Microsoft

SC-900 Free Practice Questions — Page 8

Question 72

Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?

A. Windows 10 and newer only
B. Windows 10 and newer and Android only
C. Windows 10 and newer and macOS only
D. Windows 10 and newer, Android, and macOS
Show Answer
Correct Answer: C
Explanation:
Microsoft Purview Endpoint Data Loss Prevention supports onboarded Windows 10/11 (Windows 10 and newer) and supported macOS devices. It does not support Android for Endpoint DLP, so the option including Windows 10 and newer plus macOS is correct.

Question 73

Which three forms of verification can be used with Azure AD Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution. NOTE: Each correct answer is worth one point.

A. security questions
B. the Microsoft Authenticator app
C. SMS messages
D. a smart card
E. Windows Hello for Business
Show Answer
Correct Answer: B, C, E
Explanation:
Azure AD (Microsoft Entra ID) Multi-Factor Authentication supports verification methods including the Microsoft Authenticator app, SMS messages, and Windows Hello for Business. Security questions are used for self-service password reset rather than MFA, and smart cards are not a standard Azure AD MFA verification method.

Question 74

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 74
Show Answer
Correct Answer: No No Yes
Explanation:
Azure DDoS Protection mitigates DDoS attacks (including protocol attacks), not man-in-the-middle attacks, and the Standard tier is not enabled by default; it must be configured.

Question 75

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for SC-900 question 75
Show Answer
Correct Answer: access and application control
Explanation:
This Microsoft Defender for Cloud feature combines adaptive application controls (allowlists/blocklists) with just-in-time VM access to block unwanted applications and reduce the network attack surface on Azure virtual machines.

Question 76

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 76
Show Answer
Correct Answer: Yes Yes No
Explanation:
SSPR supports email (including a registered alternate email), Microsoft Authenticator app notifications, and is specifically intended for users who cannot sign in, so prior sign-in is not required.

Question 77

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 77
Show Answer
Correct Answer: No No Yes
Explanation:
Information Barriers restrict communication between groups; they do not detect inappropriate language. Communication Compliance monitors communications (such as Exchange Online email and Teams), not standalone SharePoint Online files. It can scan internal and external Exchange Online emails for policy violations.

Question 78

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 78
Show Answer
Correct Answer: No Yes Yes
Explanation:
In SaaS, application updates are handled by the provider. In IaaS, the cloud provider manages the physical network. Across all cloud service types, the customer remains responsible for protecting their information and data.

Question 79

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 79
Show Answer
Correct Answer: Yes No No
Explanation:
Asymmetric encryption uses a public/private key pair. Symmetric encryption uses a shared secret key, not a public/private pair. Cryptographic hashes are one-way functions and cannot be decrypted to recover the original content.

Question 80

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for SC-900 question 80
Show Answer
Correct Answer: Compliance score
Explanation:
Compliance score measures an organization's progress in completing recommended actions that reduce risks related to data protection and regulatory compliance.

Question 81

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 81
Show Answer
Correct Answer: Yes No No
Explanation:
Microsoft Purview includes sensitive data classification. Microsoft Sentinel is a SIEM/SOAR security solution, not a data lifecycle management solution. Microsoft Purview discovers and governs data across Azure, on-premises, multicloud, and SaaS sources.

$19

Get all 230 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.