Microsoft Certification Microsoft Security, Compliance, and Identity (SC-900) 2 — Questions and Answers
Question 1: What does Microsoft Defender for Identity primarily protect?
- Cloud storage files
- On-premises Active Directory identities (Correct answer)
- Network switches
- Web application code
Correct answer: On-premises Active Directory identities
Microsoft Defender for Identity monitors on-premises Active Directory signals to detect identity-based threats and compromised credentials.
Question 2: What is the purpose of Microsoft Purview Information Protection?
- Backing up databases
- Classifying and protecting sensitive data with labels (Correct answer)
- Managing user passwords
- Scanning for malware in email
Correct answer: Classifying and protecting sensitive data with labels
Microsoft Purview Information Protection uses sensitivity labels to classify and protect data based on its sensitivity level.
Question 3: Which Microsoft security solution protects endpoints such as laptops and desktops?
- Microsoft Defender for Endpoint (Correct answer)
- Microsoft Sentinel
- Azure DDoS Protection
- Microsoft Purview
Correct answer: Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is an enterprise endpoint security platform that helps prevent, detect, and respond to advanced threats on devices.
Question 4: What is the Shared Responsibility Model in cloud security?
- Microsoft handles all security tasks
- Security responsibilities are split between Microsoft and the customer based on service type (Correct answer)
- Customers handle all security tasks
- Security is optional in the cloud
Correct answer: Security responsibilities are split between Microsoft and the customer based on service type
In the Shared Responsibility Model, Microsoft secures the cloud infrastructure while customers are responsible for securing their data and configurations.
Question 5: What does Data Loss Prevention (DLP) in Microsoft 365 help prevent?
- Hardware failures
- Unauthorized sharing of sensitive information (Correct answer)
- User password resets
- Network outages
Correct answer: Unauthorized sharing of sensitive information
DLP policies in Microsoft 365 detect and prevent the sharing of sensitive information like credit card numbers or SSNs outside the organization.
Question 6: What is the purpose of Microsoft's Service Trust Portal?
- Purchasing Microsoft licenses
- Accessing compliance reports, audit reports, and trust documents (Correct answer)
- Managing Azure resources
- Creating user accounts
Correct answer: Accessing compliance reports, audit reports, and trust documents
The Service Trust Portal provides access to Microsoft's compliance and security audit reports, certifications, and privacy documentation.
Microsoft Certification Microsoft Security, Compliance, and Identity (SC-900) 2
What does Microsoft Defender for Identity primarily protect?