Describe Security and Compliance Concepts SC-900 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security architect is implementing a Zero Trust strategy for a hybrid environment. They need to protect data and resources even if an attacker has already breached the network. Which action aligns with the 'assume breach' principle?

   • ARely on the corporate firewall to keep attackers out
   • BGrant all employees full access to all resources to simplify management
   • CSegment the network and apply least-privilege access controls
   • DEncrypt all data in transit only
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which scenario best illustrates the use of encryption to protect data?

   • AAn administrator reviews access logs to detect unauthorized access
   • BA company uses a VPN to secure remote access to its network
   • CA user hashes a password before storing it in a database
   • DA user backs up files to an external drive
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is evaluating its risk posture after a recent phishing attack. They have implemented multi-factor authentication (MFA) for all users and are considering whether to also deploy a Zero Trust architecture. The security team is concerned about user productivity and cost. Which approach best balances risk reduction and operational impact?

   • AImplement conditional access policies that require MFA and device compliance only for high-risk users and sensitive applications.
   • BKeep the current MFA implementation and add a VPN for all remote access.
   • CDeploy a full Zero Trust architecture with micro-segmentation and continuous verification for all resources.
   • DRequire MFA for every request and disable all legacy authentication protocols.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of encryption?

   • ATo compress data to save storage space
   • BTo create a fixed-size hash of the data
   • CTo convert data into a format that is unreadable without a key
   • DTo verify the integrity of data
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is migrating its on-premises virtual machines to Azure IaaS. The security team is updating the incident response plan and needs to clarify which security tasks remain the customer's responsibility after migration. Which task is the customer responsible for?

   • AReplacing failed physical hardware in the host servers
   • BConfiguring the hypervisor's security patches
   • CPatching the guest operating system and applications
   • DSecuring the physical data center that hosts the VMs
   Reveal Solution Discussion Select an answer first