SkillTestPro | SC-900 Mock Exam

SC-900 Practice Test 9

SC-900 Exam Practice Tests

1 / 10

An organization wants to prevent users from accidentally or maliciously deleting critical Azure resources, such as production databases. Which Azure governance feature should be applied?

Azure Resource Locks

Azure Policy

Azure Blueprints

Management Groups

Azure Advisor

2 / 10

What is the purpose of "Microsoft Entra Permissions Management" (formerly CloudKnox) within Microsoft Entra ID Governance?

To manage access reviews for groups.

To provide time-based access to privileged roles.

To discover, remediate, and monitor permissions in multi-cloud environments.

To enforce Conditional Access policies.

To enable self-service password reset.

3 / 10

Which Microsoft security solution is specifically designed to protect multi-cloud and hybrid cloud workloads, including servers, containers, and databases, and provides Cloud Workload Protection Platform (CWPP) capabilities?

Microsoft Defender for Cloud Apps

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Cloud

Microsoft Sentinel

4 / 10

What does "non-repudiation" mean in the context of security?

The ability to encrypt data.

The ability to verify that a sender sent a message.

The process of backing up data.

The capacity to keep systems running during an attack.

The prevention of unauthorized access.

5 / 10

Which Microsoft Purview service helps organizations gain insights into user activities related to sensitive data and identify potential risks through an interactive dashboard?

Compliance Manager

Data Loss Prevention

Content Explorer

Activity Explorer

eDiscovery

6 / 10

A company needs to ensure that all virtual machines deployed in a specific Azure subscription automatically have specific security configurations applied. Which Azure governance service can help enforce this at scale?

Azure Resource Locks

Management Groups

Azure Policy

Azure Advisor

Azure Blueprints

7 / 10

What is the primary goal of "data classification" in information protection?

To encrypt all data.

To delete old data.

To prevent data from being shared.

To categorize data based on its sensitivity and business impact.

To back up data to multiple locations.

8 / 10

Which Microsoft Entra ID capability allows administrators to review and certify user access to resources or roles periodically, ensuring appropriate permissions are maintained?

PIM

Conditional Access

Identity Protection

Entitlement Management

Access Reviews

9 / 10

An organization is evaluating a cloud service model where the cloud provider manages the operating system and platform runtime, but the customer manages their applications and data. Which model is this?

Infrastructure as a Service (IaaS)

Platform as a Service (PaaS)

Software as a Service (SaaS)

On-premises

Hybrid cloud

10 / 10

Which Azure security service allows you to deploy and configure a bastion host to securely connect to your Azure virtual machines directly from the Azure portal using a browser?

Azure Firewall

Network Security Group

Azure DDoS Protection

Azure Bastion

Azure VPN Gateway

Your score is

The average score is 65%