SC-900 practice questions 81–90

1. Question 81 · 223 in bank

   You plan to move resources to the cloud. You are evaluating the use of Infrastructure as a service (IaaS), Platform as a service (PaaS), and Software as a service (SaaS) cloud models. You plan to manage only the data, user accounts, and user devices for a cloud-based app. Which cloud model will you use?

   • ASaaS
   • BPaaS
   • CIaaS

   Show answer

   Answer: A

   Explanation

   A is correct https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility Responsibility always retained by the customer: - Information and Data - Devices (Mobile and PCs) - Accounts and Identities

   Source: Adapted from community discussion — Darkfire

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 82 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is correct https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview A service principal of a special type is created in Azure AD for the identity. The service principal is tied to the lifecycle of that Azure resource. When the Azure resource is deleted, Azure automatically deletes the service principal for you.

   Source: Adapted from community discussion — Darkfire

   References

   • Microsoft Learn

   

   Next question

3. Question 83 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   No. A user assigned managed identity can exist even after the resource has been deleted. This is the key difference between user assigned and system assigned identities.

   Source: Adapted from community discussion — tattybizzy

   References

   • Microsoft Learn

   

   Next question

4. Question 84 · 223 in bank

   Which score measures an organization’s progress in completing actions that help reduce risks associated to data protection and regulatory standards?

   • AAdoption Score
   • BMicrosoft Secure Score
   • CSecure score in Microsoft Defender for Cloud
   • DCompliance score

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

5. Question 85 · 223 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YYY Federation - When you set up SSO to work between multiple identity providers, it's called federation. With modern authentication, all services, including all authentication services, are supplied by a central identity provider. https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjm8ZCS3c-DAxWVT2wGHRXvCj8QFnoECAgQAw&url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Ffundamentals%2Fidentity-fundamental-concepts%23%3A~%3Atext%3DWith%2520modern%2520authentication%252C%2520all%2520services%2Ccentrally%2520by%2520the%2520identity%2520provider.&usg=AOvVaw0pWfksnhx1_cfOUT03axGi&opi=89978449

   Source: Adapted from community discussion — Arv84

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 86 · 223 in bank

   DRAG DROP - You need to identify which cloud service models place the most responsibility on the customer in a shared responsibility model. In which order should you list the service models from the most customer responsibility to the least? To answer, move all models from the list of models to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • azure.microsoft.com documentation

   

   Next question

7. Question 87 · 223 in bank

   HOTSPOT - Select the answer that correctly completes the sentence.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Security principal should be the answer. You can assigns security principal to an Azure AD Role. You cannot directly assign a resource group to Azure AD Role.

   Source: Adapted from community discussion — dsharp

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 88 · 223 in bank

   Select 2

   In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • APlan
   • BManage
   • CAdopt
   • DGovern
   • EDefine Strategy

   Show answer

   Answer: AE

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 89 · 223 in bank

   You have an Azure subscription. You need to implement approval-based, time-bound role activation. What should you use?

   • Aaccess reviews in Azure AD
   • BAzure AD Privileged Identity Management (PIM)
   • CAzure AD Identity Protection
   • DConditional access in Azure AD

   Show answer

   Answer: B

   References

   • Microsoft Learn

   Next question

10. Question 90 · 223 in bank

    What should you use in the Microsoft 365 Defender portal to view security trends and track the protection status of identities?

    • AReports
    • BIncidents
    • CHunting
    • DSecure score

    Show answer

    Answer: A

    Explanation

    A. Reports The "Reports" section within the Microsoft 365 Defender portal provides a comprehensive view of security-related data and trends, including insights into identity-related security events and the protection status of identities across your Microsoft 365 environment.

    Source: Adapted from community discussion — azhrhsn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-900 practice, question 81. 223 questions available.