Microsoft Security, Compliance and Identity Fundamentals SC-900

A sign-in checks whether a user is who they claim to be; a later decision checks whether they may open a file. Which pairing is correct?

A user supplies a password and then approves a prompt on a registered device. What security concept is being applied?

A company wants to require extra verification when a sign-in comes from an unfamiliar context. Which Microsoft Entra capability evaluates signals and applies access requirements?

An employee leaves the organization but still belongs to groups granting access to sensitive data. Which governance activity most directly helps detect and remove such unnecessary access?

A tenant wants to let staff sign in once and then use several integrated applications without entering a new password for each. What is this experience called?

A security team needs cloud security posture recommendations for Azure resources and protection for supported workloads. Which service should it evaluate?

A security operations team wants to collect security events, investigate incidents and automate responses through playbooks. Which Microsoft service matches the SIEM and SOAR role?

A company wants to label sensitive documents and apply supported protection settings based on their classification. Which capability is most relevant?

A team wants to detect and restrict inappropriate sharing of sensitive information through supported services. Which capability addresses this need?

An investigator must identify and preserve relevant electronic content for a formal case. Which Microsoft Purview capability should be evaluated?

A team moves a web application to a managed cloud platform. Who remains responsible for deciding which customer users may access the application's data?

A security manager combines identity controls, network restrictions, endpoint protection and monitoring. Which design principle explains the use of several complementary controls?