SkillTestPro | SC-900 Exam Practice Test

SC-900 Exam Practice Test

SC-900 Exam Practice Tests

1 / 80

Your organization requires a tool to assess its compliance against various regulatory standards (like GDPR or HIPAA) and provides actionable recommendations to improve its compliance posture. Which Microsoft Purview service is designed for this?

Compliance Manager

Content Search

eDiscovery

Audit logs

Communication Compliance

2 / 80

Which Azure networking security service is used to create a network boundary for a set of Azure virtual machines and defines inbound and outbound rules based on IP addresses, ports, and protocols?

Azure Firewall

Web Application Firewall (WAF)

Azure DDoS Protection

Azure Bastion

Network Security Group (NSG)

3 / 80

A security administrator needs to monitor and respond to security events and alerts from various sources across their Microsoft 365 and Azure environments in a centralized manner. Which Microsoft security solution provides Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) capabilities?

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender for Identity

Microsoft Sentinel

Microsoft Defender for Cloud Apps

4 / 80

What is the primary benefit of implementing Multi-Factor Authentication (MFA) for user accounts?

It encrypts user data at rest.

It prevents Denial of Service (DoS) attacks.

It automatically blocks all malicious email attachments.

It provides real-time threat intelligence.

It significantly reduces the risk of unauthorized access due to compromised passwords.

5 / 80

An organization wants to ensure that specific sensitive documents, once labeled, cannot be modified or deleted for a period of seven years to meet regulatory requirements. Which Microsoft Purview capability is designed for this purpose?

Data Loss Prevention (DLP)

Insider Risk Management

eDiscovery

Sensitivity Labels with Retention Policies

Communication Compliance

6 / 80

Which type of identity in Azure AD represents a user account synchronized from an on-premises Active Directory Domain Services (AD DS) environment?

Cloud-only identity

Guest user

Service principal

Device identity

Hybrid identity

7 / 80

A company wants to identify and remediate misconfigurations across its Azure resources to improve its overall security posture. Which Microsoft security solution is primarily designed for Cloud Security Posture Management (CSPM) and provides a "Secure Score"?

Microsoft Sentinel

Microsoft Defender for Cloud

Azure Firewall

Azure DDoS Protection

Azure Key Vault

8 / 80

Which Azure Active Directory (Azure AD) feature allows administrators to enforce policies that require users to meet specific conditions (e.g., specific location, compliant device) before being granted access to applications or data?

Self-Service Password Reset (SSPR)

Multi-Factor Authentication (MFA)

Conditional Access

Azure AD Identity Protection

Privileged Identity Management (PIM)

9 / 80

According to the Shared Responsibility Model in cloud computing, for an Infrastructure-as-a-Service (IaaS) offering, who is typically responsible for the security of the operating system and installed applications?

The Cloud Service Provider (CSP)

The customer

Both the CSP and the customer equally

A third-party security vendor

The hardware manufacturer

10 / 80

Which security principle emphasizes that all users, devices, and applications, whether inside or outside the organizational network, must be verified before granting access to resources?

Defense in Depth

Shared Responsibility Model

Least Privilege

Zero Trust

Confidentiality

11 / 80

Which term describes the practice of protecting data, devices, and identities from unauthorized access, attack, or damage?

Compliance

Governance

Security

Privacy

Risk transfer

Auditing

12 / 80

Which term describes an organization's adherence to laws, regulations, and standards that govern how it must handle data and operate?

Security

Identity

Compliance

Authentication

Authorization

Encryption

13 / 80

Which security model assumes that no user or device should be trusted by default, even if it is already inside the network perimeter, and instead requires continuous verification?

Defense in depth

Shared responsibility model

Zero Trust

Perimeter-only security

Implicit trust model

Single sign-on

14 / 80

Which of the following is one of the three guiding principles of the Zero Trust model?

Trust but verify

Assume internal safety

Verify explicitly

Perimeter-only defense

Implicit trust for authenticated users

Single-factor authentication

15 / 80

Which Zero Trust principle involves limiting user access with just-in-time and just-enough-access (JIT/JEA)?

Verify explicitly

Assume breach

Use least privileged access

Implicit trust

Perimeter-based defense

Single sign-on

16 / 80

Which security strategy uses multiple layers of defense, such as physical, identity, perimeter, network, compute, application, and data layers, so that if one layer fails, others still provide protection?

Zero Trust alone, with no layered defense

Single sign-on

Defense in depth

Shared responsibility model

Just-in-time access

Perimeter-only defense

17 / 80

Under the shared responsibility model, as an organization moves from on-premises to IaaS to PaaS to SaaS, what generally happens to the customer's share of security responsibility?

The customer's share of security responsibility always increases regardless of the service model

The customer bears full responsibility under every service model with no change

The customer's share of security responsibility generally decreases, while the cloud provider's share increases

The cloud provider bears no responsibility whatsoever under any service model

Responsibility remains identical across all service models with no shift whatsoever

The customer's responsibility only changes for SaaS, remaining fixed for IaaS and PaaS

18 / 80

Which security responsibility always remains with the customer, regardless of which cloud service model (IaaS, PaaS, or SaaS) is used?

Responsibility for the physical data center

Responsibility for the physical network infrastructure

Responsibility for data, endpoints, accounts, and access management

Responsibility for the physical host machine

Responsibility for the underlying hypervisor

Responsibility for the physical server hardware

19 / 80

Which term describes the concept of confirming a user, device, or service is who or what it claims to be?

Authorization

Federation

Authentication

Encryption

Auditing

Governance

20 / 80

Which term describes the process of determining what actions or resources an authenticated user, device, or service is permitted to access?

Authentication

Federation

Authorization

Encryption

Auditing

Governance

21 / 80

Which Microsoft Entra service is the cloud-based identity and access management service used to sign in and access resources such as Microsoft 365 and Azure?

Microsoft Entra Permissions Management

Microsoft Entra Verified ID

Microsoft Entra ID

Microsoft Entra External ID

Microsoft Entra Workload ID

Microsoft Entra Private Access

22 / 80

Which Microsoft Entra ID object type represents a person, such as an employee, who signs in to access resources?

A group

A device

A user

A service principal

An application registration

A managed identity

23 / 80

Which Microsoft Entra ID feature allows administrators to organize collections of users, and optionally devices, to simplify assigning permissions or licenses?

Administrative units

Conditional Access

Groups

Identity Protection

Privileged Identity Management

Entitlement management

24 / 80

Which Microsoft Entra ID feature allows a hybrid organization to delegate administrative permissions over a specific subset of users or groups, such as those in a particular regional office?

Groups alone, with no delegated administrative scope

Conditional Access

Administrative units

Identity Protection

Privileged Identity Management

Entitlement management

25 / 80

Which Microsoft Entra capability synchronizes on-premises Active Directory identities with Microsoft Entra ID, enabling a consistent hybrid identity experience?

Microsoft Entra Verified ID

Microsoft Entra Permissions Management

Microsoft Entra Connect (Microsoft Entra Connect Sync/Cloud Sync)

Microsoft Entra External ID

Microsoft Entra Workload ID

Microsoft Entra Private Access

26 / 80

Which hybrid identity authentication method sends the actual password hash from on-premises Active Directory to Microsoft Entra ID, allowing users to sign in without maintaining a separate on-premises authentication infrastructure?

Pass-through authentication

Federation

Password hash synchronization

Certificate-based authentication

FIDO2 security key authentication

Windows Hello for Business

27 / 80

Which hybrid identity authentication method validates a user's password directly against on-premises Active Directory in real time, requiring an on-premises agent, without storing any password hash in the cloud?

Password hash synchronization

Federation

Pass-through authentication

Certificate-based authentication

FIDO2 security key authentication

Windows Hello for Business

28 / 80

Which hybrid identity authentication method delegates authentication to a separate, trusted identity provider, such as Active Directory Federation Services (AD FS)?

Password hash synchronization

Pass-through authentication

Federation

Seamless single sign-on alone

Multifactor authentication alone

Self-service password reset alone

29 / 80

Which Microsoft Entra feature allows a user to sign in once and then access multiple applications without being prompted to authenticate again for each one?

Multifactor authentication

Conditional Access

Single sign-on (SSO)

Self-service password reset

Identity Protection

Privileged Identity Management

30 / 80

Which Microsoft Entra External ID capability allows an organization to invite people from other organizations to collaborate using their own existing credentials, without creating a new managed account for them?

Business-to-consumer (B2C) identity management alone

Password hash synchronization

Business-to-business (B2B) collaboration

Pass-through authentication

Federation with AD FS alone

Privileged Identity Management

31 / 80

Which Microsoft Entra feature requires users to provide two or more verification methods, such as a password plus a code from an authenticator app, to sign in?

Single sign-on

Conditional Access alone

Multifactor authentication (MFA)

Self-service password reset alone

Password hash synchronization alone

Seamless single sign-on alone

32 / 80

Which passwordless authentication method allows a user to sign in to a Windows device using a PIN, facial recognition, or fingerprint tied to that specific device?

FIDO2 security keys, which are external hardware devices rather than built into a specific Windows device

Microsoft Authenticator app notifications

Windows Hello for Business

Password hash synchronization

Federation

Certificate-based authentication

33 / 80

Which passwordless authentication method uses an external hardware device that a user plugs in or taps to authenticate, based on an open industry standard?

Windows Hello for Business, which is tied to a specific device rather than a portable external key

Microsoft Authenticator app notifications

FIDO2 security keys

Password hash synchronization

Federation

Multifactor authentication using SMS alone

34 / 80

Which Microsoft Entra feature evaluates signals such as user location, device compliance, and sign-in risk to enforce access decisions, such as requiring MFA only when a sign-in appears risky?

Self-service password reset

Privileged Identity Management

Conditional Access

Entitlement management

Access reviews

Identity Governance alone with no signal evaluation

35 / 80

Which Microsoft Entra Conditional Access component defines the conditions, such as a specific user group or application, that must be met before a policy's controls are applied?

Access controls

Session controls

Assignments

Grant controls alone

Named locations alone

Sign-in risk levels alone

36 / 80

Which Microsoft Entra ID Protection concept refers to the calculated likelihood that a given user account has been compromised?

Sign-in risk

Session risk alone

User risk

Device compliance risk alone

Application risk alone

Location risk alone

37 / 80

Which Microsoft Entra ID Protection concept refers to the calculated likelihood that a specific authentication attempt was not actually performed by the legitimate account owner?

User risk

Session risk alone

Sign-in risk

Device compliance risk alone

Application risk alone

Location risk alone

38 / 80

Which Microsoft Entra feature provides just-in-time, time-bound privileged access to roles, reducing the risk of standing administrative access being misused?

Conditional Access alone

Identity Protection alone

Privileged Identity Management (PIM)

Entitlement management alone

Access reviews alone

Self-service password reset alone

39 / 80

Which Microsoft Entra Identity Governance feature allows organizations to create access packages so users can request access to a bundle of resources, requiring approval workflows?

Privileged Identity Management alone

Conditional Access alone

Entitlement management

Identity Protection alone

Self-service password reset alone

Password protection alone

40 / 80

Which Microsoft Entra Identity Governance feature allows an organization to periodically verify that users still require the access or group membership they currently have, removing unnecessary access?

Entitlement management alone, with no periodic review mechanism

Privileged Identity Management alone

Access reviews

Conditional Access alone

Identity Protection alone

Self-service password reset alone

41 / 80

Which unified security operations platform integrates signals from endpoints, identities, email, and cloud apps into a single portal for extended detection and response?

Microsoft Defender for Cloud

Microsoft Sentinel alone

Microsoft Defender XDR

Microsoft Entra ID Protection alone

Microsoft Purview alone

Microsoft Intune alone

42 / 80

Which Microsoft Defender product protects endpoints such as laptops and servers from advanced threats, providing capabilities like endpoint detection and response (EDR)?

Microsoft Defender for Office 365

Microsoft Defender for Identity

Microsoft Defender for Endpoint

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud

Microsoft Defender Vulnerability Management alone

43 / 80

Which Microsoft Defender product protects against phishing, malware, and other threats delivered through email and collaboration tools like Teams and SharePoint?

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Office 365

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud

Microsoft Defender for IoT

44 / 80

Which Microsoft Defender product monitors on-premises Active Directory signals to detect identity-based threats, such as pass-the-hash attacks or suspicious replication requests?

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender for Identity

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud

Microsoft Entra ID Protection alone

45 / 80

Which Microsoft Defender product acts as a cloud access security broker (CASB), providing visibility into and control over an organization's use of cloud applications?

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender for Cloud Apps

Microsoft Defender for Identity

Microsoft Defender for Cloud

Microsoft Defender for IoT

46 / 80

Which Microsoft Defender feature specifically helps organizations discover unsanctioned, unauthorized cloud applications being used by employees within the organization?

Endpoint detection and response alone

Safe Attachments alone

Shadow IT discovery (Cloud Discovery within Defender for Cloud Apps)

Identity-based threat detection alone

Vulnerability management alone

Data loss prevention alone

47 / 80

Which Microsoft Defender for Endpoint capability automatically investigates alerts and can remediate certain threats without requiring manual analyst intervention for every case?

Threat and vulnerability management alone

Attack surface reduction alone

Automated investigation and remediation (AIR)

Endpoint detection and response alone, with no automated remediation

Safe Links alone

Cloud Discovery alone

48 / 80

Which Microsoft Defender for Endpoint capability identifies and helps prioritize remediation of software vulnerabilities and misconfigurations across an organization's devices?

Attack surface reduction alone

Automated investigation and remediation alone

Threat and vulnerability management

Endpoint detection and response alone

Safe Attachments alone

Cloud Discovery alone

49 / 80

Which term describes a set of rules within Microsoft Defender for Endpoint that reduce the surface area an attacker could exploit, such as blocking Office applications from creating child processes?

Automated investigation and remediation alone

Threat and vulnerability management alone

Attack surface reduction rules

Endpoint detection and response alone

Safe Links alone

Cloud Discovery alone

50 / 80

Which Microsoft Defender XDR feature correlates related alerts from across endpoints, identities, email, and cloud apps into a single, unified view representing a broader attack?

A single, isolated alert with no correlation across signals

A standalone threat and vulnerability management report

Incidents

A single Cloud Discovery report

A single Safe Attachments log entry

A single security score value

51 / 80

Which Microsoft service is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution?

Microsoft Defender XDR

Microsoft Defender for Cloud

Microsoft Sentinel

Microsoft Purview

Microsoft Entra ID Protection

Microsoft Intune

52 / 80

Which Microsoft Sentinel capability uses pre-built or custom logic to automatically respond to detected threats, such as automatically disabling a compromised user account?

Workbooks alone

Analytics rules alone, with no automated response capability

Playbooks (built on Azure Logic Apps)

Hunting queries alone

Threat intelligence feeds alone

Data connectors alone

53 / 80

Which Microsoft Sentinel component ingests data from various sources, such as Microsoft 365, Azure resources, and third-party firewalls, into the Sentinel workspace?

Playbooks alone

Workbooks alone

Data connectors

Hunting queries alone

Analytics rules alone

Incidents alone

54 / 80

Which Microsoft Sentinel feature allows security analysts to proactively search through data for signs of undetected threats, rather than only relying on automated alerts?

Playbooks alone

Workbooks alone

Hunting

Data connectors alone

Incidents alone, viewed passively

Analytics rules alone, with no proactive search capability

55 / 80

Which Microsoft service provides cloud security posture management (CSPM) and cloud workload protection (CWP) for resources across Azure, AWS, and Google Cloud?

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Defender for Cloud

Microsoft Purview

Microsoft Entra Permissions Management

Microsoft Intune

56 / 80

Which Microsoft Defender for Cloud feature calculates a score reflecting an organization's current security posture, along with specific, actionable recommendations to improve it?

A hunting query result alone

A playbook execution log alone

Secure Score

A single, isolated alert with no aggregated scoring

A workbook alone, with no scoring mechanism

A data connector status alone

57 / 80

Which Azure network security feature filters inbound and outbound traffic to and from Azure resources within a virtual network, based on defined rules for IP address, port, and protocol?

Azure Firewall alone

Azure DDoS Protection alone

Network security groups (NSGs)

Azure Bastion alone

A Web Application Firewall (WAF) alone

Azure Key Vault alone

58 / 80

Which Azure service is a managed, cloud-based network security service that protects Azure virtual network resources with centralized policy and threat intelligence-based filtering?

Network security groups alone

Azure DDoS Protection alone

Azure Firewall

Azure Bastion alone

Azure Key Vault alone

Microsoft Defender for Cloud Apps alone

59 / 80

Which Azure service provides secure and seamless RDP or SSH connectivity to Azure virtual machines directly through the Azure portal, without exposing the VM's public IP address?

Azure Firewall alone

Network security groups alone

Azure Bastion

Azure DDoS Protection alone

Azure Key Vault alone

A Web Application Firewall alone

60 / 80

Which Azure service helps protect Azure resources from distributed denial-of-service attacks, which attempt to overwhelm a resource with excessive traffic to make it unavailable?

Azure Firewall alone

Network security groups alone

Azure DDoS Protection

Azure Bastion alone

Azure Key Vault alone

Microsoft Defender for Identity alone

61 / 80

Which Microsoft service provides a unified set of solutions to help organizations govern, protect, and manage their data across its entire lifecycle?

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Purview

Microsoft Entra ID

Microsoft Intune

Azure Firewall

62 / 80

Which Microsoft Purview feature scans and classifies content across an organization's data estate, applying labels such as 'Confidential' based on defined criteria?

eDiscovery alone

Communication Compliance alone

Information protection (sensitivity labels)

Insider Risk Management alone

Audit alone

Compliance Manager alone

63 / 80

Which type of sensitivity label action would automatically apply encryption and restrict who can open a document, regardless of where that document is subsequently shared?

A visual watermark alone, with no encryption

A header or footer alone, with no encryption

Encryption applied via a sensitivity label

A retention label alone

A content search alone

An audit log entry alone

64 / 80

Which Microsoft Purview feature helps prevent sensitive information, such as credit card numbers, from being shared inappropriately outside the organization via email or Teams?

eDiscovery alone

Communication Compliance alone

Data Loss Prevention (DLP)

Insider Risk Management alone

Records management alone

Compliance Manager alone

65 / 80

Which Microsoft Purview capability helps organizations classify and label sensitive information types, such as passport numbers or credit card numbers, using built-in or custom pattern-matching definitions?

Retention labels alone

eDiscovery cases alone

Sensitive information types

Communication Compliance policies alone

Audit log records alone

Insider Risk Management policies alone

66 / 80

Which Microsoft Purview capability manages the entire lifecycle of content, including how long it must be retained and when it should be automatically deleted?

Data Loss Prevention alone

eDiscovery alone

Records management (retention policies and labels)

Communication Compliance alone

Insider Risk Management alone

Sensitivity labeling alone

67 / 80

Which term describes a Microsoft Purview retention setting that prevents content from being permanently deleted or modified before its designated retention period has expired?

A sensitivity label with encryption alone, unrelated to retention duration

A DLP policy alone, unrelated to content retention duration

A retention policy or retention label with a preservation lock (or immutability setting)

An eDiscovery case alone, unrelated to ongoing retention enforcement

An audit log alone, unrelated to content retention enforcement

A Communication Compliance policy alone, unrelated to retention duration

68 / 80

Which Microsoft Purview feature helps organizations understand and manage the risk of sensitive data being oversharable or exposed to too many users, particularly within SharePoint and OneDrive?

Communication Compliance alone, which is not focused on data oversharing risk assessment

eDiscovery alone, which is focused on legal investigation rather than proactive oversharing risk

Data Security Posture Management (DSPM) for AI / Data risk assessments within Purview

Records management alone, which focuses on retention rather than access-based risk

Insider Risk Management alone, focused on user behavior signals rather than data exposure posture

Audit alone, which is a log review capability rather than a proactive risk assessment

69 / 80

Which Microsoft Purview feature allows an organization to discover, classify, and map data across on-premises, multicloud, and SaaS data sources into a unified data catalog?

Communication Compliance alone

eDiscovery alone

Microsoft Purview Data Map (Unified Catalog)

Insider Risk Management alone

Records management alone

Compliance Manager alone

70 / 80

Which Microsoft Purview capability monitors internal communications, such as email and chat, for policy violations like inappropriate language or potential regulatory non-compliance?

Insider Risk Management alone, which focuses on broader risky user activity signals rather than communication content review

eDiscovery alone

Communication Compliance

Records management alone

Data Loss Prevention alone, which focuses on data exfiltration rather than communication content review

Audit alone

71 / 80

Which Microsoft Purview solution helps organizations identify, hold, and export content relevant to a legal case or internal investigation, such as emails and documents related to a lawsuit?

Records management alone

Communication Compliance alone

eDiscovery

Insider Risk Management alone

Data Loss Prevention alone

Compliance Manager alone

72 / 80

Which Microsoft Purview eDiscovery tier provides advanced capabilities, such as custodian management and analytics like near-duplicate detection, beyond basic content search and hold?

eDiscovery (Standard), which provides more basic search and hold capabilities without these advanced features

Content Search alone, with no case management capability

eDiscovery (Premium)

Communication Compliance alone

Records management alone

Audit (Standard) alone

73 / 80

Which Microsoft Purview solution uses machine learning to identify potentially risky user activities, such as a departing employee downloading unusually large amounts of data before their exit?

eDiscovery alone

Communication Compliance alone

Insider Risk Management

Records management alone

Data Loss Prevention alone, viewed without behavioral risk indicators

Compliance Manager alone

74 / 80

Which Microsoft Purview Insider Risk Management concept groups related signals together, such as data exfiltration combined with an upcoming resignation, to calculate an overall risk score for a user?

A single, isolated audit log entry with no correlation to other signals

A single sensitivity label applied to one document

A risk indicator/policy that contributes to an overall user risk score

A single retention label applied to one document

A single Content Search result

A single Communication Compliance flagged message viewed in isolation

75 / 80

Which Microsoft Purview solution provides organizations a set of controls and recommended actions, along with a compliance score, to help improve their compliance posture against regulations like GDPR?

eDiscovery alone

Communication Compliance alone

Compliance Manager

Insider Risk Management alone

Records management alone

Audit alone

76 / 80

Which Compliance Manager concept represents a specific regulation, standard, or policy, such as GDPR, against which an organization's compliance posture is being assessed?

A single improvement action viewed in isolation

A single control mapping alone, without a broader regulatory template

An assessment (based on a regulatory template)

A single compliance score value alone

A single audit log entry alone

A single eDiscovery case alone

77 / 80

Which Compliance Manager concept differentiates between controls Microsoft is responsible for implementing versus controls the customer organization must implement themselves?

A single compliance score value with no control-level distinction

A single improvement action with no responsibility categorization

The categorization of controls as Microsoft-managed, customer-managed, or shared

A single audit log entry with no responsibility categorization

A single eDiscovery hold with no responsibility categorization

A single sensitivity label with no responsibility categorization

78 / 80

Which Microsoft Purview solution provides a searchable log of user and administrator activities across Microsoft 365 services, useful for investigations and compliance requirements?

Compliance Manager alone

eDiscovery alone

Microsoft Purview Audit

Communication Compliance alone

Insider Risk Management alone

Records management alone

79 / 80

Which Microsoft Purview Audit tier provides a longer default retention period for audit log data and higher bandwidth access to audit log data via API, compared to the basic tier?

Audit (Standard), which provides a shorter default retention period and lower bandwidth access

Compliance Manager alone

Audit (Premium)

eDiscovery (Standard) alone

Communication Compliance alone

Records management alone

80 / 80

Which Azure governance feature allows organizations to create, assign, and manage policies that enforce rules over resources, such as requiring all storage accounts to use encryption?

Azure Blueprints alone, which primarily orchestrates the deployment of resource templates rather than enforcing ongoing rules

Azure role-based access control (RBAC) alone, which governs who can perform actions rather than enforcing resource configuration rules

Azure Policy

Resource locks alone, which prevent accidental deletion or modification rather than enforcing broader compliance rules

Azure Cost Management alone

Microsoft Defender for Cloud alone

Your score is

The average score is 68%