Free SC-900 Microsoft Security Solutions Questions and Answers — Questions and Answers
Question 1: Match Microsoft 365 insider risk management workflow step to the appropriate task. "Create cases in the Case dashboard"
- Action
- Investigate (Correct answer)
- Triage
Correct answer: Investigate
In the Microsoft 365 insider risk management workflow, 'Create cases in the Case dashboard' falls under the Investigate step. After potential insider risks are identified and triaged, the investigation phase involves creating cases to gather more evidence, analyze activities, and determine the appropriate response. This structured approach helps manage and resolve insider risk incidents effectively.
Question 2: Which of the following tools helps you to strengthen your cloud security posture?
- Azure Security Centre (Correct answer)
- Azure Defender
- Azure Sentinel
- Microsoft 365 Defender
Correct answer: Azure Security Centre
Azure Security Center (now Microsoft Defender for Cloud) is a unified infrastructure security management system that strengthens the security posture of your cloud workloads. It provides tools to assess vulnerabilities, monitor security configurations, and receive actionable recommendations to improve your security score. This helps organizations proactively identify and remediate security weaknesses across their cloud environment.
Question 3: Which of the following is NOT one of the benefits of Microsoft Compliance Manager?
- Translating complicated regulations, standards, company policies, or other control frameworks into a simple language.
- Contains compliance information about Microsoft Cloud services organized by industry and region. (Correct answer)
- Step-by-step improvement actions that admins can take to help meet regulations and standards
- Pre-built assessments based on common regional and industry regulations and standards.
Correct answer: Contains compliance information about Microsoft Cloud services organized by industry and region.
Microsoft Compliance Manager is a workflow-based solution designed to help organizations manage their compliance activities efficiently. Its benefits include translating complex regulations into actionable steps, providing pre-built assessments, and offering improvement actions. While it helps manage compliance against standards, it does not primarily *contain* compliance information about Microsoft Cloud services organized by industry and region; that information is typically found in the Service Trust Portal.
Question 4: In the following situation, who is responsible for ensuring security and compliance? "Operating system for a Platform as a service (PaaS) application'
- User
- Microsoft (Correct answer)
- Both
Correct answer: Microsoft
In a Platform as a Service (PaaS) model, Microsoft is responsible for managing the underlying infrastructure, including the operating system, network, and storage. The user is responsible for the applications deployed on the platform and their data. This aligns with the shared responsibility model, where Microsoft handles the 'platform' layer of security and compliance.
Question 5: Employees are allowed to bring and use their cell phones at work. The employees don't want their phone to be under full corporate control, but admins want to allow users to read emails and use Teams while protecting corporate data. Which of the following will allow admins to accomplish these goals?
- Mobile Device Management (MDM).
- Mobile Application Management (MAM). (Correct answer)
- Role-based access control (RBAC).
Correct answer: Mobile Application Management (MAM).
Mobile Application Management (MAM) allows organizations to manage and protect corporate data within specific applications, without requiring full device enrollment or control. This is ideal for Bring Your Own Device (BYOD) scenarios where users want personal privacy but corporate data needs protection. MAM policies can enforce data encryption, prevent copy/paste of corporate data, and selectively wipe corporate data from apps.
Free SC-900 Microsoft Security Solutions Questions and Answers
Match Microsoft 365 insider risk management workflow step to the appropriate task. "Create cases in the Case dashboard"