SC-900 Online Practice Questions and Answers

Correct Answer:

Box 1: Networks Network Ensure devices and users aren't trusted just because they're on an internal network. Encrypt all internal communications, limit access by policy, and employ microsegmentation and real-time threat detection.

Box 2: Identities Identities Verify and secure each identity with strong authentication across your entire digital estate.

Box 3: Data Data Move from perimeter-based data protection to data-driven protection. Use intelligence to classify and label data. Encrypt and restrict access based on organizational policies.

Reference: https://www.microsoft.com/en-us/security/business/zero-trust

Correct Answer:

Reference: https://privacy.microsoft.com/en-US/

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Correct Answer:

Reference: https://support.microsoft.com/en-gb/office/introduction-to-irm-for-email-messages-bb643d33-4a3f-4ac7-9770-fd50d95f58dc?ui=en-usandrs=en-gbandad=gb#FileTypesforIRM https://docs.microsoft.com/en-us/microsoft-365/compliance/ome?view=o365-worldwide https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/exchange-online-limits#message-limits-1

Correct Answer:

Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-admin-mfa

Correct Answer:

Authentication

What is the difference between authentication and authorization in Azure?

In simple terms, authentication is the process of verifying who a user is, while authorization is the process of verifying what they have access to.

Reference: https://auth0.com/docs/get-started/identity-fundamentals/authentication-and-authorization

Correct Answer:

Box 1: No

Software tokens is a time-based one-time passcodes (TOTP) solution.

Microsoft Authenticator, which is a passwordless solution, uses software tokens though.

Note: Authentication methods in Azure Active Directory - OATH tokens

OATH TOTP (Time-based One Time Password) is an open standard that specifies how one-time password (OTP) codes are generated. OATH TOTP can be implemented using either software or hardware to generate the codes. Azure AD

doesn't support OATH HOTP, a different code generation standard.

OATH software tokens

Software OATH tokens are typically applications such as the Microsoft Authenticator app and other authenticator apps. Azure AD generates the secret key, or seed, that's input into the app and used to generate each OTP.

Box 2: Yes

Each organization has different needs when it comes to authentication. Microsoft global Azure and Azure Government offer the following three passwordless authentication options that integrate with Azure Active Directory (Azure AD):

Windows Hello for Business

Microsoft Authenticator

FIDO2 security keys

Box 3: Yes

Reference:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-oath-tokens

Correct Answer: A

Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment.

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Correct Answer: BCD

Reference: https://docs.microsoft.com/en-us/security/zero-trust/