What can you specify in Microsoft 365 sensitivity labels?

which watermark to add to files

how long files must be preserved

when to archive an email message

which watermark to add to files

Which three statements accurately describe the guiding principles of Zero Trust? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

Use identity as the primary security boundary.

Always verify the permissions of a user explicitly.

Always assume that the user system can be breached.

Define the perimeter by physical locations.

Use identity as the primary security boundary.

Always verify the permissions of a user explicitly.

Always assume that the user system can be breached.

Use the network as the primary security boundary.

You have an Azure subscription.You need to implement approval-based, time-bound role activation.What should you use?

Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Azure Active Directory (Azure AD) Identity Protection

access reviews in Azure Active Directory (Azure AD)

Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

When security defaults are enabled for an Azure Active Directory (Azure AD) tenant, which two requirements are enforced? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

Administrators must always use Azure Multi-Factor Authentication (MFA).

Azure Multi-Factor Authentication (MFA) registration is required for all users.

All users must authenticate from a registered device.

Administrators must always use Azure Multi-Factor Authentication (MFA).

Azure Multi-Factor Authentication (MFA) registration is required for all users.

All users must authenticate by using passwordless sign-in.

All users must authenticate by using Windows Hello.

Which type of identity is created when you register an application with Active Directory (Azure AD)?

a user-assigned managed identity

a system-assigned managed identity

Which three tasks can be performed by using Azure Active Directory (Azure AD) Identity Protection? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

Export risk detection to third-party utilities.

Automate the detection and remediation of identity based-risks.

Investigate risks that relate to user authentication.

Configure external access for partner organizations.

Export risk detection to third-party utilities.

Automate the detection and remediation of identity based-risks.

Investigate risks that relate to user authentication.

Create and automatically assign sensitivity labels to data.

What are three uses of Microsoft Cloud App Security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

to discover and control the use of shadow IT

to protect sensitive information hosted anywhere in the cloud

to prevent data leaks to noncompliant apps and limit access to regulated data

to discover and control the use of shadow IT

to provide secure connections to Azure virtual machines

to protect sensitive information hosted anywhere in the cloud

to provide pass-through authentication to on-premises applications

to prevent data leaks to noncompliant apps and limit access to regulated data

What can you use to view the Microsoft Secure Score for Devices?

Microsoft Defender for Endpoint

Microsoft Defender for Cloud Apps

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Office 365

You need to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site. What should you apply to the site?

a data loss prevention (DLP) policy

What is an assessment in Compliance Manager?

A grouping of controls from a specific regulation, standard or policy.

Recommended guidance to help organizations align with their corporate standards.

A dictionary of words that are not allowed in company documents.

A policy initiative that includes multiple policies.

You need to create a data loss prevention (DLP) policy. What should you use?

the Microsoft Endpoint Manager admin center

the Microsoft 365 Defender portal

What should you use to ensure that the members of an Azure Active Directory group use multi-factor authentication (MFA) when they sign in?

Azure Active Directory (Azure AD) Identity Protection

Azure role-based access control (Azure RBAC)

Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Which service includes the Attack simul-ation training feature?

Microsoft Defender for Office 365

Microsoft Defender for Cloud Apps

Microsoft Defender for Office 365

Microsoft Defender for Identity

You need to connect to an Azure virtual machine by using Azure Bastion. What should you use?

the Remote Desktop Connection client

What is a characteristic of a sensitivity label in Microsoft 365?

restricted to predefined categories

Microsoft SC-900 Practice Test 3 - Free Online Exam Questions 81-120

What can you protect by using the information protection solution in the Microsoft 365 compliance center?

Become a Premium Member for full access

Unlock Premium Member

Microsoft SC-900 Practice Test 3

Question

Microsoft SC-900 Practice Tests

Practice Tests