Microsoft SC-900 Practice Test - Questions Answers, Page 7

List of questions
Question 61

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
Question 62

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Box 1: Yes
Conditional access policies can be applied to all users
Box 2: No
Conditional access policies are applied after first-factor authentication is completed.
Box 3: Yes
Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
Question 63

HOTSPOT
Select the answer that correctly completes the sentence.
When you register an application through the Azure portal, an application object and service principal are automatically created in your home directory or tenant.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal
Question 64

Which three authentication methods does Windows Hello for Business support? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
fingerprint
facial recognition
PIN
email verification
security question
Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-how-it-works-authentication
Question 65

HOTSPOT
Select the answer that correctly completes the sentence.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults
Question 66

What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?
automated remediation
automated investigation
advanced hunting
network protection
Network protection helps protect devices from Internet-based events. Network protection is an attack surface reduction capability.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide
Question 67

HOTSPOT
Select the answer that correctly completes the sentence.
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
Question 68

Which two types of resources can be protected by using Azure Firewall? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Azure virtual machines
Azure Active Directory (Azure AD) users
Microsoft Exchange Online inboxes
Azure virtual networks
Microsoft SharePoint Online sites
Question 69

You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure.
Which security methodology does this represent?
threat modeling
identity as the security perimeter
defense in depth
the shared responsibility model
Reference:
https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/2-what-is-defense-in-depth
Question 70

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Question