SC-900 practice questions 51–60

1. Question 51 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   "Microsoft Defender for Cloud" is the answer. https://learn.microsoft.com/en-us/training/modules/describe-security-management-capabilities-of-azure/3-describe-defender-cloud Microsoft Defender for Cloud is a tool for security posture management and threat protection. It strengthens the security posture of your cloud resources, and with its integrated Microsoft Defender plans, Defender for Cloud protects workloads running in Azure, hybrid, and other cloud platforms.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 52 · 223 in bank

   What is the maximum number of resources that Azure DDoS Protection Standard can protect without additional costs?

   • A50
   • B100
   • C500
   • D1000

   Show answer

   Answer: B

   Explanation

   B is the right answer. However: There's no Azure DDoS Protection Standard anymore. "Azure DDoS Protection offers two tiers – IP Protection and Network Protection – to meet your security and cost needs". https://azure.microsoft.com/en-in/pricing/details/ddos-protection/

   Source: Adapted from community discussion — penatuna

   References

   • Microsoft Learn
   • azure.microsoft.com documentation
   • azure.microsoft.com documentation

   Next question

3. Question 53 · 223 in bank

   Select 2

   What are two reasons to deploy multiple virtual networks instead of using just one virtual network? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Ato meet governance policies
   • Bto connect multiple types of resources
   • Cto separate the resources for budgeting
   • Dto isolate the resources

   Show answer

   Answer: AD

   Explanation

   Seems to me it is: A and D. The main reasons for segmentation are: The ability to group related assets that are a part of (or support) workload operations. Isolation of resources. Governance policies set by the organization. See: https://learn.microsoft.com/en-us/azure/architecture/framework/security/design-network-segmentation

   Source: Adapted from community discussion — beam63

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 54 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   "Azure Monitor workbook templates" is the answer. https://learn.microsoft.com/en-us/azure/sentinel/overview#create-interactive-reports-by-using-workbooks After you onboard to Microsoft Sentinel, monitor your data by using the integration with Azure Monitor workbooks. Workbooks display differently in Microsoft Sentinel than in Azure Monitor. But it may be useful for you to see how to create a workbook in Azure Monitor. Microsoft Sentinel allows you to create custom workbooks across your data. Microsoft Sentinel also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   

   Next question

5. Question 55 · 223 in bank

   You have an Azure subscription that contains multiple resources. You need to assess compliance and enforce standards for the existing resources. What should you use?

   • AAzure Blueprints
   • Bthe Anomaly Detector service
   • CMicrosoft Sentinel
   • DAzure Policy

   Show answer

   Answer: D

   Explanation

   D is the answer. https://learn.microsoft.com/en-us/azure/governance/policy/overview Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Through its compliance dashboard, it provides an aggregated view to evaluate the overall state of the environment, with the ability to drill down to the per-resource, per-policy granularity. It also helps to bring your resources to compliance through bulk remediation for existing resources and automatic remediation for new resources.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   Next question

6. Question 56 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   When you want to connect, here is the pattern : Authentification → Roles attributed → Authorization in function of the permission of the roles

   Source: Adapted from community discussion — Whyiest

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 57 · 223 in bank

   Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription?

   • Asecure score
   • Bresource health
   • Ccompleted controls
   • Dthe status of recommendations

   Show answer

   Answer: A

   Explanation

   A is the answer. https://learn.microsoft.com/en-us/azure/defender-for-cloud/secure-score-security-controls#overview-of-secure-score Microsoft Defender for Cloud has two main goals: - to help you understand your current security situation - to help you efficiently and effectively improve your security The central feature in Defender for Cloud that enables you to achieve those goals is the secure score. Defender for Cloud continually assesses your cross-cloud resources for security issues. It then aggregates all the findings into a single score so that you can tell, at a glance, your current security situation: the higher the score, the lower the identified risk level.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   Next question

8. Question 58 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   NO - https://learn.microsoft.com/en-us/microsoft-365/compliance/information-barriers?view=o365-worldwide#information-barriers-and-exchange-online Only Exchange Online deployments are currently supported for IB policies. If your organization needs to define and control email communications, consider using Exchange mail flow rules. ------------------------------ Microsoft Purview Information Barriers (IB) is a compliance solution that allows you to restrict two-way communication and collaboration between groups and users in Microsoft Teams, SharePoint, and OneDrive. YES - https://learn.microsoft.com/en-us/microsoft-365/compliance/information-barriers?view=o365-worldwide YES - https://learn.microsoft.com/en-us/microsoft-365/compliance/information-barriers?view=o365-worldwide

   Source: Adapted from community discussion — cris_exam

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 59 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   "Microsoft 365 compliance center" is the answer. It is now called Microsoft Purview compliance portal. https://learn.microsoft.com/en-us/training/modules/describe-insider-risk-capabilities-microsoft-365/2-management-solution Microsoft Purview Insider Risk Management is a solution that helps minimize internal risks by enabling an organization to detect, investigate, and act on risky and malicious activities. Insider risk management is available in the Microsoft Purview compliance portal.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 60 · 223 in bank

    You need to ensure repeatability when creating new resources in an Azure subscription. What should you use?

    • AMicrosoft Sentinel
    • BAzure Policy
    • CAzure Batch
    • DAzure Blueprints

    Show answer

    Answer: D

    Explanation

    D is the answer. https://learn.microsoft.com/en-us/azure/governance/blueprints/overview Just as a blueprint allows an engineer or an architect to sketch a project's design parameters, Azure Blueprints enables cloud architects and central information technology groups to define a repeatable set of Azure resources that implements and adheres to an organization's standards, patterns, and requirements. Azure Blueprints makes it possible for development teams to rapidly build and start up new environments with trust they're building within organizational compliance with a set of built-in components, such as networking, to speed up development and delivery.

    Source: Adapted from community discussion — zellck

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 51. 223 questions available.