Fast2test SC-900問題集PDFで100%合格保証付き [Q19-Q39]

Fast2test SC-900問題集PDFで100%合格保証付き

SC-900ブレーン問題集でリアル試験最新問題2022年05月29日には97問題

Microsoft SC-900 認定試験の出題範囲：

トピック	出題範囲
トピック 1	ゼロトラストの方法論を説明するセキュリティの方法論を説明するセキュリティの概念を説明する
トピック 2	さまざまな認証方法を説明するセルフサービスパスワードリセットを説明する
トピック 3	AzureADの認証機能について説明するパスワードの保護と管理機能について説明する
トピック 4	一般的なID攻撃の定義 MicrosoftIdentityおよびAccessManagementソリューションの機能の説明
トピック 5	Azure ADの基本的なIDサービスとIDタイプを説明するさまざまな外部IDタイプを説明する（ゲストユーザー）
トピック 6	Microsoftコンプライアンスソリューションの機能の説明 Microsoft365のセキュリティ管理機能の説明
トピック 7	セキュリティ、コンプライアンス、およびIDの概念を説明するマイクロソフトのセキュリティとコンプライアンスの原則を説明する
トピック 8	インシデントとインシデント管理機能の説明 Microsoft EndpointManager管理センターを使用したエンドポイントセキュリティの説明
トピック 9	責任分担モデルの説明サービス信頼ポータルの提供内容の説明

質問 19
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

正解:

解説:

Section: Describe the Capabilities of Microsoft Compliance Solutions
Explanation:
Box 1: No
Compliance Manager tracks Microsoft managed controls, customer-managed controls, and shared controls.
Box 2: Yes
Box 3: Yes
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide

質問 20
In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Manage
B. Govern
C. Define Strategy
D. Plan
E. Adopt

正解: C,D

解説:
Reference:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/overview

質問 21
Match the Azure networking service to the appropriate description.
To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.

正解:

解説:

Explanation
Graphical user interface, application Description automatically generated

Box 1: Azure Firewall
Azure Firewall provide Source Network Address Translation and Destination Network Address Translation.
Box 2: Azure Bastion
Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS.
Box 3: Network security group (NSG)
You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network.

質問 22
Which type of identity is created when you register an application with Active Directory (Azure AD)?

A. a service principal
B. a system-assigned managed identity
C. a user account
D. a user-assigned managed identity

正解: A

解説:
When you register an application through the Azure portal, an application object and service principal are automatically created in your home directory or tenant.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal

質問 23
Select the answer that correctly completes the sentence.

正解:

解説:

Reference:
https://docs.microsoft.com/en-us/defender-for-identity/what-is

質問 24
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解:

解説:

質問 25
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

正解:

解説:

Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation:
Box 1: Yes
Box 2: No
Conditional Access policies are enforced after first-factor authentication is completed.
Box 3: Yes
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

質問 26
Select the answer that correctly completes the sentence.

正解:

解説:

質問 27
What is the purpose of Azure Active Directory (Azure AD) Password Protection?

A. to prevent users from using specific words in their passwords
B. to control how often users must change their passwords
C. to encrypt a password by using globally recognized encryption standards
D. to identify devices to which users can sign in without using multi-factor authentication (MFA)

正解: A

解説:
Azure AD Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization.
With Azure AD Password Protection, default global banned password lists are automatically applied to all users in an Azure AD tenant. To support your own business and security needs, you can define entries in a custom banned password list.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises

質問 28
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解:

解説:

質問 29
Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?

A. the Azure Active Directory admin center
B. the Microsoft Endpoint Manager admin center
C. Azure Cost Management + Billing
D. Microsoft Service Trust Portal

正解: D

解説:
Explanation
The Microsoft Service Trust Portal contains details about Microsoft's implementation of controls and processes that protect our cloud services and the customer data therein.

質問 30
Select the answer that correctly completes the sentence.

正解:

解説:

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

質問 31
Which three authentication methods can be used by Azure Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. email verification
B. phone call
C. text message (SMS)
D. security question
E. Microsoft Authenticator app

正解: B,C,E

解説:
Section: Describe the Capabilities of Microsoft Identity and Access Man-agement Solutions Explanation/Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

質問 32
HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:

正解:

解説:

Section: Describe the Concepts of Security, Compliance, and Identity
Explanation:
Federation is a collection of domains that have established trust.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

質問 33
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解:

解説:
Explanation
Graphical user interface, text, application, email Description automatically generated

Box 1: Yes
Azure Defender provides security alerts and advanced threat protection for virtual machines, SQL databases, containers, web applications, your network, your storage, and more Box 2: Yes Cloud security posture management (CSPM) is available for free to all Azure users.
Box 3: Yes
Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud - whether they're in Azure or not - as well as on premises.

質問 34
Select the answer that correctly completes the sentence.

正解:

解説:

Explanation
Text Description automatically generated

質問 35
Select the answer that correctly completes the sentence.

正解:

解説:

質問 36
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解:

解説:
Explanation
Graphical user interface, text, application Description automatically generated

質問 37
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解:

解説:

Explanation
Graphical user interface, text, application Description automatically generated

Box 1: Yes
Box 2: Yes
Box 3: No
The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.

質問 38
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解:

解説:

Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-device-management