SC-900 Online Practice Questions and Answers

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/get-started/

Correct Answer:

Box 1: Yes

Box 2: No

Conditional Access policies are enforced after first-factor authentication is completed.

Box 3: Yes

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Correct Answer:

Box 1: No Advanced Audit helps organizations to conduct forensic and compliance investigations by increasing audit log retention.

Box 2: No

Box 3: Yes Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide

Correct Answer:

Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is

Correct Answer:

Box 1: No

The Microsoft Authenticator app helps you sign in to your accounts when you're using two-factor verification. Two-factor verification helps you to use your accounts more securely because passwords can be forgotten, stolen, or compromised.

Two-factor verification uses a second factor like your phone to make it harder for other people to break in to your account.

Box 2: Yes

In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN.

Box 3: No

Windows Hello credentials are based on certificate or asymmetrical key pair. Windows Hello credentials can be bound to the device, and the token that is obtained using the credential is also bound to the device.

Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

Correct Answer:

Azure Key Vault can store application secrets.

Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets.

Reference:

https://docs.microsoft.com/en-us/azure/key-vault/secrets/quick-create-portal

Correct Answer: B

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection?view=o365-worldwide

Correct Answer: B

Artikel 3 Minuten Lesedauer Microsoft Secure Score for DevicesApplies to:

1.

Microsoft Defender for Endpoint Plan 2

2.

Microsoft Defender Vulnerability Management

3.

Microsoft 365 Defender

Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

To sign up for the Defender Vulnerability Management public preview or if you have any questions, contact us ([email protected]).

Already have Microsoft Defender for Endpoint P2? Sign up for a free trial of the Defender Vulnerability Management Add-on.

Configuration score is now part of vulnerability management as Microsoft Secure Score for Devices.

Your score for devices is visible in the Defender Vulnerability Management dashboard of the Microsoft 365 Defender portal. A higher Microsoft Secure Score for Devices means your endpoints are more resilient from cybersecurity threat

attacks. It reflects the collective security configuration state of your devices across the following categories:

1.

Application

2.

Operating system

3.

Network

4.

Accounts

5.

Security controls

Select a category to go to the Security recommendations page and view the relevant recommendations.

Turn on the Microsoft Secure Score connectorForward Microsoft Defender for Endpoint signals, giving Microsoft Secure Score visibility into the device security posture. Forwarded data is stored and processed in the same location as your

Microsoft Secure Score data.

Changes might take up to a few hours to reflect in the dashboard.

1.

In the navigation pane, go to Settings > Endpoints > General > Advanced features

2.

Scroll down to Microsoft Secure Score and toggle the setting to On.

3.

Select Save preferences.

How it worksMicrosoft Secure Score for Devices currently supports configurations set via Group Policy. Due to the current partial Intune support, configurations which might have been set through Intune might show up as misconfigured.

Contact your IT Administrator to verify the actual configuration status in case your organization is using Intune for secure configuration management.

The data in the Microsoft Secure Score for Devices card is the product of meticulous and ongoing vulnerability discovery process. It is aggregated with configuration discovery assessments that continuously:

1.

Compare collected configurations to the collected benchmarks to discover misconfigured assets

2.

Map configurations to vulnerabilities that can be remediated or partially remediated (risk reduction)

3.

Collect and maintain best practice configuration benchmarks (vendors, security feeds, internal research teams)

4.

Collect and monitor changes of security control configuration state from all assets

Correct Answer: C

Pre-deployment activities

Before deploying Microsoft Sentinel, we recommend taking the following steps to help focus your deployment on providing maximum value, as soon as possible.

*

Determine which data sources you need and the data size requirements to help you accurately project your deployment's budget and timeline.

You might determine this information during your business use case review, or by evaluating a current SIEM that you already have in place. If you already have a SIEM in place, analyze your data to understand which data sources provide the most value and should be ingested into Microsoft Sentinel.

*

Etc.

Reference: https://learn.microsoft.com/en-us/azure/sentinel/prerequisites

Correct Answer: A

Keywords = trends and track = Reports