Free Preparation Discussions
MENU
Microsoft SC-900 Exam Questions
Free Microsoft SC-900 Exam Actual Questions
Note: Premium Questions for SC-900 were last updated On Aug. 03, 2026 (see below)
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple subnets and virtual machines.
You deploy an Azure Firewall named FW1 to VNet1.
You need to ensure that FW1 can analyze and filter all the internet traffic to and from VNet1. The solution must minimize costs.
What should you do?
Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription?
In Microsoft Defender for Cloud, the metric that represents the overall security health of your Azure subscription is secure score. Microsoft's documentation explains: ''Secure score provides an aggregated view of your security posture across your subscriptions and resources. It's based on security recommendations; addressing those recommendations improves your score.'' Defender for Cloud calculates secure score by assessing controls and recommendations mapped to standards, then weighting them by risk and importance: ''Each recommendation contributes to the secure score. Completing remediation steps increases the score and reduces risk.'' This single percentage view lets security teams quickly gauge how well current configurations and protections align with Microsoft's security best practices and regulatory mappings. Other elements surfaced in Defender for Cloud---like ''resource health,'' ''status of recommendations,'' or ''completed controls''---are components and statuses that feed into or relate to the scoring model, but the overall subscription security health indicator presented and tracked over time is secure score.
What is a use case for implementing information barrier policies in Microsoft 365?
Microsoft 365 Information Barriers are compliance policies used ''to prevent certain segments of users from communicating or collaborating with each other.'' In Microsoft's guidance, IB policies are designed for scenarios like insider trading restrictions, M&A deal rooms, or research--sales separation, where it's necessary to block chats, calls, and collaboration between defined user segments. The documentation explains that when IB policies are in place, ''users in the blocked segments cannot search, discover, or communicate with each other in Microsoft Teams,'' and IB v2 extends these controls to additional collaboration workloads such as SharePoint and OneDrive. By contrast, email restrictions in Exchange Online are addressed through mail flow rules or other Exchange features, not information barriers, and restricting unauthenticated access or external sharing is handled by identity access controls and sharing settings, not IB. Therefore, the specific use case is restricting Microsoft Teams chats (and related collaboration) between certain groups within an organization.
What types of files can Microsoft Purview sensitive information type classifiers be used to classify?
What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?
In Microsoft Defender for Endpoint, attack surface reduction (ASR) is described as the first defensive layer in the protection stack, and Network protection is a core ASR capability. Microsoft's documentation states that ''Attack surface reduction provides the first line of defense in the stack.'' It further explains that these capabilities are designed to reduce opportunities for compromise before malware can run or persistence can be established. Within ASR, Microsoft specifically defines Network protection as a feature that ''helps reduce the attack surface of your devices from Internet-based events.'' Microsoft also clarifies how it works: ''It prevents employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet.''
Because the question asks for the feature in Defender for Endpoint that delivers the first line of defense by reducing the attack surface, the applicable ASR capability is Network protection. It proactively blocks access to known malicious IPs, domains, and URLs, shrinking the exploitable surface area and thereby reducing risk before an attack can execute. By contrast, automated investigation and automated remediation act after detections to contain and fix issues, and advanced hunting is an analyst-driven, query-based detection and investigation tool---not an attack-surface--reduction control. Hence, Network protection is the correct choice.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Michelle Brown
2 days agoRobert Gonzalez
18 days agoChristopher Harris
1 month agoAndrew Howard
2 months agoDavid Hill
2 months agoAshley Martin
3 months agoBetty Baker
3 months agoEmily Green
4 months agoKimberly Rodriguez
3 months agoDorothy Martinez
3 months agoKevin Nguyen
3 months agoLinda Mitchell
3 months agoDonald Nguyen
3 months agoJustine
4 months agoElza
4 months agoTamie
5 months agoLennie
5 months agoKenda
5 months agoAllene
5 months agoMarcelle
6 months agoAdolph
6 months agoLou
6 months agoStephaine
6 months agoCandida
7 months agoGail
7 months agoHarley
7 months agoTemeka
7 months agoLashanda
8 months agoLacresha
8 months agoDante
8 months agoJanet
8 months agoTwana
9 months agoVallie
9 months agoLouisa
9 months agoWilford
9 months agoMauricio
10 months agoYoulanda
10 months agoBrett
10 months agoEttie
10 months agoJeannine
11 months agoGraciela
11 months agoMarsha
11 months agoAlpha
11 months agoAudria
1 year agoChanel
1 year agoAnjelica
1 year agoWava
1 year agoTwanna
1 year agoTawny
2 years agoRosalind
2 years agoGeraldo
2 years agoTelma
2 years agoBlondell
2 years agoRaymon
2 years agoGerald
2 years agoTrinidad
2 years agoMartina
2 years agoFletcher
2 years agoEthan
2 years agoMyrtie
2 years agoSusana
2 years agoCecil
2 years agoEarnestine
2 years agoFelicia
2 years agoRoslyn
2 years agoShawn
2 years agoRefugia
2 years agoHaley
2 years agonormaa
2 years agothomas
2 years agokellisha
2 years agoperrix
2 years agonewtons
2 years ago