SC-900 practice questions 21–30

1. Question 21 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Yes Security rules must have a unique name within the network security group (NSG) Box 2: No You can't remove the default rules, but you can override them by creating rules with higher priorities. Box 3: Yes Reference Network security groups https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

   Source: Adapted from community discussion — OrangeSG

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 22 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   "authorisation" is the answer. https://learn.microsoft.com/en-us/training/modules/describe-identity-principles-concepts/2-define-authentication-authorization In cybersecurity terms, authorization determines the level of access or the permissions an authenticated person has to your data and resources. Authorization is sometimes shortened to AuthZ.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   

   Next question

3. Question 23 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://privacy.microsoft.com/en-US/

   Source: Adapted from community discussion — An_is_here

   References

   • Microsoft Learn

   

   Next question

4. Question 24 · 223 in bank

   What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?

   • Aoperating systems
   • Bnetwork controls
   • Capplications
   • Daccounts and identities

   Show answer

   Answer: D

   Explanation

   D is the answer. https://learn.microsoft.com/en-us/training/modules/describe-security-concepts-methodologies/2-describe-shared-responsibility-model In summary, responsibilities always retained by the customer organization include: - Information and data - Devices (mobile and PCs) - Accounts and identities

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 25 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 26 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer: Identity Many consider identity to be the primary perimeter for security. This is a shift from the traditional focus on network security. Best practice: Center security controls and detections around user and service identities. Detail: Use Azure AD to collocate controls and identities. Reference Azure Identity Management and access control security best practices https://learn.microsoft.com/en-us/azure/security/fundamentals/identity-management-best-practices

   Source: Adapted from community discussion — OrangeSG

   References

   • Microsoft Learn

   

   Next question

7. Question 27 · 223 in bank

   What does Conditional Access evaluate by using Azure Active Directory (Azure AD) Identity Protection?

   • Auser actions
   • Bgroup membership
   • Cdevice compliance
   • Duser risk

   Show answer

   Answer: D

   Explanation

   Correct is D - User risk. For customers with access to Identity Protection, user risk can be evaluated as part of a Conditional Access policy. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions#user-risk

   Source: Adapted from community discussion — cris_exam

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 28 · 223 in bank

   Which statement represents a Microsoft privacy principle?

   • AMicrosoft manages privacy settings for its customers.
   • BMicrosoft respects the local privacy laws that are applicable to its customers.
   • CMicrosoft uses hosted customer email and chat data for targeted advertising.
   • DMicrosoft does not collect any customer data.

   Show answer

   Answer: B

   Explanation

   The correct answer is: B. Microsoft respects the local privacy laws that are applicable to its customers. Microsoft respects the local privacy laws that are applicable to its customers. This is a fundamental privacy principle for Microsoft, indicating their commitment to comply with applicable privacy regulations and laws governing the collection, use, and protection of customer data in different regions and jurisdictions. Option A is incorrect because Microsoft does not manage privacy settings for its customers, but rather provides tools and controls for customers to manage their own privacy settings within Microsoft products and services. Option C is incorrect because Microsoft does not use hosted customer email and chat data for targeted advertising. Microsoft has specific policies and practices in place to protect customer data and maintain customer trust. Option D is incorrect because Microsoft does collect customer data, but they do so with a commitment to safeguarding customer privacy and using the data in accordance with applicable privacy laws and regulations.

   Source: Adapted from community discussion — manofsteel9

   Next question

9. Question 29 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct. "A SIEM system is a tool that an organization uses to collect data from across the whole estate, including infrastructure, software, and resources. It does analysis, looks for correlations or anomalies, and generates alerts and incidents." https://learn.microsoft.com/en-us/training/modules/describe-security-capabilities-of-azure-sentinel/2-define-concepts-of-siem-soar

   Source: Adapted from community discussion — Chanel_n5

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 30 · 223 in bank

    HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Damn, I made it. I went through the practice questions twice. My exam is on Dec 10th 2022. I passed my AZ-900 Fundamentals, CompTIA Security+ and SC-900 is tomorrow! Thank you Exam Topics, changing lives!

    Source: Adapted from community discussion — AVHT

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 21. 223 questions available.