Question 41 · 223 in bank
What can you use to ensure that all the users in a specific group must use multi-factor authentication (MFA) to sign to Azure Active Directory (Azure AD)?
Show answer
Answer: C
SC-900FoundationalMicrosoftAll questions freePage 5 of 23
SC-900 practice questions 41–50
Microsoft Security, Compliance, and Identity Fundamentals223 questions across 23 pages are complete and free, with no account or card.
Official study references
223 questions in this bank
Free access · progress saved on this device
Question 42 · 223 in bank
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
YNY is the answer. https://learn.microsoft.com/en-us/training/modules/explore-basic-services-identity-types/6-describe-concept-of-hybrid-identity When it comes to authentication of hybrid identities, Microsoft offers several ways to authenticate. - Azure AD Password hash synchronization. - Azure AD Pass-through authentication - Federated authentication
Source: Adapted from community discussion — zellck
Question 43 · 223 in bank
Select 3Which three authentication methods can Azure AD users use to reset their password? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Show answer
Answer: ABC
Explanation
ABC is the answer. https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#authentication-methods The following authentication methods are available for SSPR: - Mobile app notification - Mobile app code - Email - Mobile phone - Office phone (available only for tenants with paid subscriptions) - Security questions
Source: Adapted from community discussion — zellck
Question 44 · 223 in bank
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
YNY is the answer. https://learn.microsoft.com/en-us/azure/active-directory-b2c/overview Azure Active Directory B2C provides business-to-customer identity as a service. Your customers use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs. Azure AD B2C is a separate service from Azure Active Directory (Azure AD). It is built on the same technology as Azure AD but for a different purpose. It allows businesses to build customer facing applications, and then allow anyone to sign-up and into those applications with no restrictions on user account. Azure AD B2C is a white-label authentication solution. You can customize the entire user experience with your brand so that it blends seamlessly with your web and mobile applications.
Source: Adapted from community discussion — zellck
Question 45 · 223 in bank
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
Box 1: Yes - A certificate is required that provides a private and a public key. Box 2: Yes - The public key is used to validate the private key that is associated with a digital signature. Box 3: Yes - The private key, or rather the password to the private key, validates the identity of the signer. Reference: https://support.microsoft.com/en-us/office/obtain-a-digital-certificate-and-create-a-digital-signature-e3d9d813-3305-4164-a820-2e063d86e512 https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/fin-ops/organization-administration/electronic-signature-overview
Source: Adapted from community discussion — ThomasDehottay
Question 46 · 223 in bank
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
Correct: Each organization has different needs when it comes to authentication. Microsoft global Azure and Azure Government offer the following three passwordless authentication options that integrate with Azure Active Directory (Azure AD): - Windows Hello for Business - Microsoft Authenticator - FIDO2 security keys https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless
Source: Adapted from community discussion — ETU69
Question 47 · 223 in bank
Which security feature is available in the free mode of Microsoft Defender for Cloud?
Show answer
Answer: D
Explanation
https://learn.microsoft.com/en-us/training/modules/describe-security-management-capabilities-of-azure/4-describe-enhanced-security-defender-cloud Microsoft Defender for Cloud (Free) - Microsoft Defender for Cloud is enabled for free on all your Azure subscriptions. Using this free mode provides the secure score and its related features: security policy, continuous security assessment, and actionable security recommendations to help you protect your Azure resources.
Source: Adapted from community discussion — zellck
Question 48 · 223 in bank
Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?
Show answer
Answer: A
Explanation
A is the answer. https://learn.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-getting-started Microsoft Endpoint DLP allows you to monitor onboarded Windows 10, and Windows 11 and onboarded macOS devices running three latest released versions. Once a device is onboarded, DLP detects when sensitive items are used and shared. This gives you the visibility and control you need to ensure that they're used and protected properly, and to help prevent risky behavior that might compromise them.
Source: Adapted from community discussion — zellck
Question 49 · 223 in bank
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
YYY is the answer. https://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-cloud-security-posture-management#defender-cspm-plan-options Defender for Cloud offers foundational multicloud CSPM capabilities for free. These capabilities are automatically enabled by default on any subscription or account that has onboarded to Defender for Cloud. The foundational CSPM includes asset discovery, continuous assessment and security recommendations for posture hardening, compliance with Microsoft Cloud Security Benchmark (MCSB), and a Secure score which measure the current status of your organization's posture.
Source: Adapted from community discussion — zellck
References
Question 50 · 223 in bank
HOTSPOT - Select the answer that correctly completes the sentence.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
"Azure Key Vault" is the answer. https://learn.microsoft.com/en-us/azure/key-vault/general/overview Azure Key Vault is one of several key management solutions in Azure, and helps solve the following problems: - Secrets Management - Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets
Source: Adapted from community discussion — zellck
References
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SC-900 practice, question 41. 223 questions available.
About this question bank
Version 1.0.0. How we source questions