Big Halloween Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: best70

SC-900 Microsoft Security Compliance and Identity Fundamentals Questions and Answers

Questions 4

Select the answer that correctly completes the sentence.

SC-900 Question 4

Options:

Buy Now
Questions 5

Which Azure Active Directory (Azure AD) feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?

Options:

A.

access reviews

B.

managed identities

C.

conditional access policies

D.

Azure AD Identity Protection

Buy Now
Questions 6

What can you protect by using the information protection solution in the Microsoft 365 compliance center?

Options:

A.

computers from zero-day exploits

B.

users from phishing attempts

C.

files from malware and viruses

D.

sensitive data from being exposed to unauthorized users

Buy Now
Questions 7

Select the answer that correctly completes the sentence.

SC-900 Question 7

Options:

Buy Now
Questions 8

What is a characteristic of a sensitivity label in Microsoft 365?

Options:

A.

persistent

B.

encrypted

C.

restricted to predefined categories

Buy Now
Questions 9

Select the answer that correctly completes the sentence.

SC-900 Question 9

Options:

Buy Now
Questions 10

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 10

Options:

Buy Now
Questions 11

You need to identify which cloud service models place the most responsibility on the customer in a shared responsibility model.

in which order should you list the service models from the most customer responsibility (on the top) to the least customer responsibility (on the bottom)? To answer, move all models from the list of models to the answer area and arrange them in the correct order.

SC-900 Question 11

Options:

Buy Now
Questions 12

You plan to move resources to the cloud.

You are evaluating the use of Infrastructure as a service (laaS),

Platform as a service (PaaS), and Software as a service (SaaS) cloud models.

You plan to manage only the data, user accounts, and user devices for a cloud-based app.

Which cloud model will you use?

Options:

A.

IaaS

B.

SaaS

C.

PaaS

Buy Now
Questions 13

For each of the following statements, select Yes if the statement is true Otherwise, select No.

NOTE Each correct selection is worth one point.

SC-900 Question 13

Options:

Buy Now
Questions 14

ON NO: 17 HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 14

Options:

Buy Now
Questions 15

What do you use to provide real-time integration between Azure Sentinel and another security source?

Options:

A.

Azure AD Connect

B.

a Log Analytics workspace

C.

Azure Information Protection

D.

a data connector

Buy Now
Questions 16

Select the answer that correctly completes the sentence.

SC-900 Question 16

Options:

Buy Now
Questions 17

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 17

Options:

Buy Now
Questions 18

Select the answer that correctly completes the sentence.

SC-900 Question 18

Options:

Buy Now
Questions 19

When security defaults are enabled for an Azure Active Directory (Azure AD) tenant, which two requirements are enforced? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options:

A.

All users must authenticate from a registered device.

B.

Administrators must always use Azure Multi-Factor Authentication (MFA).

C.

Azure Multi-Factor Authentication (MFA) registration is required for all users.

D.

All users must authenticate by using passwordless sign-in.

E.

All users must authenticate by using Windows Hello.

Buy Now
Questions 20

Select the answer that correctly completes the sentence.

SC-900 Question 20

Options:

Buy Now
Questions 21

Which Microsoft Purview data classification type supports the use of regular expressions?

Options:

A.

exact data match (EDM)

B.

fingerprint classifier

C.

sensitive information types (SlTs)

D.

trainable classifier

Buy Now
Questions 22

Select the answer that correctly completes the sentence.

SC-900 Question 22

Options:

Buy Now
Questions 23

Select the answer that correctly completes the sentence.

SC-900 Question 23

Options:

Buy Now
Questions 24

Which three tasks can be performed by using Azure Active Directory (Azure AD) Identity Protection? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Configure external access for partner organizations.

B.

Export risk detection to third-party utilities.

C.

Automate the detection and remediation of identity based-risks.

D.

Investigate risks that relate to user authentication.

E.

Create and automatically assign sensitivity labels to data.

Buy Now
Questions 25

What is a function of Conditional Access session controls?

Options:

A.

prompting multi-factor authentication (MFA)

B.

enable limited experiences, such as blocking download of sensitive information

C.

enforcing device compliance

D.

enforcing client app compliance

Buy Now
Questions 26

NO: 73 HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 26

Options:

Buy Now
Questions 27

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 27

Options:

Buy Now
Questions 28

What can be created in Active Directory Domain Services (AD DS)?

Options:

A.

line-of-business (106) applications that require modem authentication

B.

mob devices

C.

computer accounts

D.

software as a service (SaaS) applications that require modem authentication

Buy Now
Questions 29

Which compliance feature should you use to identify documents that are employee resumes?

Options:

A.

pre-trained classifiers

B.

Content explorer

C.

Activity explorer

D.

eDiscovery

Buy Now
Questions 30

Select the answer that correctly completes the sentence.

SC-900 Question 30

Options:

Buy Now
Questions 31

Which three statements accurately describe the guiding principles of Zero Trust? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Define the perimeter by physical locations.

B.

Use identity as the primary security boundary.

C.

Always verity the permissions of a user explicitly.

D.

Always assume that the user system can be breached.

E.

Use the network as the primary security boundary.

Buy Now
Questions 32

You are evaluating the compliance score in Microsoft Purview Compliance Manager.

Match the compliance score action subcategories to the appropriate actions.

To answer, drag the appropriate action subcategory from the column on the left to its action on the right. Each action subcategory may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

SC-900 Question 32

Options:

Buy Now
Questions 33

ESTION NO: 101

Which two Azure resources can a network security group (NSG) be associated with? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options:

A.

a network interface

B.

an Azure App Service web app

C.

a virtual network

D.

a virtual network subnet

E.

a resource group

Buy Now
Questions 34

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 34

Options:

Buy Now
Questions 35

Select the answer that correctly completes the sentence.

SC-900 Question 35

Options:

Buy Now
Questions 36

Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options:

A.

phone call

B.

text message (SMS)

C.

email verification

D.

Microsoft Authenticator app

E.

security question

Buy Now
Questions 37

Which type of identity is created when you register an application with Active Directory (Azure AD)?

Options:

A.

a user account

B.

a user-assigned managed identity

C.

a system-assigned managed identity

D.

a service principal

Buy Now
Questions 38

Select the answer that correctly completes the sentence.

SC-900 Question 38

Options:

Buy Now
Questions 39

Select the answer that correctly completes the sentence.

SC-900 Question 39

Options:

Buy Now
Questions 40

What feature supports email as a method of authenticating users?

Options:

A.

Microsoft Entra ID Protection

B.

Microsoft Entra Multi-Factor Authentication (MFA)

C.

self-service password reset (SSPR)

D.

Microsoft Entra Password Protection

Buy Now
Questions 41

NO: 132

You have an Azure subscription that contains a Log Analytics workspace.

You need to onboard Microsoft Sentinel.

What should you do first?

Options:

A.

Create a hunting query.

B.

Correlate alerts into incidents.

C.

Connect to your security sources.

D.

Create a custom detection rule.

Buy Now
Questions 42

ON NO: 27 HOTSPOT

Select the answer that correctly completes the sentence.

SC-900 Question 42

Options:

Buy Now
Questions 43

Which security feature is available in the free mode of Microsoft Defender for Cloud?

Options:

A.

vulnerability scanning of virtual machines

B.

secure score

C.

just-in-time (JIT) VM access to Azure virtual machines

D.

threat protection alerts

Buy Now
Questions 44

What can you use to provide threat detection for Azure SQL Managed Instance?

Options:

A.

Microsoft Secure Score

B.

application security groups

C.

Microsoft Defender for Cloud

D.

Azure Bastion

Buy Now
Questions 45

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 45

Options:

Buy Now
Questions 46

Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

Options:

A.

conditional access policies

B.

Azure AD Identity Protection

C.

Azure AD Privileged Identity Management (PIM)

D.

authentication method policies

Buy Now
Questions 47

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point

SC-900 Question 47

Options:

Buy Now
Questions 48

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 48

Options:

Buy Now
Questions 49

Which portal contains the solution catalog?

Options:

A.

Microsoft 365 Apps admin center

B.

Microsoft 365 Defender portal

C.

Microsoft 365 admin center

D.

Microsoft Purview compliance portal

Buy Now
Questions 50

Select the answer that correctly completes the sentence.

SC-900 Question 50

Options:

Buy Now
Questions 51

Select the answer that correctly completes the sentence.

SC-900 Question 51

Options:

Buy Now
Questions 52

You need to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site. What should you apply to the site?

Options:

A.

a data loss prevention (DLP) policy

B.

a retention policy

C.

an insider risk policy

D.

a sensitivity label policy

Buy Now
Questions 53

Select the answer that correctly completes the sentence.

SC-900 Question 53

Options:

Buy Now
Questions 54

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 54

Options:

Buy Now
Questions 55

Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 55

Options:

Buy Now
Questions 56

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

SC-900 Question 56

Options:

Buy Now
Questions 57

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

SC-900 Question 57

Options:

Buy Now
Questions 58

completes the sentence.

SC-900 Question 58

Options:

Buy Now
Questions 59

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point

SC-900 Question 59

Options:

Buy Now
Questions 60

Select the answer that correctly completes the sentence.

SC-900 Question 60

Options:

Buy Now
Questions 61

Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?

Options:

A.

integration with the Microsoft 365 compliance center

B.

support for threat hunting

C.

integration with Microsoft 365 Defender

D.

support for Azure Monitor Workbooks

Buy Now
Exam Code: SC-900
Exam Name: Microsoft Security Compliance and Identity Fundamentals
Last Update: Oct 26, 2025
Questions: 209

PDF + Testing Engine

$144.99

Testing Engine

$109.99

PDF (Q&A)

$94.99