DRAG DROP (Drag and Drop is not supported)You need to identify which cloud service models place the most responsibility on the customer in a shared responsibility model.In which order should you list the service models from the most customer responsibility to the least? To answer, move all models from the list of models to the answer area and arrange them in the correct order.Select and Place:
Answer(s): A
Division of responsibilityIn an on-premises datacenter, you own the whole stack. As you move to the cloud some responsibilities transfer to Microsoft. The following diagram illustrates the areas of responsibility between you and Microsoft, according to the type of deployment of your stack.
https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
HOTSPOT (Drag and Drop is not supported)Select the answer that correctly completes the sentence.Hot Area:
Box: A user-assigned managed identityManaged identities for Azure resources is a Microsoft Entra ID feature that you can use free of charge. Using managed identities is the recommended way for applications hosted in Azure to authenticate to Azure resources and services.User-assigned managed identityUser-assigned managed identities are created as standalone Azure resources. They're independent of any app or service instance. When a user-assigned managed identity is provisioned, Azure creates a service principal just as it does for a system-assigned managed identity.However, a user-assigned managed identity isn't tied to a specific resource, so you can assign it to more than one application. For example:If your web app is deployed on 10 front-end VMs, you can create a user-assigned managed identity for the app, grant the managed identity the necessary rights, and then associate it with all 10 VMs.If you used system-assigned managed identity, you'd need 10 identities, and you'd have to manage access for each one.Incorrect:* System-assigned managed identityYou can enable system-assigned managed identities directly on an Azure service instance, such as a VM. When you enable managed identities, Azure creates a service principal through Azure Resource Manager. A system-assigned managed identity has its lifecycle linked to the resource instance where it was created. For example:If you have two VMs and you want to use system-assigned managed identities, you need to enable managed identities on each VM.If the resource is deleted, so is the managed identity. A resource can have only one system-assigned managed identity.* a service principalWhen to use service principalsWe've now explored the manual processes to create Microsoft Entra applications, associate service principals, and grant access to resources. You use these manual processes in only two scenarios:Your application or service is running on-premises.The resources or applications that you need to access don't support managed identities.The most secure and convenient way to handle authentication within Azure is to use managed identities.
https://learn.microsoft.com/en-us/training/modules/authenticate-apps-with-managed-identities/3-managed- identities
Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?
Answer(s): C
The Microsoft Service Trust Portal contains details about Microsoft's implementation of controls and processes that protect our cloud services and the customer data therein.Incorrect:* Azure Cost Management + Billing* the Microsoft 365 admin center* the Microsoft Endpoint Manager admin center* the Microsoft Entra admin center* the Microsoft Purview compliance portal
https://learn.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal
In the shared responsibility model, for what is Microsoft responsible when managing Azure virtual machines?
Shared responsibility in the cloudIn an on-premises datacenter, you own the whole stack. As you move to the cloud some responsibilities transfer to Microsoft. The following diagram illustrates the areas of responsibility between you and Microsoft, according to the type of deployment of your stack.
Which type of identity can be used with an Azure service and will be deleted automatically when the service is deleted?
Answer(s): D
A system-assigned managed identity is automatically deleted when the Azure resource it's associated with is deleted. This is because system-assigned identities are tied to the lifecycle of the specific resource they are enabled for.Incorrect:Not A: System-assigned identities are automatically deleted when the resource is deleted, while the lifecycle of a user-assigned identity is independent of any resources with which it's associated. You need to manually delete a user-assigned identity when it's no longer required, even if no resources are associated with it.
https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/managed-identity-best- practice-recommendations
Post your Comments and Discuss Microsoft SC-900 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-900 content, but please register or login to continue.