MS-900 Security, Compliance, & Privacy in Microsoft 4

Question 1

What capability does Microsoft Sentinel provide in the context of Microsoft 365 security?

Accepted Answer

Cloud-native SIEM and SOAR for threat detection and response across the organization

Answer

Microsoft Sentinel is a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution.

Question 2

Which Microsoft 365 feature enables administrators to review and certify that users still need the access rights they currently have?

Accepted Answer

Azure AD Access Reviews

Answer

Azure AD Access Reviews allow administrators to periodically review and certify that group memberships and application access assignments are still appropriate.

Question 3

What does Microsoft Defender for Identity primarily protect against?

Accepted Answer

On-premises Active Directory identity-based attacks such as pass-the-hash and lateral movement

Answer

Microsoft Defender for Identity monitors on-premises Active Directory signals to detect and investigate advanced threats like credential theft and lateral movement attacks.

Question 4

What is the purpose of Microsoft Purview Audit (formerly called Office 365 Audit Log)?

Accepted Answer

To record user and administrator activity across Microsoft 365 services for investigation and compliance

Answer

The Purview Audit log captures thousands of activities across Microsoft 365 services, allowing security and compliance teams to investigate incidents and meet audit requirements.

Question 5

An organization wants to prevent users from accessing Microsoft 365 from countries where it does not operate. Which feature should they configure?

Accepted Answer

Conditional Access with named location restrictions

Answer

Conditional Access named locations allow administrators to define geographic regions and block or require additional verification for sign-ins from those areas.

MS-900 Practice Test

MS-900 Practice Test

MS-900 Security, Compliance, & Privacy in Microsoft 4