SC-900 Online Practice Questions and Answers

Correct Answer:

Reference: https://joannecklein.com/2018/08/07/build-and-use-custom-sensitive-information-types-in-office-365/

Correct Answer:

Box 1: Yes

From Microsoft Defender for cloud you can enable Microsoft Defender for Storage to get alerted about suspicious activities related to your storage resources.

Note: Microsoft Defender for Storage is an Azure-native layer of security intelligence that detects unusual and potentially harmful attempts to access or exploit your storage accounts.

Defender for Storage continually analyzes the telemetry stream generated by the Azure Blob Storage and Azure Files services. When potentially malicious activities are detected, security alerts are generated. These alerts are displayed in

Microsoft Defender for Cloud, together with the details of the suspicious activity along with the relevant investigation steps, remediation actions, and security recommendations.

Box 2: No Box 3: Yes

Microsoft Defender for Cloud is a solution for cloud security posture management (CSPM) and cloud workload protection (CWP) that finds weak spots across your cloud configuration, helps strengthen the overall security posture of your environment, and can protect workloads across multicloud and hybrid environments from evolving threats.

Microsoft Defender for Servers is one of the plans provided by Microsoft Defender for Cloud's enhanced security features. Defender for Servers protects your Windows and Linux machines in Azure, AWS, GCP, and on-premises.

Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-servers-introduction

Correct Answer:

Authentication

What is the difference between authentication and authorization in Azure?

In simple terms, authentication is the process of verifying who a user is, while authorization is the process of verifying what they have access to.

Reference: https://auth0.com/docs/get-started/identity-fundamentals/authentication-and-authorization

Correct Answer:

Azure Key Vault can store application secrets.

Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets.

Reference:

https://docs.microsoft.com/en-us/azure/key-vault/secrets/quick-create-portal

Correct Answer:

Box 1: Azure monitor workbook templates Create interactive reports by using workbooks After you onboard to Microsoft Sentinel, monitor your data by using the integration with Azure Monitor workbooks.

Workbooks display differently in Microsoft Sentinel than in Azure Monitor. But it may be useful for you to see how to create a workbook in Azure Monitor. Microsoft Sentinel allows you to create custom workbooks across your data. Microsoft Sentinel also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source.

Reference: https://learn.microsoft.com/en-us/azure/sentinel/overview

Correct Answer: D

Correct Answer: C

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-get-started-with?view=o365-worldwide https://docs.microsoft.com/en-us/sharepoint/technical-reference/default-crawled-file-name-extensions-and-parsed-file-types

Correct Answer: B

In order to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site, you should enable the Recycle Bin feature in SharePoint and set the retention period to one year.

Correct Answer: B

Audit logs in Azure Active Directory

As an IT administrator, you want to know how your IT environment is doing. The information about your system's health enables you to assess whether and how you need to respond to potential issues.

To support you with this goal, the Azure Active Directory portal gives you access to three activity logs:

Sign-ins

Correct Answer: A

Keywords = trends and track = Reports