Microsoft Certified:Security, Compliance, and Identity Fundamentals
Domain 3Objective 1
Describe Core Infrastructure Security Services in Azure SC-900 Practice Questions (Page 2)
Part of the Describe the capabilities of Microsoft security solutions domain, which accounts for 35–40% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
12concepts
35–40%of the exam
Questions 6–10
- 6
What is a key difference between the Basic and Standard tiers of Azure DDoS Protection?
Select an answer first - 7
A development team stores database connection strings and API keys in application configuration files. Management wants to centralize secret management and automatically rotate secrets without changing application code. Which Azure service should they use?
Select an answer first - 8
What is the role of a Network Security Group (NSG) in Azure?
Select an answer first - 9
A company runs a public-facing web application on Azure virtual machines in a single virtual network. During a recent marketing event, the application became unavailable due to a large-scale distributed denial-of-service (DDoS) attack that overwhelmed the public IP address. The security team wants to reduce the risk of future DDoS attacks without redesigning the application. What should they implement?
Select an answer first - 10
Which Azure service can use Azure Key Vault to store application secrets, such as connection strings?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.