DUMPS BASE EXAM DUMPS MICROSOFT SC-900 28% OFF Automatically For You Microsoft Security Compliance and Identity Fundamentals Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam 1.What is an example of encryption at rest? A. encrypting communications by using a site-to-site VPN B. encrypting a virtual machine disk C. accessing a website by using an encrypted HTTPS connection D. sending an encrypted email Answer: B Explanation: Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption- atrest 2. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Explanation: Box 1: Yes A certificate is required that provides a private and a public key. Box 2: Yes The public key is used to validate the private key that is associated with a digital signature. Box 3: NO Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam 3. What can you use to provide a user with a two-hour window to complete an administrative task in Azure? A. Azure Active Directory (Azure AD) Privileged Identity Management (PIM) B. Azure Multi-Factor Authentication (MFA) C. Azure Active Directory (Azure AD) Identity Protection D. conditional access policies Answer: A Explanation: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity- management/pim-configure Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment 4. HOTSPOT Select the answer that correctly completes the sentence. Answer: Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Explanation: Graphical user interface, text Description automatically generated 5. HOTSPOT Select the answer that correctly completes the sentence. Answer: Explanation: Text, letter Description automatically generated 6. You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure. Which security methodology does this represent? A. threat modeling Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam B. identity as the security perimeter C. defense in depth D. the shared responsibility model Answer: C Explanation: Reference: https://docs.microsoft.com/en-us/learn/modules/secure-network- connectivity-azure/2-what-is-defense-in-depth 7. Which Microsoft 365 feature can you use to restrict communication and the sharing of information between members of two departments at your organization? A. sensitivity label policies B. Customer Lockbox C. information Barriers D. Privileged Access Management (PAM) Answer: C Explanation: Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/information- barriers 8. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Explanation: Graphical user interface, text, application, email Description automatically generated 9. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Explanation: A screenshot of a computer Description automatically generated with low confidence Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. For each rule, you can specify source and destination, port, and protocol. 10. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Explanation: Yes NO NO YES - As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have. NO - The most restrictive lock in the inheritance takes precedence. Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam NO - If you delete a resource group with a locked resource, the portal UI will give you an error and no resources are deleted. https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock- resources?tabs=json 11. HOTSPOT Select the answer that correctly completes the sentence. Answer: Explanation: Graphical user interface, application Description automatically generated 12. Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. text message (SMS) B. Microsoft Authenticator app C. email verification D. phone call E. security question Answer: A,B,D Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Explanation: Reference: https://docs.microsoft.com/en-us/azure/active- directory/authentication/concept-authentication-methods 13. HOTSPOT Select the answer that correctly completes the sentence. Answer: Explanation: eDiscovery https://docs.microsoft.com/en- us/microsoft-365/compliance/ediscovery?view=o365-worldwide 14. What are two capabilities of Microsoft Defender for Endpoint? Each correct selection presents a complete solution. NOTE: Each correct selection is worth one point. A. automated investigation and remediation B. transport encryption C. shadow IT detection D. attack surface reduction Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Answer: A,D Explanation: Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender- endpoint/microsoft-defender-endpoint? view=o365-worldwide 15. HOTSPOT Select the answer that correctly completes the sentence. Answer: 16. Which Microsoft portal provides information about how Microsoft manages privacy, compliance, and security? A. Microsoft Service Trust Portal B. Compliance Manager C. Microsoft 365 compliance center D. Microsoft Support Answer: A Explanation: Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started- with-service-trust-portal?view=o365-worldwide 17. HOTSPOT Select the answer that correctly completes the sentence. Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Answer: Explanation: Text, letter Description automatically generated 18. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Explanation: Graphical user interface, text, application, email Description automatically generated Box 1: Yes Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks. Box 2: Yes Box 3: Yes If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure. 19. What is the purpose of Azure Active Directory (Azure AD) Password Protection? A. to control how often users must change their passwords B. to identify devices to which users can sign in without using multi-factor authentication (MFA) C. to encrypt a password by using globally recognized encryption standards D. to prevent users from using specific words in their passwords Answer: D Explanation: Explanation Azure AD Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization. With Azure AD Password Protection, default global banned password lists are automatically applied to all users in an Azure AD tenant. To support your own business and security needs, you can define entries in a custom banned password list. Reference: https://docs.microsoft.com/en-us/azure/active- directory/authentication/concept-password-ban-bad-on-premises 20. What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface? A. automated remediation B. automated investigation C. advanced hunting D. network protection Answer: D Explanation: Network protection helps protect devices from Internet-based events. Network protection is an attack surface reduction capability. Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender- endpoint/network-protection?view=o365-worldwide Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam 21. In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. Plan B. Manage C. Adopt D. Govern E. Define Strategy Answer: A,E Explanation: Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption- framework/overview 22. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Explanation: Box 1: No Phishing scams are external threats. Box 2: Yes Insider risk management is a compliance solution in Microsoft 365. Box 3: Yes Insider risk management helps minimize internal risks from users. These include: ✑ Leaks of sensitive data and data spillage ✑ Confidentiality violations ✑ Intellectual property (IP) theft ✑ Fraud ✑ Insider trading ✑ Regulatory compliance violations 23. Which Microsoft 365 compliance center feature can you use to identify all the documents on a Microsoft SharePoint Online site that contain a specific key word? A. Audit B. Compliance Manager C. Content Search D. Alerts Answer: C Explanation: The Content Search tool in the Security & Compliance Center can be used to quickly find email in Exchange mailboxes, documents in SharePoint sites and OneDrive locations, and instant messaging conversations in Skype for Business. The first step is to starting using the Content Search tool to choose content locations to search and configure a keyword query to search for specific items. Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/search-for- content?view=o365-worldwide 24. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Explanation: Graphical user interface, text, application Description automatically generated 25. What can you use to scan email attachments and forward the attachments to recipients only if the attachments are free from malware? A. Microsoft Defender for Office 365 B. Microsoft Defender Antivirus C. Microsoft Defender for Identity D. Microsoft Defender for Endpoint Answer: A Explanation: Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Reference: https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365- advanced-threat-protection-service-description 26. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Explanation: Graphical user interface, text, application, email Description automatically generated Box 1: Yes Azure Defender provides security alerts and advanced threat protection for virtual machines, SQL databases, containers, web applications, your network, your storage, and more Box 2: Yes Cloud security posture management (CSPM) is available for free to all Azure users. Box 3: Yes Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud - whether they're in Azure or not - as well as on premises. Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam 27. Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards? A. Microsoft Secure Score B. Productivity Score C. Secure score in Azure Security Center D. Compliance score Answer: D Explanation: Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance- manager?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score- calculation?view=o365-worldwide 28. HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer: Microsoft Certified SC-900 Exam Dumps V11.02 Updated [2022] Pass SC-900 Exam Explanation: Graphical user interface, text, application Description automatically generated 29. In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing? A. the management of mobile devices B. the permissions for the user data stored in Azure C. the creation and management of user accounts D. the management of the physical hardware Answer: D GET FULL VERSION OF SC-900 DUMPS