SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Defender Threat Protection 2

Question 1

Which Microsoft Defender product provides security posture management and threat protection specifically for cloud workloads across Azure, AWS, and GCP?

Accepted Answer

Microsoft Defender for Cloud

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Defender for Office 365

Answer

Microsoft Defender for Identity

Question 2

What does Microsoft Defender for Identity use as its primary data source to detect suspicious activities?

Accepted Answer

On-premises Active Directory Domain Controller traffic

Answer

Azure Active Directory sign-in logs

Answer

Microsoft 365 email metadata

Answer

Endpoint telemetry from Windows devices

Question 3

In Microsoft Defender for Endpoint, what is the purpose of 'Attack Surface Reduction' (ASR) rules?

Accepted Answer

To block risky behaviors commonly used by malware before an attack occurs

Answer

To detect malware after it has executed

Answer

To quarantine infected devices from the network

Answer

To generate alerts when suspicious network traffic is detected

Question 4

Which capability in Microsoft 365 Defender correlates alerts from multiple Defender products into a single unified incident?

Accepted Answer

Incident correlation

Answer

Secure Score

Answer

Automated Investigation and Response (AIR)

Answer

Threat Analytics

Question 5

What is the primary function of Microsoft Defender for Cloud Apps (formerly MCAS)?

Accepted Answer

Providing visibility and control over cloud application usage (Shadow IT)

Answer

Protecting endpoints from malware

Answer

Scanning email attachments for malicious content

Answer

Managing firewall rules for Azure resources

Question 6

Which Microsoft Defender for Office 365 feature detonates suspicious email attachments in a virtual environment to detect malware?

Accepted Answer

Safe Attachments

Answer

Anti-phishing policies

Answer

Safe Links

Answer

Mail flow rules

Question 7

What does the 'Secure Score' in Microsoft Defender portals represent?

Accepted Answer

A numerical measure of an organization's security posture based on implemented controls

Answer

A real-time count of active threats in your environment

Answer

The percentage of endpoints protected by Defender for Endpoint

Answer

A risk score assigned to individual users based on their behavior