HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: YesMicrosoft Entra Conditional Access brings signals together, to make decisions, and enforce organizational policies. Conditional Access is Microsoft's Zero Trust policy engine taking signals from various sources into account when enforcing policy decisions.Conditional Access policies at their simplest are if-then statements; if a user wants to access a resource, then they must complete an action.Box 2: Yes Common signalsConditional Access takes signals from various sources into account when making access decisions. These signals include:* DeviceUsers with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.Use filters for devices to target policies to specific devices like privileged access workstations. Box 3: YesUser or group membershipPolicies can be targeted to specific users and groups giving administrators fine-grained control over access.* Etc.Note: Secure external access with groups in Microsoft Entra ID and Microsoft 365Groups are part of an access control strategy. You can use Microsoft Entra security groups and Microsoft 365 Groups as the basis for securing access to resources.
https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview
Box 1: NoNo - Microsoft Entra Permissions Management can be managed by using the Microsoft Purview compliance portal.Microsoft Entra admin center is used. Box 2: YesMicrosoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) solution for managing permissions in Azure, AWS, and GCP.Box 3: NoNo - Microsoft Secure Score can be reviewed from Permission Management in the Microsoft Entra admin center.How do I get my secure score?Identity secure score is available to free and paid customers.Sign in to the Microsoft Entra admin center as at least a Global Reader. Browse to Protection > Identity Secure Score to view the dashboard.The score and related recommendations are also found at Identity > Overview > Recommendations.
https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-permissions-management https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-identity-secure-score
What feature supports email as a method of authenticating users?
Answer(s): C
HOTSPOT (Drag and Drop is not supported)Select the answer that correctly completes the sentence.Hot Area:
Box: Permission classificationscan be accessed from the Entra Permissions Management portal.Microsoft Entra Permissions Management can handle permission classifications. It provides a CIEM solution that helps organizations discover, monitor, and remediate permission risks across multi-cloud environments. Specifically, Entra Permissions Management allows for classifying permissions, which is done on the ServicePrincipal object of the API that publishes the permissions. This allows for better organization, analysis, and management of permissions across your cloud infrastructure.Manage permission classifications. Follow these steps to classify permissions using the Microsoft Entra admin center: Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator. Browse to Entra ID > Enterprise apps > Consent and permissions > Permission classifications
https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-permission-classifications
Box: Security principleHow to create a virtual network is part of the information in the Microsoft cloud security benchmark (MCSB).MCSB Controls (v1), Security Control: Network security NS-1: Establish network segmentation boundariesSecurity principle: Ensure that your virtual network deployment aligns to your enterprise segmentation strategy defined in the GS-2 security control. Any workload that could incur higher risk for the organization should be in isolated virtual networks.Examples of high-risk workload include:An application storing or processing highly sensitive data.An external network-facing application accessible by the public or users outside of your organization. An application using insecure architecture or containing vulnerabilities that cannot be easily remediated.To enhance your enterprise segmentation strategy, restrict or monitor traffic between internal resources using network controls. Etc.
https://learn.microsoft.com/en-us/security/benchmark/azure/mcsb-network-security
Post your Comments and Discuss Microsoft SC-900 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-900 content, but please register or login to continue.