SC-900 Microsoft Defender for Cloud Apps 2 — Questions and Answers
Question 1: In Microsoft Defender for Cloud Apps, what is the purpose of the 'App Catalog'?
- A marketplace to purchase new cloud applications
- A database of over 31,000 cloud apps rated for risk using more than 90 factors (Correct answer)
- A list of Microsoft-approved apps for enterprise use
- A repository of app installation packages
Correct answer: A database of over 31,000 cloud apps rated for risk using more than 90 factors
The Cloud App Catalog in Defender for Cloud Apps contains over 31,000 cloud apps, each rated for risk using more than 90 risk factors to help organizations make informed decisions.
Question 2: Which action can an administrator take in Microsoft Defender for Cloud Apps to prevent users from accessing a specific cloud application deemed risky?
- Mark the app as 'Monitored'
- Mark the app as 'Unsanctioned' (Correct answer)
- Archive the app in the catalog
- Set the app status to 'Pending Review'
Correct answer: Mark the app as 'Unsanctioned'
Marking an app as 'Unsanctioned' in Defender for Cloud Apps can block access to it, especially when integrated with firewall or proxy solutions.
Question 3: What integration does Microsoft Defender for Cloud Apps have with Microsoft Purview Information Protection?
- It replaces Microsoft Purview labels with its own classification system
- It applies Microsoft Purview sensitivity labels to files stored in cloud apps (Correct answer)
- It converts cloud app files into encrypted PDFs automatically
- It blocks all file uploads to cloud apps regardless of sensitivity
Correct answer: It applies Microsoft Purview sensitivity labels to files stored in cloud apps
Defender for Cloud Apps can apply Microsoft Purview Information Protection sensitivity labels to files discovered in connected cloud apps, extending data protection to the cloud.
Question 4: Which log source does Cloud Discovery in Microsoft Defender for Cloud Apps use to identify cloud apps in use?
- Active Directory audit logs
- Firewall and proxy traffic logs (Correct answer)
- Windows event logs
- Azure Monitor logs
Correct answer: Firewall and proxy traffic logs
Cloud Discovery analyzes firewall and proxy traffic logs uploaded by the administrator or streamed automatically to discover cloud app usage across the organization.
Question 5: What is an Activity Policy in Microsoft Defender for Cloud Apps used for?
- Defining how long logs are retained in the portal
- Setting rules to monitor specific cloud app activities and trigger alerts or actions (Correct answer)
- Scheduling automatic backups of cloud app data
- Configuring multi-factor authentication for cloud apps
Correct answer: Setting rules to monitor specific cloud app activities and trigger alerts or actions
Activity Policies let administrators monitor specific user or admin actions within connected cloud apps and automatically trigger alerts or governance actions when triggered.
Question 6: Which Microsoft Defender for Cloud Apps feature provides a risk score to help evaluate how safe a discovered cloud app is?
- Threat Intelligence Feed
- Cloud App Risk Score (Correct answer)
- Security Benchmark
- Compliance Dashboard
Correct answer: Cloud App Risk Score
Each app in the Cloud App Catalog receives a risk score based on over 90 factors including security, compliance, and legal attributes to help organizations assess app safety.
Question 7: What does a 'File Policy' in Microsoft Defender for Cloud Apps allow an organization to do?
- Block all file sharing within Microsoft Teams
- Scan files stored in connected cloud apps and apply governance actions based on content (Correct answer)
- Automatically delete files older than 90 days
- Encrypt files before they are uploaded to any cloud service
Correct answer: Scan files stored in connected cloud apps and apply governance actions based on content
File Policies scan files stored in connected cloud apps for sensitive content (such as PII or credit card numbers) and can trigger actions like quarantine, remove sharing, or apply labels.
SC-900 Microsoft Defender for Cloud Apps 2
In Microsoft Defender for Cloud Apps, what is the purpose of the 'App Catalog'?