SkillTestPro | SC-900 Practice Questions

SC-900 Practice Test 5

SC-900 Exam Practice Tests

1 / 10

An organization needs to protect its Azure virtual machines from network-level threats by inspecting traffic flow and blocking malicious packets. Which Azure security service performs stateful packet inspection at the network layer?

Azure Firewall

Azure Application Gateway

Azure Load Balancer

Azure Traffic Manager

Network Watcher

2 / 10

Which component of Microsoft Purview provides a unified experience for managing a data estate, helping organizations understand their data, classify it, and govern it across hybrid and multi-cloud environments?

Data Loss Prevention

Compliance Manager

eDiscovery

Microsoft Purview Data Map

Insider Risk Management

3 / 10

A company wants to manage and control access to applications and data within their cloud environment for users coming from various locations and using different devices. What is the fundamental purpose of an Identity and Access Management (IAM) solution in this context?

To provide physical security for data centers.

To encrypt all network traffic.

To define and enforce who can access what resources under which conditions.

To back up all cloud data.

To block malware from entering the network.

4 / 10

Which Microsoft service is designed to help organizations meet regulatory compliance requirements by applying common industry benchmarks and security standards to their Azure and hybrid cloud environments?

Microsoft Defender for Cloud

Azure Monitor

Azure Sentinel

Azure DevOps

Azure Kubernetes Service

5 / 10

What is the primary role of a Security Operations Center (SOC) in an organization's security posture?

To develop new software applications.

To manage human resources policies.

To design and implement network infrastructure.

To handle customer support requests.

To continuously monitor, detect, analyze, and respond to cybersecurity incidents.

6 / 10

Which Microsoft Purview feature allows organizations to retain, delete, and manage content and records for compliance, legal, or business requirements?

Sensitivity Labels

Data Loss Prevention

Records Management

Insider Risk Management

Communication Compliance

7 / 10

A security principle states that users should only have the minimum permissions necessary to perform their job functions. What is this principle called?

Separation of Duties

Least Privilege

Need-to-Know

Role-Based Access Control

Accountability

8 / 10

Which Microsoft Defender for Cloud capability focuses on protecting server workloads (physical servers, VMs, containers) both in Azure and on-premises?

Azure Firewall

Microsoft Defender for Endpoint

Microsoft Defender for Cloud Apps

Microsoft Defender for Servers

Microsoft Defender for IoT

9 / 10

What is the primary objective of "data residency" requirements in compliance?

To ensure data is always encrypted at rest.

To specify the geographical location where data must be stored.

To control who can access the data.

To ensure data is always backed up.

To define the format of the data.

10 / 10

To enhance the security of their Azure environment, an organization wants to automatically deploy and enforce a specific set of security controls and resource configurations consistently across multiple subscriptions. Which Azure governance service is designed for this purpose?

Azure Management Groups

Azure Blueprints

Azure Resource Groups

Azure Advisor

Azure Monitor

Your score is

The average score is 83%