Microsoft Certification Microsoft Security, Compliance, and Identity (SC-900)

Question 1

What does the Zero Trust security model assume about network traffic?

Accepted Answer

No traffic should be trusted by default

Answer

Zero Trust assumes breach and verifies every request explicitly, never trusting traffic simply because it's inside the network perimeter.

Question 2

What is the purpose of Microsoft Sentinel?

Accepted Answer

Cloud-native SIEM and SOAR solution

Answer

Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution.

Question 3

Which Microsoft service provides identity protection by detecting risky sign-ins?

Accepted Answer

Azure AD Identity Protection

Answer

Azure AD Identity Protection detects suspicious sign-in behaviors and risky user accounts to protect identities.

Question 4

What does Conditional Access in Azure AD allow administrators to do?

Accepted Answer

Enforce access policies based on conditions like location and device

Answer

Conditional Access evaluates signals like user location, device compliance, and risk level to enforce access policies.

Question 5

What is Privileged Identity Management (PIM) used for in Azure AD?

Accepted Answer

Providing just-in-time privileged access to resources

Answer

PIM enables just-in-time privileged access, reducing standing admin rights to minimize security risks.

Microsoft Certification Practice Test

Microsoft Certification Practice Test

Microsoft Certification Microsoft Security, Compliance, and Identity (SC-900)