Overview of Security, Compliance, and Identity Fundamentals
The SC-900 certification is an essential milestone in your Azure journey. Our practice tests simulate the real exam format, helping you build confidence and identify knowledge gaps. Review the detailed explanations provided after each question to deeply understand the underlying cloud concepts.
Sample SC-900 Practice Questions
Question 1
Contoso Ltd is implementing Zero Trust principles to secure their hybrid cloud environment. They have recently migrated some applications to Azure and want to ensure that only necessary permissions are granted to users. Which of the following actions best aligns with the principle of Least Privilege in this scenario?
- Implement continuous monitoring and logging of all user activities.
- Assign roles and permissions based on the principle of least privilege.
- Encrypt all sensitive data stored in Azure Blob Storage.
- Grant full administrative access to all users to simplify management.
The correct answer is B. Implementing role-based access control (RBAC) ensures that users and services have the minimum level of access needed to perform their job functions, which is the essence of the Least Privilege principle. Option A is incorrect because it does not address the principle of least privilege; instead, it focuses on monitoring. Option C is incorrect as it pertains to data encryption rather than access control. Option D is incorrect because it suggests granting more permissions than necessary, which contradicts the principle of least privilege.
Question 2
During a recent security audit at Contoso Ltd, it was discovered that a critical application running in Azure Virtual Machines had been compromised due to an overly permissive network configuration. To address this, they decide to implement the principle of Assume Breach. Which action should they take to adhere to this principle?
- Enable detailed logging and monitoring of all network traffic.
- Implement network segmentation and micro-segmentation.
- Encrypt all sensitive data stored in Azure Blob Storage.
- Disable all firewalls to allow easier troubleshooting.
The correct answer is B. Implementing network segmentation and using micro-segmentation ensures that even if one part of the network is breached, the rest remains secure. Option A is incorrect because it does not address the principle of assume breach; it focuses on monitoring. Option C is incorrect as it pertains to data encryption rather than network security. Option D is incorrect because it suggests disabling firewalls, which would increase the risk of unauthorized access.
Question 3
Contoso Ltd is evaluating their hybrid cloud security posture and wants to ensure they are adhering to the principle of Zero Trust. They have a hybrid environment with on-premises servers and Azure resources. Which of the following actions would best demonstrate adherence to the principle of Zero Trust in this scenario?
- Implement continuous monitoring and logging of all user activities.
- Enforce strict IAM policies and use multi-factor authentication (MFA).
- Encrypt all sensitive data stored in Azure Blob Storage.
- Allow all traffic between on-premises and Azure resources without authentication.
The correct answer is B. Enforcing strict identity and access management (IAM) policies ensures that only authorized users and services can access resources, which aligns with the principle of Zero Trust. Option A is incorrect because it does not address the principle of zero trust; it focuses on monitoring. Option C is incorrect as it pertains to data encryption rather than access control. Option D is incorrect because it suggests allowing all traffic without authentication or authorization, which contradicts the principle of zero trust.
Use the interactive quiz engine above to answer these questions and hundreds more.