SC-900 Security, Compliance & Identity Concepts 4

Question 1

Which compliance regulation is primarily focused on protecting the personal data and privacy of individuals in the European Union?

Accepted Answer

GDPR

Answer

The General Data Protection Regulation (GDPR) is an EU law that governs how organizations collect, store, and process personal data of EU residents.

Question 2

What is 'privilege escalation' in cybersecurity?

Accepted Answer

An attacker gaining higher-level permissions than originally authorized

Answer

Privilege escalation occurs when an attacker exploits a vulnerability or misconfiguration to gain elevated permissions beyond what they were initially granted.

Question 3

In Microsoft's identity model, what is an 'Azure AD tenant'?

Accepted Answer

A dedicated and isolated instance of Azure Active Directory for an organization

Answer

An Azure AD tenant is an organization's dedicated instance of Azure Active Directory, containing its users, groups, and registered applications.

Question 4

What is 'business continuity planning' designed to ensure?

Accepted Answer

That an organization can continue critical operations during and after a disruption

Answer

Business continuity planning identifies critical functions and establishes procedures to maintain or quickly restore them during disruptions such as disasters or cyberattacks.

Question 5

Which authentication method requires users to possess a physical device that generates time-based codes?

Accepted Answer

Hardware token (TOTP)

Answer

A hardware token generates Time-based One-Time Passwords (TOTP) that change every 30 seconds, requiring physical possession to authenticate.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Security, Compliance & Identity Concepts 4