Microsoft Security, Compliance, and Identity Fundamentals: Describe the capabilities of Microsoft security solutions Microsoft Quiz Answers

Get Microsoft Security, Compliance, and Identity Fundamentals: Describe the capabilities of Microsoft security solutions Microsoft Quiz Answers

Learn about security capabilities in Microsoft. Topics covered will include network and platform capabilities of Azure, Azure security management, and Sentinel. You’ll learn about threat protection with Microsoft 365 Defender and Microsoft 365 security management.

Here are all the learning paths in preparation for the SC-900 exam: Microsoft Security, Compliance, and Identity Fundamentals.

Part 1: Describe the concepts of security, compliance, and identity

Part 2: Describe the capabilities of Microsoft Azure Active Directory, part of Microsoft Entra

Part 3: Describe the capabilities of Microsoft security solutions

Part 4: Describe the capabilities of Microsoft compliance solutions

If you are new to the security area, we recommend:

Primer: Describe the basic concepts of cybersecurity

This learning path helps prepare you for Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals.

Prerequisites:

• General understanding of networking and cloud computing concepts.
• General IT knowledge or any general experience working in an IT environment.
• General understanding of Microsoft Azure and Microsoft 365.

Enroll on Microsoft

Module 1: Describe security management capabilities of Azure

Learn about cloud security posture management and how Microsoft Defender for Cloud protects your cloud through secure score, recommendations, and enhanced features that provide cloud workload protection. You’ll also learn about security baselines in Azure.

Learning objectives:

After completing this module, you’ll be able to:

• Describe cloud security posture management.
• Describe the capabilities of Microsoft Defender for Cloud
• Understand the Azure Security Benchmark and the security baselines in Azure.

Prerequisites:

• General understanding of networking and cloud computing concepts.
• General IT knowledge or any general experience working in an IT environment.
• General understanding of Microsoft Azure and Microsoft 365.

Quiz 1: Knowledge check

Q1. Your organization wants to improve their security best practices, which option best describes the benefit of using security baselines in Azure?

• Security baselines for Azure apply guidance from the Azure Security Benchmark to the specific service for which it’s defined and provide organizations a consistent experience when securing their environment.
• Security baselines continually assess your resources, subscriptions, and organization for security issues and then aggregates all the findings into a single score so that you can tell, at a glance, your current security situation.
• Security baselines in Azure automate the remediation process.

Q2. An organization is using Microsoft Defender for Cloud to assess its resources and subscriptions for security issues. The organization’s overall secure score is low and needs to improve. How could a security admin try to improve the score?

• Close old security recommendations.
• Remediate security recommendations.
• Delete security recommendations.

Q3. An organization wants to add vulnerability scanning for its Azure resources to view, investigate, and remediate the findings directly within Microsoft Defender for Cloud. What functionality of Microsoft Defender for Cloud would they need to consider?

• Secure score and recommendations functionality that is part of the CSPM pillar of Microsoft Defender for Cloud.
• The enhanced functionality that is provided through the Microsoft Defender plans and is part of the CWP pillar of Microsoft Defender for Cloud.
• Security Benchmarks.

Module 2: Describe security capabilities of Microsoft Sentinel

Learn about Microsoft Sentinel a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.

Learning objectives:

After completing this module, you will be able to:

• Describe the security concepts for SIEM and SOAR.
• Describe how Microsoft Sentinel provides integrated threat management.
• Describe the pricing models of Microsoft Sentinel.

Prerequisites:

• General understanding of networking and cloud computing concepts.
• General IT knowledge or any general experience working in an IT environment.
• General understanding of Microsoft Azure and Microsoft 365.

Quiz 1: Knowledge check

Q1. As the lead admin, it’s important to convince your team to start using Microsoft Sentinel. You’ve put together a presentation. What are the four security operation areas of Microsoft Sentinel that cover this area?

• Collect, Detect, Investigate, and Redirect.
• Collect, Detect, Investigate, and Respond.
• Collect, Detect, Investigate, and Repair.

Q2. Your estate has many different data sources where data is stored. Which tool should be used with Microsoft Sentinel to quickly gain insights across your data as soon as a data source is connected?

• Azure Monitor Workbooks.
• Playbooks.
• Microsoft 365 Defender.

Module 3: Describe basic security capabilities in Azure

Learn about capabilities Azure supports to protect your network, VMs, and your data.

Learning objectives:

After completing this module, you will be able to:

• Learn how Azure security capabilities can protect the network
• Learn how Azure can protect your VMs
• Learn how encryption on Azure can protect your data

Prerequisites:

• General understanding of networking and cloud computing concepts.
• General IT knowledge or any general experience working in an IT environment.
• General understanding of Microsoft Azure and Microsoft 365.

Quiz 1: Knowledge check

Q1. The security admin has created an Azure Network Security Group (NSG) to filter network traffic to a virtual machine. The admin wants to allow inbound traffic using the Remote Desktop Protocol (RDP), but the default NSG rules are currently blocking all inbound traffic that is not from another virtual network or an Azure load balancer. What does the security admin have to do to allow inbound traffic using RDP?

• Delete the default rule.
• Create a new network security rule that allows RDP traffic and that has a higher priority than the default rule.
• There is nothing the admin can do, RDP traffic is not supported with NSGs.

Q2. The security admin wants to protect Azure resources from DDoS attacks, which Azure DDoS Protection tier will the admin use to target Azure Virtual Network resources?

• Basic.
• Standard.
• Advanced.

Q3. An organization has several virtual machines in Azure. The security admin wants to deploy Azure Bastion to get secure access to those VMs. What should the admin keep in mind?

• Azure Bastion is deployed per virtual network, with support for virtual network peering.
• Azure Bastion is deployed per subscription.
• Azure Bastion is deployed per virtual machine.

Q4. An organization has much of its application data in Azure. The security admin wants to use the encryption capabilities in Azure. Which service would the admin use to store the application’s secrets?

• Transparent data encryption.
• Secrets management.
• Azure Key Vault.

Conclusion:

I hope this Microsoft Security, Compliance, and Identity Fundamentals: Describe the capabilities of Microsoft security solutions Microsoft Quiz Answers would be useful for you to learn something new from this problem. If it helped you then don’t forget to bookmark our site for more Coding Solutions.

This Problem is intended for audiences of all experiences who are interested in learning about Data Science in a business context; there are no prerequisites.

Keep Learning!

More Coding Solutions >>

LeetCode Solutions

Hacker Rank Solutions

CodeChef Solutions