SC-900 Practice Tests (MS Security, Compliance, & Identity)

<<The course is updated as per the skills measured on Jan 23, 2024>>

WHY YOU SHOULD BUY MY SC900 COURSE?

a. 180+ deeply researched questions for SC 900. I create no more than three questions/day to maintain high-quality.

b. I simulate the actual SC900 Microsoft exam experience for you in the form of drag-and-drop questions, dropdown questions, multiple yes/no questions with a radio button, repeated scenario questions, etc.

c. Clear and lucid explanations for both correct & incorrect answers.

d. Supporting visuals created by me to drive better understanding (Not taken from Microsoft documentation)

e. Explanations run parallel to the product. Every detailed explanation has corroborating evidence with the Microsoft product (like Azure or Microsoft 365 security center, etc.) shown in the form of screenshots and clear callouts.

f. Explanations are NOT directly copied from Microsoft documentation. I have rephrased all the reasoning in a simple and easy-to-understand language.

g. No step-motherly treatment of incorrect answer choices. I took enough effort to explain the rationale for each answer choice (whether correct/wrong), including the reference links.

h. Don't worry about inaccurate sentence framing/wrong grammar/incorrect punctuations. I use Grammarly to review every question.

i. Almost non-existent repetition of questions only to increase the question count.

j. For some questions, you may have to search for answers in the given reference link. A Quick Preview feature shows a screenshot of the relevant paragraph to which the correct answer refers.

k. I love to help you succeed. If you need to discuss, we have an Active Q&A dashboard and expect fast responses (save for my sleeping hours, which are generally less).

l. As soon as there is an update from Microsoft, I try to update my course, keeping it always fresh.

m. The question bank is peer-reviewed every three months to ensure exam relevance.

n. Still not convinced? Check out sample questions on my YouTube channel/website before you decide to buy.

Feel free to connect with me through my website for any issues/questions.

The questions are collected from a variety of domains and sub-domains with extra care taken to equal attention to each exam area. Also, the questions are on different levels.

For example:

1. Remember-level questions (Approximately 65%) test whether you can recall memorized facts, & basic concepts.

2. Understand-level questions (Approximately 25%) validate whether you can explain the meanings of terms, & concepts.

3. Application-level questions (Only a few for the fundamentals exam) test whether you can perform tasks using facts, concepts, & techniques, and,

4. Analysis-level questions (Almost none) validate whether you can diagnose situations & solve problems with concepts & techniques.

A mixture of questions at different levels reinforces your knowledge and prepares you to ace the exam.

These are the exam domains covered in the SC-900 practice test:

Describe the concepts of security, compliance, and identity (10–15%)

Describe security and compliance concepts

• Describe the shared responsibility model

• Describe defense-in-depth

• Describe the Zero Trust model

• Describe encryption and hashing

• Describe Governance, Risk, and Compliance (GRC) concepts

  
  

Define identity concepts

• Define identity as the primary security perimeter

• Define authentication

• Define authorization

• Describe identity providers

• Describe the concept of directory services and Active Directory

• Describe the concept of federation

  
  

Describe the capabilities of Microsoft Entra (25–30%)

Describe function and identity types of Microsoft Entra ID

• Describe Microsoft Entra ID

• Describe types of identities

• Describe hybrid identity

  
  

Describe authentication capabilities of Microsoft Entra ID

• Describe the authentication methods

• Describe multi-factor authentication (MFA)

• Describe password protection and management capabilities

  
  

Describe access management capabilities of Microsoft Entra ID

• Describe Conditional Access

• Describe Microsoft Entra roles and role-based access control (RBAC)

  
  

Describe identity protection and governance capabilities of Microsoft Entra

• Describe Microsoft Entra ID Governance

• Describe access reviews

• Describe the capabilities of Microsoft Entra Privileged Identity Management

• Describe Entra ID Protection

• Describe Microsoft Entra Permissions Management

  
  

Describe the capabilities of Microsoft security solutions (35–40%)

Describe core infrastructure security services in Azure

• Describe Azure distributed denial-of-service (DDoS) Protection

• Describe Azure Firewall

• Describe Web Application Firewall (WAF)

• Describe network segmentation with Azure virtual networks

• Describe network security groups (NSGs)

• Describe Azure Bastion

• Describe Azure Key Vault

  
  

Describe security management capabilities of Azure

• Describe Microsoft Defender for Cloud

• Describe Cloud Security Posture Management (CSPM)

• Describe how security policies and initiatives improve the cloud security posture

• Describe enhanced security features provided by cloud workload protection

  
  

Describe capabilities of Microsoft Sentinel

• Define the concepts of security information and event management (SIEM) and security orchestration automated response (SOAR)

• Describe threat detection and mitigation capabilities in Microsoft Sentinel

  
  

Describe threat protection with Microsoft 365 Defender

• Describe Microsoft 365 Defender services

• Describe Microsoft Defender for Office 365

• Describe Microsoft Defender for Endpoint

• Describe Microsoft Defender for Cloud Apps

• Describe Microsoft Defender for Identity

• Describe Microsoft Defender Vulnerability Management

• Describe Microsoft Defender Threat Intelligence (Defender TI)

• Describe the Microsoft 365 Defender portal

  
  

Describe the capabilities of Microsoft compliance solutions (20–25%)

Describe Microsoft Service Trust Portal and privacy principles

• Describe the Service Trust Portal offerings

• Describe the privacy principles of Microsoft

• Describe Microsoft Priva

  
  

Describe compliance management capabilities of Microsoft Purview

• Describe the Microsoft Purview compliance portal

• Describe Compliance Manager

• Describe the uses and benefits of compliance score

  
  

Describe information protection, data lifecycle management, and data governance capabilities of Microsoft Purview

• Describe the data classification capabilities

• Describe the benefits of Content explorer and Activity explorer

• Describe sensitivity labels and sensitivity label policies

• Describe data loss prevention (DLP)

• Describe records management

• Describe retention policies, retention labels, and retention label policies

• Describe unified data governance solutions in Microsoft Purview

  
  

Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview

• Describe insider risk management

• Describe eDiscovery solutions in Microsoft Purview

• Describe audit solutions in Microsoft Purview

Course updates:

v2.1 March 2024

• Updated all references of Azure AD to Microsoft Entra ID

  
  

v2.0 February 2023 (Major Update)

• Deleted 19 outdated questions

• Added 8 questions (ongoing)

• Updated nearly 140 questions

• Updated broken Reference links

  
  

v1.7 July 2022

• Updated 15 questions that were outdated

• Updated Microsoft product terminology per the latest changes

• Updated broken reference links

v1.6 - March 2022

• Updated 13 questions per Microsoft product terminology

v1.6 - January 2022

• Updated Microsoft product terminology as per the January 28th, 2022 update

v1.5 - August 2021

• Updated 3 questions

v1.4 - July 2021

• Updated 2 questions

v1.3 - June 2021

• Added 4 questions

• Updated 27 questions

v1.2 - May 2021

• Added 28 questions

• Updated 17 questions

• Removed 3 questions

v1.1 - April 2021

• Added 10 questions