Microsoft

SC-900 Free Practice Questions — Page 9

Question 75

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for SC-900 question 75
Show Answer
Correct Answer: access and application control
Explanation:
This Microsoft Defender for Cloud feature combines adaptive application controls (allowlists/blocklists) with just-in-time VM access to block unwanted applications and reduce the network attack surface on Azure virtual machines.

Question 76

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 76
Show Answer
Correct Answer: Yes Yes No
Explanation:
SSPR supports email (including a registered alternate email), Microsoft Authenticator app notifications, and is specifically intended for users who cannot sign in, so prior sign-in is not required.

Question 77

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 77
Show Answer
Correct Answer: No No Yes
Explanation:
Information Barriers restrict communication between groups; they do not detect inappropriate language. Communication Compliance monitors communications (such as Exchange Online email and Teams), not standalone SharePoint Online files. It can scan internal and external Exchange Online emails for policy violations.

Question 78

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 78
Show Answer
Correct Answer: No Yes Yes
Explanation:
In SaaS, application updates are handled by the provider. In IaaS, the cloud provider manages the physical network. Across all cloud service types, the customer remains responsible for protecting their information and data.

Question 79

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 79
Show Answer
Correct Answer: Yes No No
Explanation:
Asymmetric encryption uses a public/private key pair. Symmetric encryption uses a shared secret key, not a public/private pair. Cryptographic hashes are one-way functions and cannot be decrypted to recover the original content.

Question 80

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for SC-900 question 80
Show Answer
Correct Answer: Compliance score
Explanation:
Compliance score measures an organization's progress in completing recommended actions that reduce risks related to data protection and regulatory compliance.

Question 81

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for SC-900 question 81
Show Answer
Correct Answer: Yes No No
Explanation:
Microsoft Purview includes sensitive data classification. Microsoft Sentinel is a SIEM/SOAR security solution, not a data lifecycle management solution. Microsoft Purview discovers and governs data across Azure, on-premises, multicloud, and SaaS sources.

Question 82

DRAG DROP - Match the Microsoft Purview Insider Risk Management workflow step to the appropriate task. To answer, drag the appropriate step from the column on the left to its task on the right. Each step may be used once, more than once, or not at all. NOTE: Each correct match is worth one point.

Illustration for SC-900 question 82
Show Answer
Correct Answer: Triage → Review and filter alerts. Investigate → Create cases in the Case dashboard. Action → Send a reminder of corporate policies to users.
Explanation:
In Insider Risk Management, alerts are triaged first, escalated to investigation cases if needed, and actions such as policy reminders are taken during the action phase.

Question 83

What is a characteristic of a sensitivity label in Microsoft 365?

A. encrypted
B. restricted to predefined categories
C. persistent
Show Answer
Correct Answer: C
Explanation:
Sensitivity labels are persistent: once applied, the label stays with the content across storage locations and sharing. Labels can apply protection such as encryption, but they are not inherently always encrypted, and they are not restricted to predefined categories.

Question 84

You need to ensure repeatability when creating new resources in an Azure subscription. What should you use?

A. Microsoft Sentinel
B. Azure Policy
C. Azure Batch
D. Azure Blueprints
Show Answer
Correct Answer: D
Explanation:
Azure Blueprints enables repeatable deployment and governance of Azure environments by packaging ARM templates, policies, role assignments, and resource groups into reusable definitions. Azure Policy enforces compliance but does not provide complete repeatable environment deployment. Microsoft Sentinel is a SIEM/SOAR solution, and Azure Batch is for large-scale parallel computing.

$19

Get all 235 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.