Microsoft Security Fundamentals (SC-900) Flashcards
6 cards from real Microsoft Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Microsoft Security Fundamentals (SC-900) flashcards as text
What does Microsoft Defender for Endpoint protect?
Answer: Windows and other OS devices against advanced threats using behavioral analysis and threat intelligence
Microsoft Defender for Endpoint is an enterprise endpoint detection and response (EDR) platform that protects devices against malware, ransomware, and advanced persistent threats.
What is phishing in the context of cybersecurity?
Answer: A social engineering attack where attackers impersonate trusted entities to steal credentials or data
Phishing involves deceptive emails, messages, or websites that impersonate legitimate organizations to trick users into revealing credentials or downloading malware.
What is the purpose of Azure Defender for Cloud (formerly Security Center)?
Answer: Providing unified security management and advanced threat protection across hybrid cloud workloads
Microsoft Defender for Cloud continuously assesses the security posture of Azure and hybrid resources, providing threat protection and actionable security recommendations.
What does DDoS (Distributed Denial of Service) attack attempt to do?
Answer: Overwhelm a service with traffic from many sources to make it unavailable to legitimate users
DDoS attacks flood a target service with massive amounts of traffic from many compromised systems simultaneously, exhausting resources and causing outages.
Which Microsoft solution provides Privileged Identity Management (PIM) for just-in-time admin access?
Answer: Microsoft Entra Privileged Identity Management
Microsoft Entra PIM provides just-in-time privileged access to Azure AD roles, requiring approval and time-limiting elevated access to reduce standing admin exposure.
What is ransomware?
Answer: Malware that encrypts victim files and demands payment for the decryption key
Ransomware is malicious software that encrypts a victim's files or systems and demands a ransom payment in exchange for the decryption key.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, eligibility, registration, renewal, score validity, retake fee, passing score, exam format, time limit, fees · verified Oct 2026