Microsoft Certification Microsoft Security Fundamentals (SC-900) 1 — Questions and Answers
Question 1: What is the Zero Trust security model based on?
- Trusting all internal network traffic
- Never trust, always verify — assuming breach and verifying every request explicitly (Correct answer)
- Blocking all external internet access
- Using only on-premises security tools
Correct answer: Never trust, always verify — assuming breach and verifying every request explicitly
Zero Trust assumes no user or device is trusted by default, requiring continuous verification of identity and device health before granting access.
Question 2: What does Multi-Factor Authentication (MFA) add to the sign-in process?
- Longer password requirements
- A second verification method beyond just a password, such as a phone app or SMS code (Correct answer)
- Automatic login without passwords
- IP address restrictions
Correct answer: A second verification method beyond just a password, such as a phone app or SMS code
MFA requires users to prove their identity with at least two factors — something they know (password) plus something they have (phone) or are (biometric).
Question 3: Which Microsoft service provides identity protection by detecting risky sign-ins and compromised accounts?
- Microsoft Defender for Cloud
- Microsoft Entra ID Protection (Correct answer)
- Microsoft Sentinel
- Azure Firewall
Correct answer: Microsoft Entra ID Protection
Microsoft Entra ID Protection uses machine learning to detect suspicious sign-in behaviors and user risk conditions, enabling automated remediation policies.
Question 4: What is Conditional Access in Microsoft Entra ID?
- A firewall rule for blocking specific IP addresses
- Policies that grant or block access based on conditions like user location, device state, and app being accessed (Correct answer)
- An API for automating user provisioning
- A tool for resetting forgotten passwords
Correct answer: Policies that grant or block access based on conditions like user location, device state, and app being accessed
Conditional Access policies evaluate signals like user identity, device compliance, location, and application to make access decisions in real time.
Question 5: What is the principle of 'Least Privilege' in security?
- Giving all users admin rights to reduce help desk tickets
- Granting users only the minimum permissions necessary to perform their job functions (Correct answer)
- Sharing credentials between team members
- Disabling all security policies for faster access
Correct answer: Granting users only the minimum permissions necessary to perform their job functions
Least Privilege limits user access rights to only what is strictly required for their role, reducing the attack surface if credentials are compromised.
Question 6: Which Microsoft tool is a cloud-native SIEM and SOAR solution for detecting and responding to security threats?
- Microsoft Defender for Cloud
- Microsoft Sentinel (Correct answer)
- Microsoft Purview
- Azure Security Center
Correct answer: Microsoft Sentinel
Microsoft Sentinel is a cloud-native SIEM and SOAR platform that collects security data across the enterprise, detects threats using analytics, and automates responses.
Microsoft Certification Microsoft Security Fundamentals (SC-900) 1
What is the Zero Trust security model based on?