SC-900 Security, Compliance & Identity Concepts 3

Question 1

Which encryption type uses the same key for both encrypting and decrypting data?

Accepted Answer

Symmetric encryption

Answer

Symmetric encryption uses a single shared key for both encryption and decryption, making it faster but requiring secure key distribution.

Question 2

What is the purpose of 'data classification' in a compliance framework?

Accepted Answer

To categorize data based on sensitivity to apply appropriate security controls

Answer

Data classification assigns sensitivity labels (such as public, internal, confidential, or highly confidential) to help organizations apply the correct security and compliance controls.

Question 3

Which of the following is an example of a 'detective' security control?

Accepted Answer

Intrusion detection system alerting on suspicious activity

Answer

Detective controls identify and alert on security incidents after they occur; an IDS monitors network traffic and raises alerts when suspicious patterns are detected.

Question 4

In identity management, what is a 'claim'?

Accepted Answer

A statement made by an identity provider about a user's attributes or permissions

Answer

A claim is an assertion made by an identity provider about a subject, such as their name, role, or group membership, contained within a security token.

Question 5

What does 'non-repudiation' ensure in a security context?

Accepted Answer

That a user cannot deny having performed an action

Answer

Non-repudiation provides proof that a specific entity performed an action, preventing them from later denying it, often achieved through digital signatures.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Security, Compliance & Identity Concepts 3