HOTSPOT (Drag and Drop is not supported)Select the answer that correctly completes the sentence.Hot Area:
Answer(s): A
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b
In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
Answer(s): A,E
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/overview
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/cloud-services-security-baseline
What is an example of encryption at rest?
Answer(s): B
https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest
Which three statements accurately describe the guiding principles of Zero Trust? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
Answer(s): B,C,D
https://docs.microsoft.com/en-us/security/zero-trust/
HOTSPOT (Drag and Drop is not supported)Which service should you use to view your Azure secure score? To answer, select the appropriate service in the answer area.Hot Area:
https://docs.microsoft.com/en-us/azure/security-center/secure-score-access-and-track
DRAG DROP (Drag and Drop is not supported)You are evaluating the compliance score in Microsoft Purview Compliance Manager. Match the compliance score action subcategories to the appropriate actions.To answer, drag the appropriate action subcategory from the column on the left to its action on the right. Each action subcategory may be used once, more than once, or not at all.NOTE: Each correct match is worth one point.Select and Place:
Box 1: PreventativePreventative actions address specific risks. For example, protecting information at rest using encryption is a preventative action against attacks and breaches. Separation of duties is a preventative action to manage conflict of interest and guard against fraud.Box 2: DetectiveDetective actions actively monitor systems to identify irregular conditions or behaviors that represent risk, or that can be used to detect intrusions or breaches. Examples include system access auditing and privileged administrative actions. Regulatory compliance audits are a type of detective action used to find process issues.Box 3: CorrectiveCorrective actions try to keep the adverse effects of a security incident to a minimum, take corrective action to reduce the immediate effect, and reverse the damage if possible. Privacy incident response is a corrective action to limit damage and restore systems to an operational state after a breach.
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation
Share your comments for Microsoft SC-900 exam with other users:
Question 12:Question 12 is a hotspot question, but the statements and answer choices are shown only as [Image], so I can’t see what it is testing or verify the answer key. The reference to Microsoft’s privacy page suggests it may involve concepts such as:
[Image]
Question 60:Correct answer: C — Information barriers Microsoft Purview Information Barriers let an organization restrict communication and collaboration between defined groups, such as two departments. They can prevent users in one department from communicating with or sharing information with users in another department—for example, to meet compliance or ethical-wall requirements. Why the others are incorrect:
hope for the best
question 21 answer is alerts
need to view
question 44 answer is user risk