[Q41-Q62] ExamBoosts SC-900 Real Exam Question Answers Updated [Mar 24, 2022]

ExamBoosts March 24, 2022 SC-900 > Microsoft 0

Rate this post

ExamBoosts SC-900 Real Exam Question Answers Updated [Mar 24, 2022]

Easily To Pass New Microsoft SC-900 Dumps with 97 Questions

NEW QUESTION 41
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/bastion/bastion-overview
https://docs.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal

NEW QUESTION 42
HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:

Section: Describe the Capabilities of Microsoft Security Solutions
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

NEW QUESTION 43
Which three authentication methods does Windows Hello for Business support? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

fingerprint

facial recognition

email verification

security question

NEW QUESTION 44
Which Azure Active Directory (Azure AD) feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?

network security groups (NSGs)

Azure AD Privileged Identity Management (PIM)

conditional access policies

resource locks

NEW QUESTION 45
Select the answer that correctly completes the sentence.

Explanation
Graphical user interface, text, application Description automatically generated

NEW QUESTION 46
Select the answer that correctly completes the sentence.

Explanation
Text, letter Description automatically generated

Biometrics templates are stored locally on a device. Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

NEW QUESTION 47
Select the answer that correctly completes the sentence.

Explanation
Text, letter Description automatically generated

Biometrics templates are stored locally on a device. Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

NEW QUESTION 48
In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

the management of mobile devices

the permissions for the user data stored in Azure

the creation and management of user accounts

the management of the physical hardware

NEW QUESTION 49
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Azure Defender provides security alerts and advanced threat protection for virtual machines, SQL databases, containers, web applications, your network, your storage, and more Box 2: Yes Cloud security posture management (CSPM) is available for free to all Azure users.
Box 3: Yes
Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud – whether they’re in Azure or not – as well as on premises.

NEW QUESTION 50
Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

conditional access policies

Azure AD Identity Protection

Azure AD Privileged Identity Management (PIM)

authentication method policies

Azure AD Privileged Identity Management (PIM) provides just-in-time privileged access to Azure AD and Azure resources Reference:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

NEW QUESTION 51
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide

NEW QUESTION 52
In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Plan

Manage

Adopt

Govern

Define Strategy

Reference:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/overview

NEW QUESTION 53
Select the answer that correctly completes the sentence.

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

NEW QUESTION 54
Which service should you use to view your Azure secure score? To answer, select the appropriate service in the answer area.

Reference:
https://docs.microsoft.com/en-us/azure/security-center/secure-score-access-and-track

NEW QUESTION 55
Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

conditional access policies

Azure AD Identity Protection

Azure AD Privileged Identity Management (PIM)

authentication method policies

Azure AD Privileged Identity Management (PIM) provides just-in-time privileged access to Azure AD and Azure resources
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

NEW QUESTION 56
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Azure AD supports custom roles.
Box 2: Yes
Global Administrator has access to all administrative features in Azure Active Directory. Box 3: No

NEW QUESTION 57
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Azure Multi-Factor Authentication (MFA)

Azure Active Directory (Azure AD) Identity Protection

conditional access policies

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment

NEW QUESTION 58
What is an example of encryption at rest?

sending an encrypted email

encrypting communications by using a site-to-site VPN

encrypting a virtual machine disk

accessing a website by using an encrypted HTTPS connection

NEW QUESTION 59
Select the answer that correctly completes the sentence.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

NEW QUESTION 60
Select the answer that correctly completes the sentence.

Explanation
Graphical user interface, text, application Description automatically generated

NEW QUESTION 61
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application Description automatically generated

Box 1: Yes
Box 2: Yes
Box 3: No
The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.

NEW QUESTION 62
Select the answer that correctly completes the sentence.