SkillTestPro | SC-900 Practice Test 17 Hard Questions

SC-900 Exam Practice Test 17 (Hard) - Core Security, Compliance and Identity Concepts Deep-Dive

SC-900 Exam Practice Tests

1 / 15

Which term describes malicious software, such as viruses, worms, and ransomware, designed to damage, disrupt, or gain unauthorized access to a computer system?

Phishing

Spoofing

Malware

A denial-of-service attack

Social engineering

A brute-force attack

2 / 15

Which term describes an attack technique that uses fraudulent emails or messages to trick a person into revealing sensitive information or clicking a malicious link?

Malware

Spoofing alone

Phishing

A denial-of-service attack

A brute-force attack

Ransomware alone

3 / 15

Which term describes a broad category of manipulation techniques that exploit human psychology, such as urgency or authority, to trick people into making security mistakes?

Malware alone

A denial-of-service attack alone

Social engineering

A brute-force attack alone

Encryption alone

Federation alone

4 / 15

Which type of malware encrypts a victim's files and demands payment in exchange for the decryption key?

A worm

A phishing email alone

Ransomware

A denial-of-service attack alone

A brute-force attack alone

Spyware alone, which secretly monitors rather than encrypting files for ransom

5 / 15

Which type of attack attempts to overwhelm a system, service, or network with excessive traffic, making it unavailable to legitimate users?

Phishing

Malware alone

A denial-of-service (DoS) attack

Spoofing alone

Social engineering alone

A brute-force attack alone

6 / 15

Which term describes the process of converting data into a coded format that can only be read by someone possessing the correct decryption key?

Hashing alone, which is typically one-way and not intended for decryption

Federation

Encryption

Authentication

Authorization

Auditing

7 / 15

Which term describes a one-way mathematical function that converts data into a fixed-length string, commonly used to verify data integrity rather than to encrypt for later decryption?

Encryption, which is typically reversible with the correct key

Federation

Hashing

Authentication

Authorization

Tokenization

8 / 15

Which term describes replacing sensitive data with a non-sensitive placeholder value that has no exploitable meaning or value if breached?

Encryption, which transforms data reversibly using a key rather than substituting with an unrelated placeholder

Hashing alone

Tokenization

Federation

Authentication

Authorization

9 / 15

Which term describes the concept of ensuring that data has not been altered or tampered with in an unauthorized manner?

Confidentiality

Availability

Integrity

Authentication

Authorization

Non-repudiation

10 / 15

Which term describes the concept of ensuring that systems and data remain accessible to authorized users when needed?

Confidentiality

Integrity

Availability

Authentication

Authorization

Non-repudiation

11 / 15

Which term describes the concept of ensuring that sensitive information is only accessible to those authorized to view it?

Integrity

Availability

Confidentiality

Authentication

Authorization

Non-repudiation

12 / 15

Which term describes the assurance that a party in a transaction or communication cannot later deny having participated in it?

Confidentiality

Integrity

Non-repudiation

Availability

Authentication alone

Authorization alone

13 / 15

Which term describes the concept of an entity, such as a person, service, or device, having a unique digital representation within a system?

Authentication alone

Authorization alone

Identity

Federation alone

Encryption alone

Auditing alone

14 / 15

Which term describes an identity provider trusting another identity provider's authentication, allowing a user to access resources across organizational boundaries without a separate account?

Single sign-on alone, which occurs within a single trust boundary rather than across separate identity providers

Multifactor authentication alone

Federation

Password hash synchronization alone

Conditional Access alone

Privileged Identity Management alone

15 / 15

Which term describes an unwanted or unintended exposure of sensitive data to unauthorized parties?

A sensitivity label

A retention policy

A data breach

An access review

A hunting query

A playbook

Your score is

The average score is 0%