community discussion — zellck
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box 1: No - Microsoft Sentinel data connectors are available for non-Microsoft services like Amazon Web Services. Box 2: Yes - Once you have connected your data sources to Microsoft Sentinel, you can visualize and monitor the data using the Microsoft Sentinel adoption of Azure Monitor Workbooks, which provides versatility in creating custom dashboards. While the Workbooks are displayed differently in Microsoft Sentinel, it may be useful for you to see how to create interactive reports with Azure Monitor Workbooks. Microsoft Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source. Box 3: Yes - To help security analysts look proactively for new anomalies that weren't detected by your security apps or even by your scheduled analytics rules, Microsoft Sentinel's built-in hunting queries guide you into asking the right questions to find issues in the data you already have on your network. Reference: https://docs.microsoft.com/en-us/azure/sentinel/data-connectors-reference https://docs.microsoft.com/en-us/azure/sentinel/monitor-your-data https://docs.microsoft.com/en-us/azure/sentinel/hunting
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SC-900 practice, question 191. 223 questions available.
Version 1.0.0. How we source questions