SC-900 practice questions 201–210

1. Question 201 · 223 in bank

   Select 2

   Which two Azure resources can a network security group (NSG) be associated with? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Aa virtual network subnet
   • Ba network interface
   • Ca resource group
   • Da virtual network
   • Ean Azure App Service web app

   Show answer

   Answer: AB

   Explanation

   Network security groups (NSGs) let you filter network traffic to and from Azure resources in an Azure virtual network; for example, a virtual machine. An NSG consists of rules that define how the traffic is filtered. YOU CAN ASSOCIATE ONLY ONE NETWORK SECURITY GROUP TO EACH VIRTUAL NETWORK SUBNET AND NETWORK INTERFACE IN A VIRTUAL MACHINE. The same network security group, however, can be associated to as many different subnets and network interfaces as you choose. https://learn.microsoft.com/en-us/training/modules/describe-basic-security-capabilities-azure/6-describe-azure-network-security-groups?ns-enrollment-type=learningpath&ns-enrollment-id=learn.wwl.describe-capabilities-of-microsoft-security-solutions

   Source: Adapted from community discussion — Lorenz1974

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 202 · 223 in bank

   What is a use case for implementing information barrier policies in Microsoft 365?

   • Ato restrict unauthenticated access to Microsoft 365
   • Bto restrict Microsoft Teams chats between certain groups within an organization
   • Cto restrict Microsoft Exchange Online email between certain groups within an organization
   • Dto restrict data sharing to external email recipients

   Show answer

   Answer: B

   Explanation

   correct answer is B:Information barriers are supported in Microsoft Teams, SharePoint Online, and OneDrive for Business. A compliance administrator or information barriers administrator can define policies to allow or prevent communications between groups of users in Microsoft Teams. Information barrier policies can be used for situations like these:

   Source: Adapted from community discussion — vani009

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 203 · 223 in bank

   What can you use to deploy Azure resources across multiple subscriptions in a consistent manner?

   • AMicrosoft Defender for Cloud
   • BAzure Blueprints
   • CMicrosoft Sentinel
   • DAzure Policy

   Show answer

   Answer: B

   Explanation

   Azure Blueprints provide a way TO DEFINE A REPEATABLE SET OF AZURE RESOURCES. AZURE BLUEPRINTS ENABLE DEVELOPMENT TEAMS TO RAPIDLY PROVISION AND RUN NEW ENVIRONMENTS, with the knowledge that they're in line with the organization’s compliance requirements. TEAMS CAN ALSO PROVISION AZURE RESOURCES ACROSS SEVERAL SUBSCRIPTIONS SIMULTANEOUSLY, meaning they can achieve shorter development times and quicker delivery. https://learn.microsoft.com/en-us/training/modules/describe-resource-governance-capabilities-azure/3-describe-use-azure-blueprints?ns-enrollment-type=learningpath&ns-enrollment-id=learn.wwl.describe-capabilities-of-microsoft-compliance-solutions

   Source: Adapted from community discussion — Lorenz1974

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 204 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Yes - The MailItemsAccessed event is a mailbox auditing action and is triggered when mail data is accessed by mail protocols and mail clients. Box 2: No - Basic Audit retains audit records for 90 days. Advanced Audit retains all Exchange, SharePoint, and Azure Active Directory audit records for one year. This is accomplished by a default audit log retention policy that retains any audit record that contains the value of Exchange, SharePoint, or AzureActiveDirectory for the Workload property (which indicates the service in which the activity occurred) for one year. Box 3: yes - Advanced Audit in Microsoft 365 provides high-bandwidth access to the Office 365 Management Activity API. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/auditing-solutions-overview?view=o365-worldwide#licensing-requirements https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/ microsoft-365-security-compliance-licensing-guidance#advanced-audit

   Source: Adapted from community discussion — Lorenz1974

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 205 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: No - Box 2: Yes - Leaked Credentials indicates that the user's valid credentials have been leaked. Box 3: Yes - Multi-Factor Authentication can be required based on conditions, one of which is user risk. Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-risk-based-sspr-mfa

   Source: Adapted from community discussion — lgab

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 206 · 223 in bank

   Which Microsoft 365 compliance center feature can you use to identify all the documents on a Microsoft SharePoint Online site that contain a specific key word?

   • AAudit
   • BCompliance Manager
   • CContent Search
   • DAlerts

   Show answer

   Answer: C

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 207 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center?view=o365-worldwide

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 208 · 223 in bank

   Which Microsoft 365 feature can you use to restrict users from sending email messages that contain lists of customers and their associated credit card numbers?

   • Aretention policies
   • Bdata loss prevention (DLP) policies
   • Cconditional access policies
   • Dinformation barriers

   Show answer

   Answer: B

   Explanation

   B is the answer. https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide Organizations have sensitive information under their control such as financial data, proprietary data, credit card numbers, health records, or social security numbers. To help protect this sensitive data and reduce risk, they need a way to prevent their users from inappropriately sharing it with people who shouldn't have it. This practice is called data loss prevention (DLP). In Microsoft Purview, you implement data loss prevention by defining and applying DLP policies.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 209 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 210 · 223 in bank

    In a Core eDiscovery workflow, what should you do before you can search for content?

    • ACreate an eDiscovery hold.
    • BRun Express Analysis.
    • CConfigure attorney-client privilege detection.
    • DExport and download results.

    Show answer

    Answer: A

    Explanation

    From https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-core-ediscovery?view=o365-worldwide: Create an eDiscovery hold. The first step after creating a case is placing a hold (also called an eDiscovery hold) on the content locations of the people of interest in your investigation. ... While this step is optional,...

    Source: Adapted from community discussion — JayBee65

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 201. 223 questions available.