SC-900 Describe the concepts of security, compliance, and identity Practice Test 9 — 15 Questions

Question 1

An organization implements a security policy where users must authenticate using a smart card and PIN. After successful authentication, the system checks whether the user's device is managed by the organization and complies with security baselines. If the device is compliant, the user is granted access to the corporate network. If not, access is denied. This approach most directly reflects which security model?

Accepted Answer

Zero Trust. The scenario explicitly enforces 'never trust, always verify' by requiring authentication (smart card + PIN) and then validating device compliance before granting network access. This directly aligns with the Zero Trust model's core principle of conditional access based on identity and device health, rather than implicit trust from network location.

Answer

Defense in depth

Answer

CIA triad

Answer

Least privilege

Question 2

A company stores critical financial reports in a SharePoint Online library. To ensure that the reports have not been tampered with, the security team compares a calculated hash of each file against a stored baseline. This verification process primarily protects which security goal?

Accepted Answer

Integrity. The verification process uses hash comparison to detect unauthorized changes to files, which directly protects data integrity. Integrity ensures that data has not been altered or tampered with during storage or transit. In SharePoint Online, hashing (e.g., SHA-256) creates a unique fingerprint; if the calculated hash matches the stored baseline, the file is unchanged.

Answer

Confidentiality

Answer

Availability

Answer

Non-repudiation

Question 3

A financial institution uses digital signatures to sign all transaction records. This ensures that the records have not been altered after signing. Which security goal does this primarily protect?

Accepted Answer

Integrity. Digital signatures use asymmetric cryptography (e.g., RSA or ECDSA) to create a hash of the transaction record, which is then encrypted with the signer's private key. Any alteration to the record after signing would cause the hash verification to fail, directly protecting the integrity of the data. While digital signatures also support non-repudiation, the question specifically asks which goal is primarily protected by ensuring records have not been altered, which is integrity.

Answer

Confidentiality

Answer

Non-repudiation

Answer

Availability

Question 4

A user logs into a company portal by entering a username and password. After successful login, the system checks if the user is a member of the 'Sales' group and then grants access to the sales dashboard. Which two security concepts are demonstrated in this process? (Choose all that apply.) (Choose two.)

Accepted Answer

Authentication. Authentication is demonstrated because the user proves their identity by providing a username and password, which the system verifies before allowing access. This is the process of validating credentials, typically against a directory service like Azure AD or an on-premises Active Directory, confirming the user is who they claim to be.

Answer

Non-repudiation

Answer

Accounting

Question 5

A company uses a hashing algorithm to verify that a downloaded software file has not been tampered with during transmission. This practice primarily protects which security principle?

Accepted Answer

Integrity. Hashing algorithms, such as SHA-256, produce a fixed-size hash value that acts as a digital fingerprint of the file. By comparing the hash of the downloaded file with the hash provided by the publisher, any change to the file—even a single bit—results in a completely different hash, immediately detecting tampering. This directly protects the integrity of the data by ensuring it has not been altered during transmission.

Answer

Confidentiality

Answer

Availability

Answer

Non-repudiation

Question 6

An organization adopts a security model that requires explicit verification of every access request, uses least privilege principles, and assumes that a breach has already occurred. Which security model does this describe?

Accepted Answer

Zero Trust. Zero Trust is the correct answer because the model explicitly requires verification of every access request, enforces least privilege, and assumes breach. This aligns with the core Zero Trust principles of 'never trust, always verify,' continuous validation, and micro-segmentation, as opposed to traditional perimeter-based models that implicitly trust internal traffic.

Answer

Perimeter-based security

Answer

Defense in depth

Answer

Shared responsibility

Question 7

Arrange the steps to configure Azure AD Privileged Identity Management (PIM) for a role in the correct order.

Question 8

Order the steps to respond to a data breach using Microsoft 365 Defender incident response.

Question 9

Sequence the steps to configure a retention policy in Microsoft Purview compliance portal.

Question 10

Match each Microsoft security feature to its primary purpose.

Question 11

Match each Microsoft 365 compliance feature to its function.

Question 12

Match each Azure security service to its purpose.

Question 13

Your organization is implementing a Zero Trust security model. Which Microsoft Entra ID feature should you use to verify that users and devices meet specific health requirements before granting access to corporate resources?

Accepted Answer

Conditional Access. Option B is correct because Conditional Access policies can enforce device compliance, MFA, and other health checks. Option A is wrong because Privileged Identity Management manages just-in-time admin roles. Option C is wrong because Identity Protection detects risks but doesn't enforce device health. Option D is wrong because Identity Governance manages access reviews and lifecycle.

Answer

Privileged Identity Management (PIM)

Answer

Identity Governance

Answer

Identity Protection

Question 14

Your company uses Microsoft Purview Information Protection to classify sensitive data. A user reports that when they try to share a document containing a credit card number via email, the email is blocked. Which Purview feature is most likely causing this behavior?

Accepted Answer

Data Loss Prevention (DLP) policy. Option A is correct because Data Loss Prevention (DLP) policies can block emails containing sensitive data. Option B is wrong because sensitivity labels apply metadata but don't block actions. Option C is wrong because retention labels manage retention, not blocking. Option D is wrong because audit logs record events but don't enforce blocks.

Answer

Audit log

Answer

Sensitivity label

Answer

Retention label

Question 15

Which Microsoft security solution provides centralized investigation and response across identities, endpoints, email, and cloud apps by correlating alerts from multiple sources?

Accepted Answer

Microsoft Defender XDR. Option C is correct because Microsoft Defender XDR correlates signals across domains. Option A is wrong because Microsoft Sentinel is a SIEM/SOAR, not a built-in XDR. Option B is wrong because Microsoft Intune manages endpoints. Option D is wrong because Microsoft Purview focuses on compliance.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Intune