Microsoft Security, Compliance, and Identity Fundamentals (SC-900) practice questions
310 free questions with answers and explanations.
- 301.A multi-national corporation requires a solution to protect their employees' Windows, macOS, Linux, Android, and iOS devices from advanced persistent threats (APTs), ransomware, and fileless malware. The security team needs capabilities for endpoint detection and response (EDR), automated investigation, and vulnerability management across all these diverse operating systems. Which Microsoft security solution provides these capabilities?Describe the capabilities of Microsoft Security solutions
- 302.A company is concerned about unmanaged and unsanctioned cloud applications (shadow IT) being used by employees, potentially leading to data exfiltration or non-compliance. They need a solution to discover these apps, assess their risk, and enforce policies. Which Microsoft security solution addresses this specific concern?Describe the capabilities of Microsoft Security solutions
- 303.A company is migrating its on-premises SQL databases to Azure SQL Database. They need a solution that can continuously monitor for vulnerabilities in their database configurations, detect anomalous activities like SQL injection attempts, and provide recommendations to improve database security. Which Azure security service is best suited for this requirement?Describe the capabilities of Microsoft Security solutions
- 304.A company requires a solution to manage and protect all corporate-owned and bring-your-own-device (BYOD) mobile devices and applications. This solution needs to enforce security policies, deploy applications, and help protect corporate data on these devices. Which Microsoft solution provides these capabilities?Describe the capabilities of Microsoft Security solutions
- 305.A security analyst is investigating an alert indicating a potentially compromised service account in their on-premises Active Directory. They need a solution that can automatically detect suspicious activities related to Active Directory users, entities, and behaviors, such as Golden Ticket attacks or unusual service principal usage. Which Microsoft security solution provides this specialized detection?Describe the capabilities of Microsoft Security solutions
- 306.A company is concerned about its Azure resources being exposed to common web vulnerabilities like SQL injection and cross-site scripting. They need a service that can protect their web applications hosted on Azure from these types of attacks. Which Azure security capability should they implement?Describe the capabilities of Microsoft Security solutions
- 307.A manufacturing company operates a large fleet of Internet of Things (IoT) devices on its factory floor, including sensors, robotic arms, and control systems. They need a solution to monitor these devices for security vulnerabilities, detect anomalous behavior, and protect them from cyber threats. Which Microsoft security solution is best suited for this purpose?Describe the capabilities of Microsoft Security solutions
- 308.An organization is looking to implement a security solution that provides identity-driven security across their hybrid environment. They need to protect Active Directory users and their identities from advanced threats, including credential theft, lateral movement, and privilege escalation. The solution must integrate with their existing Active Directory infrastructure. Which Microsoft security solution is designed for this specific purpose?Describe the capabilities of Microsoft Security solutions
- 309.A global manufacturing company uses various cloud services and on-premises infrastructure. They need a comprehensive solution to strengthen their overall security posture by providing security recommendations, identifying vulnerabilities, and protecting diverse workloads (servers, databases, storage, etc.) across Azure, AWS, GCP, and on-premises. Which Microsoft security solution is designed to address this multi-cloud and hybrid workload protection requirement?Describe the capabilities of Microsoft Security solutions
- 310.A small non-profit organization is concerned about phishing attacks targeting its employees and wants to implement a solution that automatically scans incoming emails for malicious links and attachments before they reach user inboxes. Which Microsoft security solution should they use?Describe the capabilities of Microsoft Security solutions