SC-900 Microsoft Defender for Cloud Apps

Question 1

What type of security solution is Microsoft Defender for Cloud Apps primarily classified as?

Accepted Answer

Cloud Access Security Broker (CASB)

Answer

Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) that provides visibility, data control, and threat protection for cloud apps.

Question 2

Which feature of Microsoft Defender for Cloud Apps helps organizations discover unsanctioned cloud applications being used by employees?

Accepted Answer

Cloud Discovery

Answer

Cloud Discovery analyzes traffic logs to identify cloud apps in use across the organization, revealing Shadow IT.

Question 3

What term describes the use of unauthorized or unapproved cloud applications within an organization that Defender for Cloud Apps helps identify?

Accepted Answer

Shadow IT

Answer

Shadow IT refers to cloud apps and services used by employees without IT department knowledge or approval, which Cloud Discovery helps uncover.

Question 4

Which of the following is NOT one of the four pillars of the Cloud Access Security Broker (CASB) framework that Defender for Cloud Apps provides?

Accepted Answer

Network Segmentation

Answer

The four CASB pillars are Visibility, Compliance, Data Security, and Threat Protection — Network Segmentation is not a CASB pillar.

Question 5

What does Conditional Access App Control in Microsoft Defender for Cloud Apps enable?

Accepted Answer

Real-time session monitoring and control of user activity in cloud apps

Answer

Conditional Access App Control uses reverse proxy architecture to monitor and control user sessions and access to cloud apps in real time.

SC-900 - Microsoft Certified: Security, Compliance, and Identity Fundamentals Certification Practice Test

SC-900 - Microsoft Certified: Security, Compliance, and Identity Fundamentals Certification Practice Test

SC-900 Microsoft Defender for Cloud Apps