Practice Test Geeks(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test
← All SC-900 Flashcard Decks

Security, Compliance & Identity Concepts Flashcards

7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security, Compliance & Identity Concepts flashcards as text

  1. Which compliance regulation is primarily focused on protecting the personal data and privacy of individuals in the European Union?

    Answer: GDPR

    The General Data Protection Regulation (GDPR) is an EU law that governs how organizations collect, store, and process personal data of EU residents.

  2. What is 'privilege escalation' in cybersecurity?

    Answer: An attacker gaining higher-level permissions than originally authorized

    Privilege escalation occurs when an attacker exploits a vulnerability or misconfiguration to gain elevated permissions beyond what they were initially granted.

  3. In Microsoft's identity model, what is an 'Azure AD tenant'?

    Answer: A dedicated and isolated instance of Azure Active Directory for an organization

    An Azure AD tenant is an organization's dedicated instance of Azure Active Directory, containing its users, groups, and registered applications.

  4. What is 'business continuity planning' designed to ensure?

    Answer: That an organization can continue critical operations during and after a disruption

    Business continuity planning identifies critical functions and establishes procedures to maintain or quickly restore them during disruptions such as disasters or cyberattacks.

  5. Which authentication method requires users to possess a physical device that generates time-based codes?

    Answer: Hardware token (TOTP)

    A hardware token generates Time-based One-Time Passwords (TOTP) that change every 30 seconds, requiring physical possession to authenticate.

  6. What is the primary goal of a 'penetration test'?

    Answer: To simulate real-world attacks and identify exploitable vulnerabilities before malicious actors do

    A penetration test is an authorized simulated cyberattack on a system to evaluate its security posture and identify weaknesses before they can be exploited.

  7. What does 'integrity' mean in the CIA triad of information security?

    Answer: Ensuring data remains accurate and unaltered except through authorized processes

    Integrity in the CIA triad means ensuring that data is accurate, complete, and has not been tampered with or modified by unauthorized parties.