KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #typescript #developer-tools #claude-code #ai-agent #codex #deepseek-harness #ai-agents #cli #react #mcp

Microsoft-SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals-Practice-Tests-Exams-QA

★ 23 Open GitHub ↗

⛳️ PASS: Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) by learning based on our Questions & Answers (Q&A) Practice Tests Exams.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# ⬆️ Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) Practice Tests Exams Questions & Answers

![Promotional image](https://raw.githubusercontent.com/Ditectrev/Microsoft-SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals-Practice-Tests-Exams-QA/main/images/promotional.png)

## ❣ Support

There are many ways to support us; in exchange, you'll get this material in a proper format:

- ❤️ [shop.ditectrev.com, in EPUB or PDF formats, with answers marked](https://shop.ditectrev.com/product/microsoft-sc-900-security-compliance-and-identity-fundamentals-practice-tests-exams-questions-answers),
- ❤️ [shop.ditectrev.com, in EPUB or PDF formats, without answers marked](https://shop.ditectrev.com/product/microsoft-sc-900-security-compliance-and-identity-fundamentals-practice-tests-exams-questions-no-answers),
- 📖 [Udemy is the only one to have explanations for questions](https://www.udemy.com/course/ms-security-compliance-and-identity-fundamentals-sc-900/?referralCode=38CEC527FAE1EC26ACBA),
- 📚 [Google Play Books, in PDF format, with answers marked](https://play.google.com/store/books/details?id=tx8REQAAQBAJ),
- 📚 [Google Play Books, in PDF format, without answers marked](https://play.google.com/store/books/details?id=tR8REQAAQBAJ),
- 🛍️ [Etsy, in PDF format, with answers marked](https://ditectrev.etsy.com/listing/1753969815),
- 🛍️ [Etsy, in PDF format, without answers marked](https://ditectrev.etsy.com/listing/1739775552),
- 🛒 [eBay, in PDF format, with answers marked](https://ebay.us/m/hS9Vgo),
- 🛒 [eBay, in PDF format, without answers marked](https://ebay.us/m/42hMYo),
- 🔄 [Patreon subscription allows you to get access to all of the materials in EPUB and PDF formats. You can also buy separate items on Patreon, but the subscription technically allows us to include all updates for EPUB and PDF formats. Hence, you get EPUB and PDF updates when you subscribe to Patreon](https://patreon.com/Ditectrev?utm_medium=unknown&utm_source=join_link&utm_campaign=creatorshare_creator&utm_content=copyLink).

💰 If you work for a company, you could probably easily claim this expense while preparing for your exam. For us, it's about being in the game or not.

⭐ Good ratings & reviews help us to survive. Please don't forget to leave a nice one when you purchase an item.

## 👩‍💻 & 👨‍💻 Interactive Course(s)

It's great to learn these questions as your exam preparation, and, yes, you should pass just based on that. However, we highly recommend more interactive learning if you want to become an expert. Currently, we're recommending those courses:

- 🎬 [Coursera: video-based, official course by Microsoft](https://imp.i384100.net/09VNkN).
- 📖 [Educative: text-based, video-free course, including set up out-of-the-box for you Cloud Labs to practice hands-on without the need to set up an environment (and payments). The link includes the highest available discount Educative offers](https://www.educative.io/courses/cyber-security-best-practices-for-developers?aff=VALz).

Yes, we have a little commission from these links. Therefore, by using these links, you're supporting us.

## ✨ This course is unlike any Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) course you will find online.

✋ Join a live online community and a course taught by industry experts and pass the Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) confidently. We aim to build an ecosystem of Information Technology (IT) certifications and online courses in cooperation with the technology industry. We believe it will give our students 100% confidence in the pacing market in an open-source environment. We are just at the beginning of our way, so it's even better for you to join now!

[![Join our Discord](https://raw.githubusercontent.com/Ditectrev/Microsoft-SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals-Practice-Tests-Exams-QA/main/images/discord.png 'Join our Discord')](https://discord.gg/RFjtXKfJy3)

## ⌛️ Short and to the point; why should you take the course:

1. Always happy to answer your questions on Udemy's Q&A's and outside :)
2. Failed? Please submit a screenshot of your exam result and request a refund (via our upcoming platform, not possible on Udemy); we'll always accept it.
3. Learn about topics, such as:
   - Azure Bastion;
   - Azure Defender;
   - Azure Firewall;
   - Azure Policy;
   - Conditional Access Policies;
   - Microsoft 365 Compliance Center;
   - Microsoft Cloud App Security;
   - Microsoft Defender;
   - Microsoft Defender for Cloud;
   - Microsoft Entra ID;
   - Multi-Factor Authentication (MFA);
   - Privileged Identity Management (PIM);
   - **Much More!**
4. Questions are similar to the actual exam, without duplications (like in other courses ;-)).
5. The Practice Tests Exams simulate the actual exam's content, timing, and percentage required to pass the exam.
6. This course is **not** an Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) Exam Dump. Some people use brain dumps or exam dumps, but that's absurd, which we don't practice.
7. 211 **unique** questions.

## ☝️ Course Updates

**[v1.0.0](../../releases/tag/v1.0.0): June 28, 2024.**

- Launch of the course.

**[v1.0.0](../../releases/tag/v1.0.0): July 26, 2024.**

- AI-generated explanations (only paid [Udemy](https://www.udemy.com/course/ms-security-compliance-and-identity-fundamentals-sc-900/?referralCode=38CEC527FAE1EC26ACBA)).

**[v1.0.1](../../releases/tag/v1.0.1): April 1, 2025.**

- Fix literally 1 missing letter in one question.

**[v1.1.0](../../releases/tag/v1.1.0): October 25, 2025.**

- Update outdated terminology related to Azure Active Directory (Azure AD) (now Microsoft Entra ID), Azure AD Identity Protection (now Microsoft Entra ID Protection), and Azure Security Center (now Microsoft Defender for Cloud). Additionally, fix 5 questions with wrong answers, and replace 4 duplicated questions with 4 new ones.

## 🙋‍♀️ & 🙋‍♂️ Contribution

We are so thankful for every contribution, which makes sure we can deliver top-notch content. Whenever you find a missing resource, broken link in a [Table of Contents](#table-of-contents), the wrong answer, please submit an [issue](../../issues). Even better would be a [Pull Request (PR)](../../pulls).

## Who this course is for:

- 👨‍🎓 Students preparing for the Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) Exam;
- 👨‍🎓 AWS Engineers;
- 👨‍🎓 Azure Engineers;
- 👨‍🎓 Cloud Architects;
- 👨‍🎓 Cloud Engineers;
- 👨‍🎓 DevOps Engineers;
- 👨‍🎓 Enterprise Architects;
- 👨‍🎓 Google Cloud Platform (GCP) Engineers;
- 👨‍🎓 Infrastructure Engineers;
- 👨‍🎓 IT Professionals;
- 👨‍🎓 Lead Engineers;
- 👨‍🎓 Network Engineers;
- 👨‍🎓 Product Architects;
- 👨‍🎓 Product Managers;
- 👨‍🎓 Product Owners;
- 👨‍🎓 Project Managers;
- 👨‍🎓 Scrum Masters;
- 👨‍🎓 Security Specialists;
- 👨‍🎓 Site Reliability Engineers;
- 👨‍🎓 Software Developers/Engineers;
- 👨‍🎓 Software Testers;
- 👨‍🎓 Solution Architects;
- 👨‍🎓 Team Leaders.

## Requirements

- 🤩 Excitement to learn!
- 0️⃣ Prior knowledge is required;
- ✅ You can pass the Microsoft SC-900 (Microsoft Security, Compliance, and Identity Fundamentals) Exam solely based on our Practice Tests Exams.

## Table of Contents

| No. | Questions |
| --- | --------- |
| 1   | [Conditional access policies always enforce the user of multi-factor authentication (MFA).](#conditional-access-policies-always-enforce-the-user-of-multi-factor-authentication-mfa) |
| 2   | [Conditional access policies can be used to block access to an application based on the location of the user.](#conditional-access-policies-can-be-used-to-block-access-to-an-application-based-on-the-location-of-the-user) |
| 3   | [Conditional access policies only affect users who have Microsoft Entra ID-joined devices.](#conditional-access-policies-only-affect-users-who-have-microsoft-entra-id-joined-devices) |
| 4   | [[...] is used to identify, hold, and export electronic information that might be used in an investigation.](#-is-used-to-identify-hold-and-export-electronic-information-that-might-be-used-in-an-investigation) |
| 5   | [Microsoft Defender for Endpoint can protect Android devices.](#microsoft-defender-for-endpoint-can-protect-android-devices) |
| 6   | [Microsoft Defender for Endpoint can protect Azure virtual machines that run Windows 10.](#microsoft-defender-for-endpoint-can-protect-azure-virtual-machines-that-run-windows-10) |
| 7   | [Microsoft Defender for Endpoint can protect Microsoft SharePoint Online sites and content from viruses.](#microsoft-defender-for-endpoint-can-protect-microsoft-sharepoint-online-sites-and-content-from-viruses) |
| 8   | [What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?](#what-feature-in-microsoft-defender-for-endpoint-provides-the-first-line-of-defense-against-cyberthreats-by-reducing-the-attack-surface) |
| 9   | [Which score measures an organization’s progress in completing actions that help reduce risks associated to data protection and regulatory standards?](#which-score-measures-an-organizations-progress-in-completing-actions-that-help-reduce-risks-associated-to-data-protection-and-regulatory-standards) |
| 10  | [You can add a resource lock to an Azure subscription.](#you-can-add-a-resource-lock-to-an-azure-subscription) |
| 11  | [You can add only one resource lock to an Azure resource.](#you-can-add-only-one-resource-lock-to-an-azure-resource) |
| 12  | [You can delete a resource group containing resources that have resources locks.](#you-can-delete-a-resource-group-containing-resources-that-have-resources-locks) |
| 13  | [Azure Defender can detect vulnerabilities and threats for Azure Storage.](#azure-defender-can-detect-vulnerabilities-and-threats-for-azure-storage) |
| 14  | [Cloud Security Posture Management (CSPM) is available for all Azure subscriptions.](#cloud-security-posture-management-cspm-is-available-for-all-azure-subscriptions) |
| 15  | [Microsoft Defender for Cloud can evaluate the security of workloads deployed to Azure or on-premises.](#microsoft-defender-for-cloud-can-evaluate-the-security-of-workloads-deployed-to-azure-or-on-premises) |
| 16  | [In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?](#in-the-shared-responsibility-model-for-an-azure-deployment-what-is-microsoft-solely-responsible-for-managing) |
| 17  | [Which Microsoft 365 feature can you use to restrict communication and the sharing of information between members of two departments at your organization?](#which-microsoft-365-feature-can-you-use-to-restrict-communication-and-the-sharing-of-information-between-members-of-two-departments-at-your-organization) |
| 18  | [You can use [...] in the Microsoft 365 security center to identify devices that are affected by an alert.](#you-can-use--in-the-microsoft-365-security-center-to-identify-devices-that-are-affected-by-an-alert) |
| 19  | [When users sign in to the Azure portal, they are first [...].](#when-users-sign-in-to-the-azure-portal-they-are-first-) |
| 20  | [You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure. Which security methodology does this represent?](#you-plan-to-implement-a-security-strategy-and-place-multiple-layers-of-defense-throughout-a-network-infrastructure-which-security-methodology-does-this-represent) |
| 21  | [Compliance Manager assesses compliance data [...] for an organization.](#compliance-manager-assesses-compliance-data--for-an-organization) |
| 22  | [What should you use in the Microsoft 365 security center to view security trends and track the protection status of identities?](#what-should-you-use-in-the-microsoft-365-security-center-to-view-security-trends-and-track-the-protection-status-of-identities) |
| 23  | [Digitally signing a document requires a private key.](#digitally-signing-a-document-requires-a-private-key) |
| 24  | [Verifying the authenticity of a digitally signed document requires the public key of the signer.](#verifying-the-authenticity-of-a-digitally-signed-document-requires-the-public-key-of-the-signer) |
| 25  | [Verifying the authenticity of a digitally signed document requires the private key of the signer.](#verifying-the-authenticity-of-a-digitally-signed-document-requires-the-private-key-of-the-signer) |
| 26  | [In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase?](#in-the-microsoft-cloud-adoption-framework-for-azure-which-two-phases-are-addressed-before-the-ready-phase) |
| 27  | [What can you use to provide a user with a two-hour window to complete an administrative task in Azure?](#what-can-you-use-to-provide-a-user-with-a-two-hour-window-to-complete-an-administrative-task-in-azure) |
| 28  | [Applying system updates increases an organization's secure score in Microsoft Defender for Cloud.](#applying-system-updates-increases-an-organizations-secure-score-in-microsoft-defender-for-cloud) |
| 29  | [The secure score in Microsoft Defender for Cloud can evaluate resources across multiple Azure subscriptions.](#the-secure-score-in-microsoft-defender-for-cloud-can-evaluate-resources-across-multiple-azure-subscriptions) |
| 30  | [Enabling multi-factor authentication (MFA) increases an organization's secure score in Microsoft Defender for Cloud.](#enabling-multi-factor-authentication-mfa-increases-an-organizations-secure-score-in-microsoft-defender-for-cloud) |
| 31  | [[...] enables collaboration with business partners from external organizations such as suppliers, partners, and vendors. External users appear as guest in the directory.](#-enables-collaboration-with-business-partners-from-external-organizations-such-as-suppliers-partners-and-vendors-external-users-appear-as-guest-in-the-directory) |
| 32  | [Which Microsoft portal provides information about how Microsoft manages privacy, compliance, and security?](#which-microsoft-portal-provides-information-about-how-microsoft-manages-privacy-compliance-and-security) |
| 33  | [What can you use to scan email attachments and forward the attachments to recipients only if the attachments are free from malware?](#what-can-you-use-to-scan-email-attachments-and-forward-the-attachments-to-recipients-only-if-the-attachments-are-free-from-malware) |
| 34  | [What is the purpose of Microsoft Entra ID Password Protection?](#what-is-the-purpose-of-microsoft-entra-id-password-protection) |
| 35  | [Network security groups (NSGs) can deny inbound traffic from the internet.](#network-security-groups-nsgs-can-deny-inbound-traffic-from-the-internet) |
| 36  | [Network security groups (NSGs) can deny outbound traffic to the internet.](#network-security-groups-nsgs-can-deny-outbound-traffic-to-the-internet) |
| 37  | [Network security groups (NSGs) can filter traffic based on IP address, protocol, and port.](#network-security-groups-nsgs-can-filter-traffic-based-on-ip-address-protocol-and-port) |
| 38  | [What is an example of encryption at rest?](#what-is-an-example-of-encryption-at-rest) |
| 39  | [Azure DDoS Protection Standard can be used to protect [...].](#azure-ddos-protection-standard-can-be-used-to-protect-) |
| 40  | [Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)?](#which-three-authentication-methods-can-be-used-by-azure-multi-factor-authentication-mfa) |
| 41  | [Which Microsoft 365 Compliance Center feature can you use to identify all the documents on a Microsoft SharePoint Online site that contain a specific key word?](#which-microsoft-365-compliance-center-feature-can-you-use-to-identify-all-the-documents-on-a-microsoft-sharepoint-online-site-that-contain-a-specific-key-word) |
| 42  | [You can use the insider risk management solution to detect phising scams.](#you-can-use-the-insider-risk-management-solution-to-detect-phising-scams) |
| 43  | [You can access the insider risk management solution from the Microsoft 365 Compliance Center.](#you-can-access-the-insider-risk-management-solution-from-the-microsoft-365-compliance-center) |
| 44  | [You can use the insider risk management solution to detect data leaks by unhappy employees.](#you-can-use-the-insider-risk-management-solution-to-detect-data-leaks-by-unhappy-employees) |
| 45  | [What are two capabilities of Microsoft Defender for Endpoint?](#what-are-two-capabilities-of-microsoft-defender-for-endpoint) |
| 46  | [Microsoft Intune can be used to manage Android devices.](#microsoft-intune-can-be-used-to-manage-android-devices) |
| 47  | [Microsoft Intune can be used to provision Azure subscriptions.](#microsoft-intune-can-be-used-to-provision-azure-subscriptions) |
| 48  | [Microsoft Intune can be used to manage organization-owned devices and personal devices.](#microsoft-intune-can-be-used-to-manage-organization-owned-devices-and-personal-devices) |
| 49  | [Compliance Manager tracks only customer-managed controls.](#compliance-manager-tracks-only-customer-managed-controls) |
| 50  | [Compliance Manager provides predefined templates for creating assessments.](#compliance-manager-provides-predefined-templates-for-creating-assessments) |
| 51  | [Compliance Manager can help you asses whether data adheres to specific data protection standards.](#compliance-manager-can-help-you-asses-whether-data-adheres-to-specific-data-protection-standards) |
| 52  | [Which two tasks can you implement by using data loss prevention (DLP) policies in Microsoft 365?](#which-two-tasks-can-you-implement-by-using-data-loss-prevention-dlp-policies-in-microsoft-365) |
| 53  | [[...] requires additional verification, such as a verification code sent to a mobile phone.](#-requires-additional-verification-such-as-a-verification-code-sent-to-a-mobile-phone) |
| 54  | [With Advanced Audit in Microsoft 365, you can identify when email items were accessed.](#with-advanced-audit-in-microsoft-365-you-can-identify-when-email-items-were-accessed) |
| 55  | [Advenced Audit in Microsoft 365 supports the same retention period of audit logs as core auditing.](#advenced-audit-in-microsoft-365-supports-the-same-retention-period-of-audit-logs-as-core-auditing) |
| 56  | [Advanced Audit in Microsoft 365 allocates customer-dedicated bandwidth for accessing audit data.](#advanced-audit-in-microsoft-365-allocates-customer-dedicated-bandwidth-for-accessing-audit-data) |
| 57  | [[...] provides a central location for managing information protection, information governance, and data loss prevention (DLP) policies.](#-provides-a-central-location-for-managing-information-protection-information-governance-and-data-loss-prevention-dlp-policies) |
| 58  | [Which Microsoft 365 compliance feature can you use to encrypt content automatically based on specific conditions?](#which-microsoft-365-compliance-feature-can-you-use-to-encrypt-content-automatically-based-on-specific-conditions) |
| 59  | [In Azure Sentinel, you can automate common tasks by using [...].](#in-azure-sentinel-you-can-automate-common-tasks-by-using-) |
| 60  | [All Microsoft Entra ID license editions include the same features.](#all-microsoft-entra-id-license-editions-include-the-same-features) |
| 61  | [You can manage an Microsoft Entra ID tenant by using the Azure portal.](#you-can-manage-an-microsoft-entra-id-tenant-by-using-the-azure-portal) |
| 62  | [You must deploy Azure virtual machines to host an Microsoft Entra ID tenant.](#you-must-deploy-azure-virtual-machines-to-host-an-microsoft-entra-id-tenant) |
| 63  | [Microsoft Entra ID is [...] used for authentication and authorization.](#microsoft-entra-id-is--used-for-authentication-and-authorization) |
| 64  | [[...] can be used to provide Microsoft Support Engineers with access to an organization's data stored in Microsoft Exchange Online, SharePoint Online, and OneDrive for Business.](#-can-be-used-to-provide-microsoft-support-engineers-with-access-to-an-organizations-data-stored-in-microsoft-exchange-online-sharepoint-online-and-onedrive-for-business) |
| 65  | [What do you use to provide real-time integration between Azure Sentinel and another security source?](#what-do-you-use-to-provide-real-time-integration-between-azure-sentinel-and-another-security-source) |
| 66  | [You can create custom roles in Microsoft Entra ID.](#you-can-create-custom-roles-in-microsoft-entra-id) |
| 67  | [Global administrator is a role in Microsoft Entra ID.](#global-administrator-is-a-role-in-microsoft-entra-id) |
| 68  | [An Microsoft Entra ID user can be assigned only one role.](#an-microsoft-entra-id-user-can-be-assigned-only-one-role) |
| 69  | [Microsoft Entra ID Identity Protection can add users to groups based on the users' risk level.](#microsoft-entra-id-identity-protection-can-add-users-to-groups-based-on-the-users-risk-level) |
| 70  | [Microsoft Entra ID Identity Protection can detect whether user credentials were leaked to the public.](#microsoft-entra-id-identity-protection-can-detect-whether-user-credentials-were-leaked-to-the-public) |
| 71  | [Microsoft Entra ID Identity Protection can be used to invoke Multi-Factor Authentication based on a user's risk level.](#microsoft-entra-id-identity-protection-can-be-used-to-invoke-multi-factor-authentication-based-on-a-users-risk-level) |
| 72  | [Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?](#which-feature-provides-the-extended-detection-and-response-xdr-capability-of-azure-sentinel) |
| 73  | [Which Microsoft Entra ID feature can you use to provide just-in-time (JIT) access to manage Azure resources?](#which-microsoft-entra-id-feature-can-you-use-to-provide-just-in-time-jit-access-to-manage-azure-resources) |
| 74  | [In software as a service (SaaS), applying service packs to applications is the responsibility of the organization.](#in-software-as-a-service-saas-applying-service-packs-to-applications-is-the-responsibility-of-the-organization) |
| 75  | [In infrastructure as a service (IaaS), managing the physical network is the responsibility of the cloud provider.](#in-infrastructure-as-a-service-iaas-managing-the-physical-network-is-the-responsibility-of-the-cloud-provider) |
| 76  | [In all Azure Cloud deployment types, managing the security of information and data is the responsibility of the organization.](#in-all-azure-cloud-deployment-types-managing-the-security-of-information-and-data-is-the-responsibility-of-the-organization) |
| 77  | [Applications registered in Microsoft Entra ID are associated automatically to a [...].](#applications-registered-in-microsoft-entra-id-are-associated-automatically-to-a-) |
| 78  | [[...] is a cloud-native security information and event management (SIEM) and security orchestration automated response (SOAR) solution used to provide a single solution for alert detection, threat visibility, proactive hunting, and threat response.](#-is-a-cloud-native-security-information-and-event-management-siem-and-security-orchestration-automated-response-soar-solution-used-to-provide-a-single-solution-for-alert-detection-threat-visibility-proactive-hunting-and-threat-response) |
| 79  | [[...] a file makes the data in the file readable and usable to viewers that have the appropriate key.](#-a-file-makes-the-data-in-the-file-readable-and-usable-to-viewers-that-have-the-appropriate-key) |
| 80  | [Sensitivity labels can be used to encrypt documents.](#sensitivity-labels-can-be-used-to-encrypt-documents) |
| 81  | [Sensitivity labels can add headers and footers to documents.](#sensitivity-labels-can-add-headers-and-footers-to-documents) |
| 82  | [Sensitivity labels can apply watermarks to emails.](#sensitivity-labels-can-apply-watermarks-to-emails) |
| 83  | [[...] is a cloud-based solution that leverages on-premises Active Directory signals to identify, detect, and investigate advanced threats.](#-is-a-cloud-based-solution-that-leverages-on-premises-active-directory-signals-to-identify-detect-and-investigate-advanced-threats) |
| 84  | [Azure Policy supports automatic remediation.](#azure-policy-supports-automatic-remediation) |
| 85  | [Azure Policy can be used to ensure that new resources adhere to corporate standards.](#azure-policy-can-be-used-to-ensure-that-new-resources-adhere-to-corporate-standards) |
| 86  | [Compliance evaluation in Azure Policy occurs only when a target resource is created or modified.](#compliance-evaluation-in-azure-policy-occurs-only-when-a-target-resource-is-created-or-modified) |
| 87  | [Federation is used to establish [...] between organizations.](#federation-is-used-to-establish--between-organizations) |
| 88  | [[...] provides Network Address Translation (NAT) services.](#-provides-network-address-translation-nat-services) |
| 89  | [[...] provides secure and seamless Remote Desktop connectivity to Azure virtual machines.](#-provides-secure-and-seamless-remote-desktop-connectivity-to-azure-virtual-machines) |
| 90  | [[...] provides provides traffic filtering that can be applied to specific network interfaces on a virtual network.](#-provides-provides-traffic-filtering-that-can-be-applied-to-specific-network-interfaces-on-a-virtual-network) |
| 91  | [Conditional access policies can use the device state as a signal.](#conditional-access-policies-can-use-the-device-state-as-a-signal) |
| 92  | [Conditional access policies apply before first-factor authentication is complete.](#conditional-access-policies-apply-before-first-factor-authentication-is-complete) |
| 93  | [Conditional access policies can trigger multi-factor authentication (MFA) if a user attempts to access a specific application.](#conditional-access-policies-can-trigger-multi-factor-authentication-mfa-if-a-user-attempts-to-access-a-specific-application) |
| 94  | [Microsoft Entra ID Protection can add users to groups based on the users' risk level.](#microsoft-entra-id-protection-can-add-users-to-groups-based-on-the-users-risk-level) |
| 95  | [Microsoft Entra ID Protection can detect whether user credentials were leaked to the public.](#microsoft-entra-id-protection-can-detect-whether-user-credentials-were-leaked-to-the-public) |
| 96  | [Microsoft Entra ID Protection can be used to invoke Multi-Factor Authentication based on the users' risk level.](#microsoft-entra-id-protection-can-be-used-to-invoke-multi-factor-authentication-based-on-the-users-risk-level) |
| 97  | [Security defaults require an Microsoft Entra ID Premium license.](#security-defaults-require-an-microsoft-entra-id-premium-license) |
| 98  | [Security defaults can be enabled for a single Microsoft Entra ID user.](#security-defaults-can-be-enabled-for-a-single-microsoft-entra-id-user) |
| 99  | [When Security defaults are enabled, all administrators must use multi-factor authentication (MFA).](#when-security-defaults-are-enabled-all-administrators-must-use-multi-factor-authentication-mfa) |
| 100 | [Control is a key privacy principle of Microsoft.](#control-is-a-key-privacy-principle-of-microsoft) |
| 101 | [Transparency is a key principle of Microsoft.](#transparency-is-a-key-principle-of-microsoft) |
| 102 | [Shared responsibility a key principle of Microsoft.](#shared-responsibility-a-key-principle-of-microsoft) |
| 103 | [What should you use to ensure that the members of a Microsoft Entra ID group use multi-factor authentication (MFA) when they sign in?](#what-should-you-use-to-ensure-that-the-members-of-a-microsoft-entra-id-group-use-multi-factor-authentication-mfa-when-they-sign-in) |
| 104 | [Microsoft Defender for Cloud can detect vulnerabilities and threats for Azure Storage.](#microsoft-defender-for-cloud-can-detect-vulnerabilities-and-threats-for-azure-storage) |
| 105 | [Microsoft Entra Conditional Access policies can enforce authentication from approved client applications.](#microsoft-entra-conditional-access-policies-can-enforce-authentication-from-approved-client-applications) |
| 106 | [[...] provides benchmark recommendations and guidance for protecting Azure services.](#-provides-benchmark-recommendations-and-guidance-for-protecting-azure-services) |
| 107 | [Which two Azure resources can a network security group (NSG) be associated with?](#which-two-azure-resources-can-a-network-security-group-nsg-be-associated-with) |
| 108 | [Microsoft Entra Connect can be used to implement hybrid identity.](#microsoft-entra-connect-can-be-used-to-implement-hybrid-identity) |
| 109 | [Hybrid identity requires the implementation of two Microsoft 365 tenants.](#hybrid-identity-requires-the-implementation-of-two-microsoft-365-tenants) |
| 110 | [Hybrid identity refers to the synchronization of Active Directory Domain Services (AD DS) and Microsoft Entra ID.](#hybrid-identity-refers-to-the-synchronization-of-active-directory-domain-services-ad-ds-and-microsoft-entra-id) |
| 111 | [Match the types of compliance score actions to the appropriate tasks. [...] Use encryption to protect data at rest.](#match-the-types-of-compliance-score-actions-to-the-appropriate-tasks--use-encryption-to-protect-data-at-rest) |
| 112 | [Match the types of compliance score actions to the appropriate tasks. [...] Actively monitor systems to identify irregularities that might represent risks.](#match-the-types-of-compliance-score-actions-to-the-appropriate-tasks--actively-monitor-systems-to-identify-irregularities-that-might-represent-risks) |
| 113 | [You can use the insider risk management solution to detect phishing scams.](#you-can-use-the-insider-risk-management-solution-to-detect-phishing-scams) |
| 114 | [To which type of resource can Azure Bastion provide secure access?](#to-which-type-of-resource-can-azure-bastion-provide-secure-access) |
| 115 | [Conditional access policies always enforce the use of multi-factor authentication (MFA).](#conditional-access-policies-always-enforce-the-use-of-multi-factor-authentication-mfa) |
| 116 | [What can you protect by using the information protection solution in the Microsoft 365 Compliance Center?](#what-can-you-protect-by-using-the-information-protection-solution-in-the-microsoft-365-compliance-center) |
| 117 | [Microsoft Sentinel [...] use Azure Logic Apps to automate and orchestrate responses to alerts.](#microsoft-sentinel--use-azure-logic-apps-to-automate-and-orchestrate-responses-to-alerts) |
| 118 | [What are three uses of Microsoft Cloud App Security?](#what-are-three-uses-of-microsoft-cloud-app-security) |
| 119 | [Microsoft Entra ID is deployed to an on premises environment.](#microsoft-entra-id-is-deployed-to-an-on-premises-environment) |
| 120 | [Microsoft Entra ID is provided as part of a Microsoft 365 subscription.](#microsoft-entra-id-is-provided-as-part-of-a-microsoft-365-subscription) |
| 121 | [Microsoft Entra ID is an identity and access management service.](#microsoft-entra-id-is-an-identity-and-access-management-service) |
| 122 | [Which service should you use to view your Azure secure score?](#which-service-should-you-use-to-view-your-azure-secure-score) |
| 123 | [Which two types of resources can be protected by using Azure Firewall?](#which-two-types-of-resources-can-be-protected-by-using-azure-firewall) |
| 124 | [What can you use to provide threat detection for Azure SQL Managed Instance?](#what-can-you-use-to-provide-threat-detection-for-azure-sql-managed-instance) |
| 125 | [[...] can use conditional access policies to control sessions in real time.](#-can-use-conditional-access-policies-to-control-sessions-in-real-time) |
| 126 | [Compliance Manager can be directly accessed from the [...].](#compliance-manager-can-be-directly-accessed-from-the-) |
| 127 | [Compliance Manager can be directly accessed from the [...].](#compliance-manager-can-be-directly-accessed-from-the--1) |
| 128 | [In a Core eDiscovery workflow, what should you do before you can search for content?](#in-a-core-ediscovery-workflow-what-should-you-do-before-you-can-search-for-content) |
| 129 | [Microsoft Secure Score in the Microsoft 365 security center can provide o recommendations for Microsoft Cloud App Security.](#microsoft-secure-score-in-the-microsoft-365-security-center-can-provide-o-recommendations-for-microsoft-cloud-app-security) |
| 130 | [From the Microsoft 365 security center, you can view how your Microsoft Secure Score compares to the score of organizations like yours.](#from-the-microsoft-365-security-center-you-can-view-how-your-microsoft-secure-score-compares-to-the-score-of-organizations-like-yours) |
| 131 | [Microsoft Secure Score in the Microsoft 365 security center gives you points if you address the improvement action by using a third-party application or software.](#microsoft-secure-score-in-the-microsoft-365-security-center-gives-you-points-if-you-address-the-improvement-action-by-using-a-third-party-application-or-software) |
| 132 | [Which Microsoft 365 feature can you use to restrict users from sending email messages that contain lists of customers and their associated credit card numbers?](#which-microsoft-365-feature-can-you-use-to-restrict-users-from-sending-email-messages-that-contain-lists-of-customers-and-their-associated-credit-card-numbers) |
| 133 | [Which Microsoft Entra ID feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?](#which-microsoft-entra-id-feature-can-you-use-to-evaluate-group-membership-and-automatically-remove-users-that-no-longer-require-membership-in-a-group) |
| 134 | [Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?](#which-microsoft-portal-provides-information-about-how-microsoft-cloud-services-comply-with-regulatory-standard-such-as-international-organization-for-standardization-iso) |
| 135 | [What can you use to provision Azure resources across multiple subscriptions in a consistent manner?](#what-can-you-use-to-provision-azure-resources-across-multiple-subscriptions-in-a-consistent-manner) |
| 136 | [When you enable security defaults in Microsoft Entra ID, [...] will be enabled for all Microsoft Entra ID users.](#when-you-enable-security-defaults-in-microsoft-entra-id--will-be-enabled-for-all-microsoft-entra-id-users) |
| 137 | [[...] provides best practices from Microsoft employees, partners, and customers, including tools and guidance to assist in an Azure deployment.](#-provides-best-practices-from-microsoft-employees-partners-and-customers-including-tools-and-guidance-to-assist-in-an-azure-deployment) |
| 138 | [You can manage Microsoft Intune by using the](#you-can-manage-microsoft-intune-by-using-the) |
| 139 | [Verify explicitly is one of the guiding principles of Zero Trust.](#verify-explicitly-is-one-of-the-guiding-principles-of-zero-trust) |
| 140 | [Assume breach is one of the guiding principles of Zero Trust.](#assume-breach-is-one-of-the-guiding-principles-of-zero-trust) |
| 141 | [The Zero Trust security model assumes that a firewall secures the internal network from external threats.](#the-zero-trust-security-model-assumes-that-a-firewall-secures-the-internal-network-from-external-threats) |
| 142 | [[...] is the process of identifying whether a signed-in user can access a specific resource.](#-is-the-process-of-identifying-whether-a-signed-in-user-can-access-a-specific-resource) |
| 143 | [Which three statements accurately describe the guiding principles of Zero Trust?](#which-three-statements-accurately-describe-the-guiding-principles-of-zero-trust) |
| 144 | [A higher Microsoft Secure Score means a lower identified risk level in the Microsoft 365 tenant.](#a-higher-microsoft-secure-score-means-a-lower-identified-risk-level-in-the-microsoft-365-tenant) |
| 145 | [Microsoft Secure Score measures progress in completing actions based on controls that include key regulations and standards for data protection and governance.](#microsoft-secure-score-measures-progress-in-completing-actions-based-on-controls-that-include-key-regulations-and-standards-for-data-protection-and-governance) |
| 146 | [In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Microsoft Entra ID?](#in-a-hybrid-identity-model-what-can-you-use-to-sync-identities-between-active-directory-domain-services-ad-ds-and-microsoft-entra-id) |
| 147 | [With Windows Hello for Business, a user's biometric data used for authentication](#with-windows-hello-for-business-a-users-biometric-data-used-for-authentication) |
| 148 | [Microsoft Defender for Identity can identify advanced threats from [...] signals.](#microsoft-defender-for-identity-can-identify-advanced-threats-from--signals) |
| 149 | [Which three authentication methods does Windows Hello for Business support?](#which-three-authentication-methods-does-windows-hello-for-business-support) |
| 150 | [You have an Azure subscription. You need to implement approval-based, time-bound role activation. What should you use?](#you-have-an-azure-subscription-you-need-to-implement-approval-based-time-bound-role-activation-what-should-you-use) |
| 151 | [Global administrators are exempt from conditional access policies.](#global-administrators-are-exempt-from-conditional-access-policies) |
| 152 | [A conditional access policy can add users to Microsoft Entra ID roles.](#a-conditional-access-policy-can-add-users-to-microsoft-entra-id-roles) |
| 153 | [Conditional access policies can force the use of multi-factor authentication (MFA) to access cloud apps.](#conditional-access-policies-can-force-the-use-of-multi-factor-authentication-mfa-to-access-cloud-apps) |
| 154 | [When security defaults are enabled for an Microsoft Entra ID tenant, which two requirements are enforced?](#when-security-defaults-are-enabled-for-an-microsoft-entra-id-tenant-which-two-requirements-are-enforced) |
| 155 | [Which type of identity is created when you register an application with Microsoft Entra ID?](#which-type-of-identity-is-created-when-you-register-an-application-with-microsoft-entra-id) |
| 156 | [Which three tasks can be performed by using Microsoft Entra ID Identity Protection?](#which-three-tasks-can-be-performed-by-using-microsoft-entra-id-identity-protection) |
| 157 | [When using multi-factor authentication (MFA), a password is considered something you [...].](#when-using-multi-factor-authentication-mfa-a-password-is-considered-something-you-) |
| 158 | [Windows Hello for Business can use the Microsoft Authenticator app as an authentication method.](#windows-hello-for-business-can-use-the-microsoft-authenticator-app-as-an-authentication-method) |
| 159 | [Windows Hello for Business can use a PIN code as an authentication method.](#windows-hello-for-business-can-use-a-pin-code-as-an-authentication-method) |
| 160 | [Windows Hello for Business authentication information syncs across all the devices registered by a user.](#windows-hello-for-business-authentication-information-syncs-across-all-the-devices-registered-by-a-user) |
| 161 | [An Azure resource can use a system-assigned [...] to access Azure services.](#an-azure-resource-can-use-a-system-assigned--to-access-azure-services) |
| 162 | [You can use [...] in the Microsoft 365 security center to view an aggregation of alerts that relate to the same attack.](#you-can-use--in-the-microsoft-365-security-center-to-view-an-aggregation-of-alerts-that-relate-to-the-same-attack) |
| 163 | [You can create one Azure Bastion per virtual network.](#you-can-create-one-azure-bastion-per-virtual-network) |
| 164 | [Azure Bastion provides secure user connections by using RDP.](#azure-bastion-provides-secure-user-connections-by-using-rdp) |
| 165 | [In Microsoft Sentinel, you can automate common tasks by using [...]](#in-microsoft-sentinel-you-can-automate-common-tasks-by-using-) |
| 166 | [Which Microsoft Entra ID feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?](#which-microsoft-entra-id-feature-can-you-use-to-restrict-microsoft-intune-managed-devices-from-accessing-corporate-resources) |
| 167 | [What should you use in the Microsoft 365 Defender portal to view security trends and track the protection status of identities?](#what-should-you-use-in-the-microsoft-365-defender-portal-to-view-security-trends-and-track-the-protection-status-of-identities) |
| 168 | [You have a Microsoft 365 E3 subscription. You plan to audit user activity by using the unified audit log and Basic Audit. For how long will the audit records be retained?](#you-have-a-microsoft-365-e3-subscription-you-plan-to-audit-user-activity-by-using-the-unified-audit-log-and-basic-audit-for-how-long-will-the-audit-records-be-retained) |
| 169 | [In the Microsoft 365 Defender portal, an incident is a collection of correlated [...].](#in-the-microsoft-365-defender-portal-an-incident-is-a-collection-of-correlated-) |
| 170 | [You need to connect to an Azure virtual machine by using Azure Bastion. What should you use?](#you-need-to-connect-to-an-azure-virtual-machine-by-using-azure-bastion-what-should-you-use) |
| 171 | [Which service includes the Attack simulation training feature?](#which-service-includes-the-attack-simulation-training-feature) |
| 172 | [Which type of alert can you manage from the Microsoft 365 Defender portal?](#which-type-of-alert-can-you-manage-from-the-microsoft-365-defender-portal) |
| 173 | [Microsoft Sentinel data connectors support only Microsoft services.](#microsoft-sentinel-data-connectors-support-only-microsoft-services) |
| 174 | [You can use Azure Monitor workbooks to monitor data collected by Microsoft Sentinel.](#you-can-use-azure-monitor-workbooks-to-monitor-data-collected-by-microsoft-sentinel) |
| 175 | [Hunting provides you with the ability to identify security threats before an alert is triggered.](#hunting-provides-you-with-the-ability-to-identify-security-threats-before-an-alert-is-triggered) |
| 176 | [What is a use case for implementing information barrier policies in Microsoft 365?](#what-is-a-use-case-for-implementing-information-barrier-policies-in-microsoft-365) |
| 177 | [What can you use to deploy Azure resources across multiple subscriptions in a consistent manner?](#what-can-you-use-to-deploy-azure-resources-across-multiple-subscriptions-in-a-consistent-manner) |
| 178 | [Azure Defender provides security alerts and advanced threat protection for virtual machines, SQL databases, containers, web applications, your network, your storage, and more](#azure-defender-provides-security-alerts-and-advanced-threat-protection-for-virtual-machines-sql-databases-containers-web-applications-your-network-your-storage-and-more) |
| 179 | [Cloud security posture management (CSPM) is available for free to all Azure users.](#cloud-security-posture-management-cspm-is-available-for-free-to-all-azure-users) |
| 180 | [Microsoft Defender for Cloud is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud – whether they’re in Azure or not – as well as on premises.](#microsoft-defender-for-cloud-is-a-unified-infrastructure-security-management-system-that-strengthens-the-security-posture-of-your-data-centers-and-provides-advanced-threat-protection-across-your-hybrid-workloads-in-the-cloud--whether-theyre-in-azure-or-not--as-well-as-on-premises) |
| 181 | [Microsoft Entra ID is a cloud-based user identity and authentication service.](#microsoft-entra-id-is-a-cloud-based-user-identity-and-authentication-service) |
| 182 | [Microsoft 365 uses Microsoft Entra ID. Microsoft Entra ID is included with your Microsoft 365 subscription.](#microsoft-365-uses-microsoft-entra-id-microsoft-entra-id-is-included-with-your-microsoft-365-subscription) |
| 183 | [Azure Bastion provides a secure connection to an Azure virtual machine by using the Azure portal.](#azure-bastion-provides-a-secure-connection-to-an-azure-virtual-machine-by-using-the-azure-portal) |
| 184 | [Azure Information Protection can automatically detect and label sensitive information.](#azure-information-protection-can-automatically-detect-and-label-sensitive-information) |
| 185 | [Microsoft Defender for Cloud Apps can monitor and control cloud app usage through its Cloud Discovery feature.](#microsoft-defender-for-cloud-apps-can-monitor-and-control-cloud-app-usage-through-its-cloud-discovery-feature) |
| 186 | [Microsoft Purview Data Loss Prevention policies can be applied to Microsoft Teams chat messages.](#microsoft-purview-data-loss-prevention-policies-can-be-applied-to-microsoft-teams-chat-messages) |
| 187 | [Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?](#which-score-measures-an-organizations-progress-in-completing-actions-that-help-reduce-risks-associated-to-data-protection-and-regulatory-standards) |
| 188 | [You are evaluating the compliance score in Compliance Manager. Match the compliance score action subcategories to the appropriate actions. Encrypt data at rest.](#you-are-evaluating-the-compliance-score-in-compliance-manager-match-the-compliance-score-action-subcategories-to-the-appropriate-actions--encrypt-data-at-rest) |
| 189 | [You are evaluating the compliance score in Compliance Manager. Match the compliance score action subcategories to the appropriate actions. Perform a system access audit.](#you-are-evaluating-the-compliance-score-in-compliance-manager-match-the-compliance-score-action-subcategories-to-the-appropriate-actions--perform-a-system-access-audit) |
| 190 | [You are evaluating the compliance score in Compliance Manager. Match the compliance score action subcategories to the appropriate actions. Make configuration changes in response to a security incident.](#you-are-evaluating-the-compliance-score-in-compliance-manager-match-the-compliance-score-action-subcategories-to-the-appropriate-actions--make-configuration-changes-in-response-to-a-security-incident) |
| 191 | [Conditional access policies can be applied to global administrators.](#conditional-access-policies-can-be-applied-to-global-administrators) |
| 192 | [Conditional access policies are evaluated before a user is authenticated.](#conditional-access-policies-are-evaluated-before-a-user-is-authenticated) |
| 193 | [Conditional access policies can use a device platform, such as Android or iOS, as a signal.](#conditional-access-policies-can-use-a-device-platform-such-as-android-or-ios-as-a-signal) |
| 194 | [Which two cards are available in the Microsoft 365 Defender portal?](#which-two-cards-are-available-in-the-microsoft-365-defender-portal) |
| 195 | [Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?](#microsoft-365-endpoint-data-loss-prevention-endpoint-dlp-can-be-used-on-which-operating-systems) |
| 196 | [Which compliance feature should you use to identify documents that are employee resumes?](#which-compliance-feature-should-you-use-to-identify-documents-that-are-employee-resumes) |
| 197 | [What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?](#what-are-customers-responsible-for-when-evaluating-security-in-a-software-as-a-service-saas-cloud-services-model) |
| 198 | [You need to create a data loss prevention (DLP) policy. What should you use?](#you-need-to-create-a-data-loss-prevention-dlp-policy-what-should-you-use) |
| 199 | [What is an assessment in Compliance Manager?](#what-is-an-assessment-in-compliance-manager) |
| 200 | [You need to keep a copy of all files in a Microsoft SharePoint site for one year, even if users delete the files from the site. What should you apply to the site?](#you-need-to-keep-a-copy-of-all-files-in-a-microsoft-sharepoint-site-for-one-year-even-if-users-delete-the-files-from-the-site-what-should-you-apply-to-the-site) |
| 201 | [What can you use to view the Microsoft Secure Score for Devices?](#what-can-you-use-to-view-the-microsoft-secure-score-for-devices) |
| 202 | [Match the Microsoft 365 insider risk management workflow step to the appropriate task. [...] Review and filter alerts.](#match-the-microsoft-365-insider-risk-management-workflow-step-to-the-appropriate-task--review-and-filter-alerts) |
| 203 | [Match the Microsoft 365 insider risk management workflow step to the appropriate task. [...] Create cases in the Case dashboard.](#match-the-microsoft-365-insider-risk-management-workflow-step-to-the-appropriate-task--create-cases-in-the-case-dashboard) |
| 204 | [Match the Microsoft 365 insider risk management workflow step to the appropriate task. [...] Send a reminder of corporate policies to users.](#match-the-microsoft-365-insider-risk-management-workflow-step-to-the-appropriate-task--send-a-reminder-of-corporate-policies-to-users) |
| 205 | [Users can apply sensitivity labels manually.](#users-can-apply-sensitivity-labels-manually) |
| 206 | [Multiple sensitivity labels can be applied to the same file.](#multiple-sensitivity-labels-can-be-applied-to-the-same-file) |
| 207 | [A sensitivity label can apply a watermark to a Microsoft Word document.](#a-sensitivity-label-can-apply-a-watermark-to-a-microsoft-word-document) |
| 208 | [You can use Advanced Audit in Micrdsoft 365 to view billing details.](#you-can-use-advanced-audit-in-micrdsoft-365-to-view-billing-details) |
| 209 | [You can use Advanced Auditin Microsoft 365 to view the contents of an email message.](#you-can-use-advanced-auditin-microsoft-365-to-view-the-contents-of-an-email-message) |
| 210 | [You can use Advanced Auditin Microsoft 365 to view when a user sees the search bar in Outlook on the web to search for message in a mailbox.](#you-can-use-advanced-auditin-microsoft-365-to-view-when-a-user-sees-the-search-bar-in-outlook-on-the-web-to-search-for-message-in-a-mailbox) |
| 211 | [What can you specify in Microsoft 365 sensitivity labels?](#what-can-you-specify-in-microsoft-365-sensitivity-labels) |

### Conditional access policies always enforce the user of multi-factor authentication (MFA).

- [ ] Yes.
- [x] No.