2026年更新のMicrosoft Certifiedが有効なSC-900問題集を無料提供しています
最新のFast2test SC-900のPDF問題集をダウンロードしちゃおう:https://jp.fast2test.com/SC-900-premium-file.html(210問題と解答)
質問 # 92
In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?
- A. Azure Ad Privileged Identity Management (PIM)
- B. Azure Sentinel
- C. Azure AD Connect
- D. Active Directory Federation Services (AD FS)
正解:C
解説:
In Microsoft's hybrid identity guidance, Azure AD Connect is the supported tool to bridge on-premises Active Directory Domain Services (AD DS) with Azure Active Directory (Azure AD). Microsoft Learn describes it plainly: "Azure AD Connect is Microsoft's tool for connecting on-premises directories to Azure AD." It "synchronizes user, group, and device objects" so cloud identities stay aligned with on-premises accounts and attributes. Azure AD Connect also supports multiple sign-in methods: "password hash synchronization, pass-through authentication, and federation integration." In other words, you can sync identities and choose how users authenticate to Microsoft Entra ID (Azure AD).
By contrast, Active Directory Federation Services (AD FS) is a federation service used for claims-based authentication; it does not perform directory synchronization. Azure Sentinel (now Microsoft Sentinel) is a cloud-native SIEM/SOAR and is unrelated to identity sync. Privileged Identity Management (PIM) is an identity governance feature for just-in-time privileged access; it does not synchronize identities. Therefore, in a hybrid identity model where the requirement is to sync identities between AD DS and Azure AD, the correct Microsoft-endorsed solution is Azure AD Connect, which "keeps identities in sync between on-premises directories and Azure AD."
質問 # 93
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解:
解説:
Explanation
Graphical user interface, text, application Description automatically generated
Box 1: Yes
You can use sensitivity labels to provide protection settings that include encryption of emails and documents to prevent unauthorized people from accessing this data.
Box 2: Yes
You can use sensitivity labels to mark the content when you use Office apps, by adding watermarks, headers, or footers to documents that have the label applied.
Box 3: Yes
You can use sensitivity labels to mark the content when you use Office apps, by adding headers, or footers to email that have the label applied.
質問 # 94
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解:
解説:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-sensitivity-labels?view=o365-worldwide
質問 # 95
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解:
解説:
Explanation
Graphical user interface, text, application, email Description automatically generated
Box 1: No
Box 2: Yes
Leaked Credentials indicates that the user's valid credentials have been leaked.
Box 3: Yes
Multi-Factor Authentication can be required based on conditions, one of which is user risk.
質問 # 96
Select the answer that correctly completes the sentence.
正解:
解説:
Explanation:
Compliance score
質問 # 97
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解:
解説:
Explanation
Graphical user interface, text, application, email Description automatically generated
質問 # 98
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解:
解説:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
質問 # 99
Select the answer that correctly completes the sentence.
正解:
解説:
質問 # 100
Select the answer that correctly completes the sentence.
正解:
解説:
Explanation:
Multifactor authentication combines two or more independent credentials: what the user knows, such as a password; what the user has, such as a security token; and what the user is, by using biometric verification methods.
質問 # 101
Select the answer that correctly completes the sentence.
正解:
解説:
Explanation:
Compliance score
In Microsoft Purview Compliance Manager, the Compliance score is the metric that measures an organization' s progress in completing improvement actions that help reduce compliance and data-protection risk. Microsoft describes this score as a quantifiable indicator of your compliance posture across regulatory standards and data-protection baselines. Each recommended improvement action in Compliance Manager is assigned points; completing, testing, and attesting to those actions increases your score. Points are weighted by risk, so implementing controls with greater impact on reducing risk contributes more to the overall score. Microsoft also clarifies that the Compliance score is an operational progress indicator, not a certification or a legal determination of compliance, but it enables organizations to track, prioritize, and demonstrate the implementation of controls across frameworks such as GDPR, ISO/IEC 27001, NIST 800-53, and Microsoft Data Protection Baselines.
By contrast, Microsoft Purview compliance portal reports provide reporting and insights (for example, DLP, Insider Risk, Audit) but do not calculate a unified risk-reduction progress metric. The Trust Center is Microsoft's public site for transparency about security, privacy, and compliance commitments, and Trust Documents (auditor reports, certifications, and white papers) supply evidence and reference materials. Neither of these provide an in-product, points-based measure of progress-Compliance score does.
質問 # 102
Select the answer that correctly completes the sentence.
正解:
解説:
質問 # 103
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解:
解説:
質問 # 104
Which Azure Active Directory (Azure AD) feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?
- A. Azure AD Identity Protection
- B. conditional access policies
- C. access reviews
- D. managed identities
正解:C
質問 # 105
For each of the following statement, select Yes if the statement is true Otherwise, select No.
NOTE: Each connect selection a worth one point.
正解:
解説:

質問 # 106
Select the answer that correctly completes the sentence.
正解:
解説:
質問 # 107
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解:
解説:
Explanation
Graphical user interface, text, application, email Description automatically generated
質問 # 108
Select the answer that correctly completes the sentence.
正解:
解説:
Explanation
Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.
質問 # 109
......
実験された試験材料はSC-900:https://jp.fast2test.com/SC-900-premium-file.html
最新SC-900リアル試験問題をフォローせよ!:https://drive.google.com/open?id=1d_Owx3_WIohTVN-phXNLUGbitsizPLxk