Question 1

To protect your Azure Virtual Machine from being accidentally deleted, you apply a Delete lock to the VM. Later, your manager applies a Read-only lock to the parent

Resource Group of the VM.

Given this state of Azure resources, can you attach a new disk to the VM?

Options :

A : No

B : Yes

Answer: A

Question 2

Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

Options :

A : conditional access policies

B : Azure AD Identity Protection

C : Azure AD Privileged Identity Management (PIM)

D : authentication method policies

Answer: C

Question 3

Your organization uses Skype to communicate with suppliers. Who is responsible for DNS configuration?

Options :

A : Microsoft

B : Individual users

C : Supplier organization

D : Your IT team

Answer: A

Question 4

Which of the following is NOT an identity governance feature in Azure Active Directory?

Options :

A : Conditional Access

B : Privileged Identity Management

C : Entitlement management

D : Access Reviews

Answer: A

Question 5

You have an Azure subscription.

You need to implement approval-based, time-bound role activation.

What should you use?

Options :

A : Windows Hello for Business

B : Azure Active Directory (Azure AD) Identity Protection

C : access reviews in Azure Active Directory (Azure AD)

D : Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Answer: D

Free SC-900 Mock Exam – Practice Online Confidently

Buying Options: