SC-900 practice questions 31–40

1. Question 31 · 223 in bank

   Which compliance feature should you use to identify documents that are employee resumes?

   • Apre-trained classifiers
   • BActivity explorer
   • CeDiscovery
   • DContent explorer

   Show answer

   Answer: A

   Explanation

   A is the answer. https://learn.microsoft.com/en-us/microsoft-365/compliance/classifier-tc-definitions?view=o365-worldwide#resume Detects a resume document that a job applicant provides an employer, which has a detailed statement of the candidate's prior work experience, education, and accomplishments.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 32 · 223 in bank

   DRAG DROP - Match the pillars of Zero Trust to the appropriate requirements. To answer, drag the appropriate pillar from the column on the left to its requirement on the right. Each pillar may be used once, more than once, or not at all. NOTE: Each correct match is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

3. Question 33 · 223 in bank

   DRAG DROP - Match the types of compliance score actions to the appropriate tasks. To answer, drag the appropriate action type from the column on the left to its task on the right. Each type may be used once, more than once, or not at all. NOTE: Each correct match is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1. Preventative 2. Detective https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide#preventative-detective-and-corrective-actions Preventative actions address specific risks. For example, protecting information at rest using encryption is a preventative action against attacks and breaches. Separation of duties is a preventative action to manage conflict of interest and guard against fraud. Detective actions actively monitor systems to identify irregular conditions or behaviors that represent risk, or that can be used to detect intrusions or breaches. Examples include system access auditing and privileged administrative actions. Regulatory compliance audits are a type of detective action used to find process issues.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 34 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Is this typo mistake? Should be decryption, right? Encryption is a process of converting normal data into an unreadable form. Decryption is a method of converting the unreadable/coded data into its original form.

   Source: Adapted from community discussion — odbjegli

   References

   • Microsoft Learn

   

   Next question

5. Question 35 · 223 in bank

   Which pillar of identity relates to tracking the resources accessed by a user?

   • Aauthorization
   • Bauditing
   • Cadministration
   • Dauthentication

   Show answer

   Answer: B

   Explanation

   Auditing is correct - the key word here is tracking, otherwise it would have been authorization. See below article. https://social.technet.microsoft.com/wiki/contents/articles/15530.the-four-pillars-of-identity-identity-management-in-the-age-of-hybrid-it.aspx

   Source: Adapted from community discussion — cris_exam

   References

   • Microsoft Learn

   Next question

6. Question 36 · 223 in bank

   What can be created in Active Directory Domain Services (AD DS)?

   • Aline-of-business (LOB) applications that require modern authentication
   • Bcomputer accounts
   • Csoftware as a service (SaaS) applications that require modern authentication
   • Dmobile devices

   Show answer

   Answer: B

   Explanation

   https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview Active Directory stores information about objects on the network and makes this information easy for administrators and users to find and use. Active Directory uses a structured data store as the basis for a logical, hierarchical organization of directory information. This data store, also known as the directory, contains information about Active Directory objects. These objects typically include shared resources such as servers, volumes, printers, and the network user and computer accounts.

   Source: Adapted from community discussion — marsot

   References

   • Microsoft Learn

   Next question

7. Question 37 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   "authentication" is the answer. https://learn.microsoft.com/en-us/training/modules/describe-identity-principles-concepts/2-define-authentication-authorization Authentication is the process of proving that a person is who they say they are. When someone purchases an item with a credit card, they may be required to show an additional form of identification. This proves that they are the person whose name appears on the card. In this example, the user may show a driver’s license that serves as a form of authentication and proves their ID.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   

   Next question

8. Question 38 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YYN is the answer. https://learn.microsoft.com/en-us/training/modules/describe-identity-principles-concepts/2-define-authentication-authorization Authentication is the process of proving that a person is who they say they are. When someone purchases an item with a credit card, they may be required to show an additional form of identification. This proves that they are the person whose name appears on the card. In this example, the user may show a driver’s license that serves as a form of authentication and proves their ID. Once you authenticate a user, you'll need to decide where they can go, and what they're allowed to see and touch. This process is called authorization. In cybersecurity terms, authorization determines the level of access or the permissions an authenticated person has to your data and resources. Authorization is sometimes shortened to AuthZ.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   

   Next question

9. Question 39 · 223 in bank

   What is a function of Conditional Access session controls?

   • Aenforcing device compliance
   • Benforcing client app compliance
   • Cenable limited experiences, such as blocking download of sensitive information
   • Dprompting multi-factor authentication (MFA)

   Show answer

   Answer: C

   Explanation

   C is the answer. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session Within a Conditional Access policy, an administrator can make use of session controls to enable limited experiences within specific cloud applications. Conditional Access App Control enables user app access and sessions to be monitored and controlled in real time based on access and session policies. Access and session policies are used within the Defender for Cloud Apps portal to refine filters and set actions to take. With the access and session policies, you can: - Prevent data exfiltration: You can block the download, cut, copy, and print of sensitive documents on, for example, unmanaged devices.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 40 · 223 in bank

    HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    NYY is the answer. https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks#nonpremium-user-risk-detections - Leaked credentials This risk detection type indicates that the user's valid credentials have been leaked. When cybercriminals compromise valid passwords of legitimate users, they often share those credentials. This sharing is typically done by posting publicly on the dark web, paste sites, or by trading and selling the credentials on the black market. When the Microsoft leaked credentials service acquires user credentials from the dark web, paste sites, or other sources, they're checked against Azure AD users' current valid credentials to find valid matches.

    Source: Adapted from community discussion — zellck

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 31. 223 questions available.