Question 1

What should you use to associate the same identity to more than one Azure virtual machine?

Options :

A : an Azure AD user account

B : a user-assigned managed identity

C : a system-assigned managed identity

D : an Azure AD security group

Answer: B

Question 2

Which of the following is NOT an enhanced security feature of Microsoft Defender for Cloud?

Options :

A : Endpoint Detection and Response

B : Data Loss Prevention

C : Cloud App Security

D : Threat Intelligence

Answer: C

Question 3

Which of the following labels would you use to mark content as a record?

Options :

A :

Sensitivity labels

B : AIP labels

C : Retention labels

D : Record labels

Answer: C

Question 4

Which of the following is NOT true about Windows Hello convenience PIN?

Options :

A : The PIN is local to the device

B : A TPM chip backs up the PIN

C : The PIN is enabled on domain-joined systems.

D : A secure server stores the PIN

Answer: D

Question 5

To which type of resource can Azure Bastion provide secure access?

Options :

A : Azure Files

B : Azure SQL Managed Instances

C : Azure virtual machines

D : Azure App Service

Answer: C

Free SC-900 Mock Exam – Practice Online Confidently