Microsoft

SC-900 Free Practice Questions — Page 8

Question 72

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 72
Show Answer
Correct Answer: No Yes Yes
Explanation:
SaaS: application updates are handled by the provider, not the organization. IaaS: the cloud provider manages the physical network. All Azure deployment types: the organization is always responsible for the security of its information and data.

Question 73

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 73
Show Answer
Correct Answer: Yes No No
Explanation:
Asymmetric encryption uses a public/private key pair. Symmetric encryption uses a single shared secret key, not a key pair. Hashes are one-way functions; original content cannot be decrypted from a hash.

Question 74

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for SC-900 question 74
Show Answer
Correct Answer: Compliance score
Explanation:
The Compliance score tracks an organization’s progress in completing recommended actions that reduce risks related to data protection and regulatory requirements.

Question 75

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 75
Show Answer
Correct Answer: Yes No No
Explanation:
Microsoft Purview includes sensitive data discovery and classification. Microsoft Sentinel is a SIEM/SOAR security solution, not data lifecycle management. Microsoft Purview discovers data across Azure, on‑premises, multicloud, and SaaS—not only Azure.

Question 76

DRAG DROP - Match the Microsoft Purview Insider Risk Management workflow step to the appropriate task. To answer, drag the appropriate step from the column on the left to its task on the right. Each step may be used once, more than once, or not at all. NOTE: Each correct match is worth one point.

Illustration for SC-900 question 76
Show Answer
Correct Answer: Triage → Review and filter alerts. Investigate → Create cases in the Case dashboard. Action → Send a reminder of corporate policies to users.
Explanation:
In Insider Risk Management, Triage is used to review and filter generated alerts, Investigate is used to create and manage cases, and Action is where remediation steps such as policy reminders are taken.

Question 77

What is a characteristic of a sensitivity label in Microsoft 365?

A. encrypted
B. restricted to predefined categories
C. persistent
Show Answer
Correct Answer: C
Explanation:
A key characteristic of a Microsoft 365 sensitivity label is that it is persistent. Once applied, the label stays with the content (such as documents or emails) regardless of where it is stored or shared, enforcing protection and classification based on the author’s choice.

Question 78

You need to ensure repeatability when creating new resources in an Azure subscription. What should you use?

A. Microsoft Sentinel
B. Azure Policy
C. Azure Batch
D. Azure Blueprints
Show Answer
Correct Answer: D
Explanation:
Repeatability in creating Azure resources requires a way to define and consistently deploy a standard set of resources, configurations, and governance settings. Azure Blueprints are designed for this purpose, allowing you to package ARM templates, policies, role assignments, and resource groups into a reusable, repeatable blueprint. The other options do not provide repeatable resource deployment.

Question 79

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for SC-900 question 79
Show Answer
Correct Answer: Microsoft 365 compliance center.
Explanation:
Insider Risk Management is configured in the Microsoft 365 compliance center, now branded as the Microsoft Purview compliance portal.

Question 80

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 80
Show Answer
Correct Answer: No Yes Yes
Explanation:
Information barriers are not supported for Exchange email communication. They are supported for restricting collaboration in SharePoint and Microsoft Teams (and OneDrive).

Question 81

Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription?

A. secure score
B. resource health
C. completed controls
D. the status of recommendations
Show Answer
Correct Answer: A
Explanation:
Microsoft Defender for Cloud uses **Secure Score** as the primary metric to represent the overall security health of an Azure subscription. It aggregates security recommendations and controls into a single score that reflects how well the subscription adheres to security best practices.

$19

Get all 224 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.