Practice Test GeeksSC-900 - Microsoft Certified: Security, Compliance, and Identity Fundamentals Certification Practice Test
← All SC-900 Flashcard Decks

Microsoft Security Solutions Flashcards

5 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 5 Microsoft Security Solutions flashcards as text

  1. Match Microsoft 365 insider risk management workflow step to the appropriate task. "Create cases in the Case dashboard"

    Answer: Investigate

    In the Microsoft 365 insider risk management workflow, 'Create cases in the Case dashboard' falls under the Investigate step. After potential insider risks are identified and triaged, the investigation phase involves creating cases to gather more evidence, analyze activities, and determine the appropriate response. This structured approach helps manage and resolve insider risk incidents effectively.

  2. Which of the following tools helps you to strengthen your cloud security posture?

    Answer: Azure Security Centre

    Azure Security Center (now Microsoft Defender for Cloud) is a unified infrastructure security management system that strengthens the security posture of your cloud workloads. It provides tools to assess vulnerabilities, monitor security configurations, and receive actionable recommendations to improve your security score. This helps organizations proactively identify and remediate security weaknesses across their cloud environment.

  3. Which of the following is NOT one of the benefits of Microsoft Compliance Manager?

    Answer: Contains compliance information about Microsoft Cloud services organized by industry and region.

    Microsoft Compliance Manager is a workflow-based solution designed to help organizations manage their compliance activities efficiently. Its benefits include translating complex regulations into actionable steps, providing pre-built assessments, and offering improvement actions. While it helps manage compliance against standards, it does not primarily *contain* compliance information about Microsoft Cloud services organized by industry and region; that information is typically found in the Service Trust Portal.

  4. In the following situation, who is responsible for ensuring security and compliance? "Operating system for a Platform as a service (PaaS) application'

    Answer: Microsoft

    In a Platform as a Service (PaaS) model, Microsoft is responsible for managing the underlying infrastructure, including the operating system, network, and storage. The user is responsible for the applications deployed on the platform and their data. This aligns with the shared responsibility model, where Microsoft handles the 'platform' layer of security and compliance.

  5. Employees are allowed to bring and use their cell phones at work. The employees don't want their phone to be under full corporate control, but admins want to allow users to read emails and use Teams while protecting corporate data. Which of the following will allow admins to accomplish these goals?

    Answer: Mobile Application Management (MAM).

    Mobile Application Management (MAM) allows organizations to manage and protect corporate data within specific applications, without requiring full device enrollment or control. This is ideal for Bring Your Own Device (BYOD) scenarios where users want personal privacy but corporate data needs protection. MAM policies can enforce data encryption, prevent copy/paste of corporate data, and selectively wipe corporate data from apps.