Microsoft Certification Microsoft Security Fundamentals (SC-900) 2

Question 1

What does Microsoft Defender for Endpoint protect?

Accepted Answer

Windows and other OS devices against advanced threats using behavioral analysis and threat intelligence

Answer

Microsoft Defender for Endpoint is an enterprise endpoint detection and response (EDR) platform that protects devices against malware, ransomware, and advanced persistent threats.

Question 2

What is phishing in the context of cybersecurity?

Accepted Answer

A social engineering attack where attackers impersonate trusted entities to steal credentials or data

Answer

Phishing involves deceptive emails, messages, or websites that impersonate legitimate organizations to trick users into revealing credentials or downloading malware.

Question 3

What is the purpose of Azure Defender for Cloud (formerly Security Center)?

Accepted Answer

Providing unified security management and advanced threat protection across hybrid cloud workloads

Answer

Microsoft Defender for Cloud continuously assesses the security posture of Azure and hybrid resources, providing threat protection and actionable security recommendations.

Question 4

What does DDoS (Distributed Denial of Service) attack attempt to do?

Accepted Answer

Overwhelm a service with traffic from many sources to make it unavailable to legitimate users

Answer

DDoS attacks flood a target service with massive amounts of traffic from many compromised systems simultaneously, exhausting resources and causing outages.

Question 5

Which Microsoft solution provides Privileged Identity Management (PIM) for just-in-time admin access?

Accepted Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Entra PIM provides just-in-time privileged access to Azure AD roles, requiring approval and time-limiting elevated access to reduce standing admin exposure.

Microsoft Certification Practice Test

Microsoft Certification Practice Test

Microsoft Certification Microsoft Security Fundamentals (SC-900) 2