Microsoft SCI fundamentals assessment 1

Question 1

Which score measures an organization’s progress in completing actions that help reduce risks associated to data protection and regulatory standards?

Answer 1

Compliance score

Question 2

What do you use to provide real-time integration between Azure Sentinel and another security source?

Answer 2

A connector

Question 3

Which Microsoft portal information about how Microsoft cloud services comply with regulatory standards, such as International Organization for Standardization (ISO)?

Answer 3

Microsoft Service Trust Portal

Question 4

In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

Answer 4

The management of the physical hardware

Question 5

What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

Answer 5

Conditional access policies

Question 6

In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?

Answer 6

Azure AD Connect

Question 7

What is the purpose of Azure Active Directory (Azure AD) Password Protection?

Answer 7

to prevent users from using specific words in their passwords

Question 8

Which Azure Active Directory (Azure AD) feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?

Answer 8

Access reviews

Question 9

Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

Answer 9

Azure AD Privileged Identity Management (PIM)

Question 10

What should you use in the Microsoft 365 security center to view security trends and track the protection status of identities

Answer 10

reports

Question 11

What are two capabilities of Microsoft Defender for Endpoint?

Answer 11

-automated investigation and remediation
-attack surface reduction

Question 12

Which Microsoft 365 compliance center feature can you use to identify all the documents on a Microsoft Sharepoint online site that contain a specific key word?

Answer 12

Content search

Question 13

Which two tasks can you implement by using data loss prevention (DLP) policies in Microsoft 365?

Answer 13

-Display policy tips to users who are about to violate your organization’s policies
-Protect documents in Microsoft OneDrive that contains sensitive information

Question 14

Which Microsoft 365 compliance feature can you use to encrypt content automatically based on specific conditions?

Answer 14

sensitivity labels

Question 15

What is a use case for implementing information barrier policies in Microsoft 365?

Answer 15

to restrict Microsoft Exchange Online email between certain groups within an organization

Question 16

What can you use to provision Azure resources across multiple subscriptions in a consistent manner?

Answer 16

Azure Blueprints

Question 17

Yes or No
All Azure Active Directory (Azure AD) license editions include the same features.

Answer 17

no

Question 18

You can manage an Azure Active Directory (Azure AD) tenant by using the Azure portal.

yes or no

Answer 18

yes

Question 19

Select Yes if the following statement is true. Otherwise select No:

You must deploy Azure virtual machines to host an Azure Active Directory (Azure AD) tenant.

Answer 19

no

Question 20

____________ provides best practices from Microsoft employees, partners, and customers, including tools and guidance to assist in an Azure deployment.

Answer 20

The Microsoft Cloud Adoption Framework for Azure

Question 21

______ is used to identify, hold, and export electronic information that might be used in an investigation.

Answer 21

eDiscovery

Question 22

You can manage Microsoft Intune by using the _________________.

Answer 22

Microsoft Endpoint Manager admin center.

Question 23

Federation is used to establish _______ between organizations.

Answer 23

a trust relationship

Question 24

Select Yes if the following statement is true. Otherwise, select No:

Applying system updates increases an organization’s secure score in Azure Security Center.

Answer 24

yes

Question 25

Select Yes if the following statement is true. Otherwise, select No: The secure score in Azure Security Center can evaluate resources across multiple Azure subscriptions.

Answer 25

yes

Question 26

Select Yes if the following statement is true. Otherwise, select No: Enabling multi-factor authentication (MFA) increases an organization’s secure score in Azure Security Center.

Answer 26

yes

Question 27

Select Yes if the following statement is true. Otherwise, select No: Verify explicitly is one of the guiding principles of Zero Trust.

Answer 27

yes

Question 28

Select Yes if the following statement is true. Otherwise, select No: Assume breach is one of the guiding principles of Zero Trust.

Answer 28

yes

Question 29

Select Yes if the following statement is true. Otherwise, select No: The Zero Trust security model assumes that a firewall secures the internal network from external threats.

Answer 29

no

Question 30

Select Yes if the following statement is true. Otherwise, select No: Control is a key privacy principle of Microsoft.

Answer 30

yes

Question 31

Select Yes if the following statement is true. Otherwise, select No: Transparency is a key privacy principle of Microsoft.

Answer 31

yes

Question 32

Yes if the following statement is true. Otherwise, select No: Shared responsibility is a key privacy principle of Microsoft.

Answer 32

no

Question 33

_____ a file makes the data in the file readable and usable to viewers that have the appropriate key.

Answer 33

Encrypting

Question 34

Yes if the following statement is true. Otherwise, select No: You can create custom roles in Azure Active Directory (Azure AD).

Answer 34

yes

Question 35

Yes if the following statement is true. Otherwise, select No: Global administrator is a role in Azure Active Directory (Azure AD).

Answer 35

yes

Question 36

Yes if the following statement is true. Otherwise, select No: An Azure Active Directory (Azure AD) use can be assigned only one role.

Answer 36

no

Question 37

Yes if the following statement is true. Otherwise, select No: Azure Active Directory (Azure AD) is deployed to an on-premises environment

Answer 37

no

Question 38

Yes if the following statement is true. Otherwise, select No: Azure Active Directory (Azure AD) is provided as part of a Microsoft 365 subscription.

Answer 38

yes

Question 39

Yes if the following statement is true. Otherwise, select No: Azure Active Directory (Azure AD) is an identity and access management service.

Answer 39

yes

Question 40

With Windows Hello for Business, a user’s biometric data used for authentication __________.

Answer 40

is stored on a local device only.

Question 41

________ requires additional verification, such as a verification code sent to a mobile phone.

Answer 41

Multi-factor authentication (MFA)

Question 42

Yes if the following statement is true. Otherwise, select No: Conditional access policies can use the device state as a signal.

Answer 42

yes

Question 43

Yes if the following statement is true. Otherwise, select No: Conditional access policies apply before first-factor authentication is complete.

Answer 43

no

Question 44

Yes if the following statement is true. Otherwise, select No: Conditional access policies can trigger multi-factor authentication (MFA) if a user attempts to access a specific application.

Answer 44

yes

Question 45

_____ is a cloud-based solution that leverages on-premises Active Directory signals to identify, detect, and investigate advanced threats.

Answer 45

Microsoft Defender for Identity

Question 46

Microsoft Defender for Identity can identify advanced threats from __________ signals.

Answer 46

on-premises Active Directory Domain Services (AD DS)

Question 47

Azure Active Directory (Azure AD) is ________________ used for authentication and authorization.

Answer 47

an identity provider

Question 48

_________________ can use conditional access policies to control sessions in real time.

Answer 48

Microsoft Cloud App Security

Question 49

Azure DDoS Protection Standard can be used to protect ____________.

Answer 49

virtual networks

Question 50

You can use ______ in the Microsoft 365 security center to identify devices that are affected by an alert.

Answer 50

incidents