SC-900 시험 - Microsoft실제시험문제와 답 - 198문항

Question No : 1

Which Microsoft portal provides information about how Microsoft manages privacy, compliance, and security?

A.Microsoft Service Trust Portal
B.Compliance Manager
C.Microsoft 365 compliance center
D.Microsoft Support

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide

Question No : 2

In a Core eDiscovery workflow, what should you do before you can search for content?

A.Create an eDiscovery hold.
B.Run Express Analysis.
C.Configure attorney-client privilege detection.
D.Export and download results.

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-core-ediscovery?view=o365-worldwide

Question No : 3

HOTSPOT
Select the answer that correctly completes the sentence.

정답:

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview

Question No : 4

Which Microsoft 365 feature can you use to restrict users from sending email messages that contain lists of customers and their associated credit card numbers?

A.retention policies
B.data loss prevention (DLP) policies
C.conditional access policies
D.information barriers

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

Question No : 5

HOTSPOT
Select the answer that correctly completes the sentence.

정답:

Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center?view=o365-worldwide
MIP capabilities are included with Microsoft 365 Compliance and give you the tools to know your data, protect your data, and prevent data loss.
https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection?view=o365-worldwide

Question No : 6

Which Azure Active Directory (Azure AD) feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?

A.network security groups (NSGs)
B.Azure AD Privileged Identity Management (PIM)
C.conditional access policies
D.resource locks

정답:

Question No : 7

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

정답:

Question No : 8

What can you use to provide threat detection for Azure SQL Managed Instance?

A.Microsoft Secure Score
B.application security groups
C.Microsoft Defender for Cloud
D.Azure Bastion

정답:

Question No : 9

Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?

A.integration with the Microsoft 365 compliance center
B.support for threat hunting
C.integration with Microsoft 365 Defender
D.support for Azure Monitor Workbooks

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/eval-overview?view=o365-worldwide

Question No : 10

What can you use to scan email attachments and forward the attachments to recipients only if the attachments are free from malware?

A.Microsoft Defender for Office 365
B.Microsoft Defender Antivirus
C.Microsoft Defender for Identity
D.Microsoft Defender for Endpoint

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-advanced-threat-protection-service-description

Question No : 11

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

정답:

Question No : 12

You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure.
Which security methodology does this represent?

A.threat modeling
B.identity as the security perimeter
C.defense in depth
D.the shared responsibility model

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/2-what-is-defense-in-depth

Question No : 13

Which two types of resources can be protected by using Azure Firewall? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A.Azure virtual machines
B.Azure Active Directory (Azure AD) users
C.Microsoft Exchange Online inboxes
D.Azure virtual networks
E.Microsoft SharePoint Online sites

정답:
Explanation:
Firewall is really not directly protecting the Virtual Networks though DDOS would have been ideal for VNETS

Question No : 14

HOTSPOT
Select the answer that correctly completes the sentence.

정답:

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/sentinel/overview

Question No : 15

What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?

A.automated remediation
B.automated investigation
C.advanced hunting
D.network protection

정답:
Explanation:
Network protection helps protect devices from Internet-based events. Network protection is an attack surface reduction capability.
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide

Microsoft SC-900 시험

Question No : 1

Question No : 2

Question No : 3

Question No : 4

Question No : 5

Question No : 6

Question No : 7

Question No : 8

Question No : 9

Question No : 10

Question No : 11

Question No : 12

Question No : 13

Question No : 14

Question No : 15