What is a key characteristic of a cryptographic hash function?

It is reversible with the correct key

It produces a fixed-size output regardless of input size

It encrypts data for secure transmission

It compresses data to reduce storage

What does compliance mean in an organizational context?

Adhering to laws, regulations, and standards applicable to the business

Maximizing profits while minimizing costs

Ensuring all employees are satisfied

A company is assessing the risk of a data breach in its Azure environment. They identify that a legacy application has a known vulnerability and that the application is accessible from the internet. Which risk management step should they take first?

Transfer the risk by purchasing cyber insurance.

Ignore the vulnerability because the application is legacy.

Implement compensating controls such as a web application firewall (WAF) and restrict network access.

Accept the risk and document it in the risk register.

A healthcare organization stores patient records in an Azure SQL database. To meet compliance requirements, they must protect the data if the storage media is physically stolen from the data center. Which control should they implement?

Enable Transparent Data Encryption (TDE) for the database

Use Azure role-based access control to limit who can access the database

Configure a network security group to restrict database traffic

Enable auditing on the database to log all access attempts

A development team is storing passwords in a database. They want to ensure that even if the database is compromised, the passwords cannot be easily recovered. Which approach should they use?

Store only salted hashes of the passwords.

Store passwords in plain text but restrict database access.

Use a reversible hash algorithm.

Store passwords encrypted with a symmetric key.

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 1Objective 1

Describe Security and Compliance Concepts SC-900 Practice Questions (Page 4)

Part of the Describe the concepts of security, compliance, and identity domain, which accounts for 10–15% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~2–5 in this domain), expect 1–3 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

10–15%of the exam

Questions 16–20

16foundation · easy
What is a key characteristic of a cryptographic hash function?
Select an answer first
17foundation · easy
What does compliance mean in an organizational context?
Select an answer first
18application · medium
A company is assessing the risk of a data breach in its Azure environment. They identify that a legacy application has a known vulnerability and that the application is accessible from the internet. Which risk management step should they take first?
Select an answer first
19application · medium
A healthcare organization stores patient records in an Azure SQL database. To meet compliance requirements, they must protect the data if the storage media is physically stolen from the data center. Which control should they implement?
Select an answer first
20application · medium
A development team is storing passwords in a database. They want to ensure that even if the database is compromised, the passwords cannot be easily recovered. Which approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.