SC-900 무료 덤프문제 온라인 액세스

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

정답:

Explanation:

Microsoft documents for Defender for Endpoint (MDE) describe it as an enterprise endpoint security platform that supports Windows 10/11, Windows Server, Linux, macOS, and mobile platforms (Android and iOS
/iPadOS). The platform provides threat and vulnerability management, attack surface reduction, next- generation protection, endpoint detection and response, and automated investigation and remediation across those supported operating systems. Because MDE supports Windows client operating systems and servers, it can also be used on Azure virtual machines that run supported Windows versions; onboarding methods include local scripts, Microsoft Endpoint Manager, or cloud integrations, allowing VM endpoints to receive the same protection and EDR capabilities as physical devices.
By contrast, malware scanning in SharePoint Online, OneDrive, and Microsoft Teams is provided by Microsoft Defender for Office 365 (Safe Attachments for SharePoint, OneDrive, and Teams)-a different service within the Microsoft 365 Defender family. This service analyzes files as they are uploaded or shared to detect and block malicious content in collaboration workloads, which is outside the scope of MDE's endpoint-focused protections. Therefore: Android protection (Yes), Azure VMs running Windows 10 (Yes), and SharePoint Online anti-virus protection by MDE (No, handled by Defender for Office 365).

When you enable Azure AD Multi-Factor Authentication (MFA), how many factors are required for authentication?

• A.1
• B.2
• C.4
• D.3

What can you protect by using the information protection solution in the Microsoft 365 compliance center?

• A.sensitive data from being exposed to unauthorized users
• B.users from phishing attempts
• C.files from malware and viruses
• D.computers from zero-day exploits

What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

• A.Azure Active Directory (Azure AD) Identity Protection
• B.conditional access policies
• C.Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
• D.Azure Multi-Factor Authentication (MFA)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

정답:

Explanation:

Microsoft's shared-responsibility model states that the cloud provider secures the cloud, while the customer secures what they put in the cloud. The Azure Security documentation explains: "Regardless of the type of deployment, you always retain responsibility for your data, endpoints, accounts, and access management." This applies to IaaS, PaaS, and SaaS, so statement 3 is Yes because the organization is always accountable for the security of information and data.
For SaaS, Microsoft describes that customers "don't manage or control the underlying cloud infrastructure- including network, servers, operating systems, or even individual application capabilities" and that the provider handles service maintenance and updates. In SaaS, tasks like patching or applying service packs to the application code are owned by the service provider, while the customer focuses on data, identity, and access. Therefore, statement 1 is No.
For IaaS, Microsoft notes the provider manages the physical estate: "Microsoft is responsible for the physical hosts, network, and datacenter facilities," while the customer configures and secures the guest OS, applications, and network controls within their subscription. Thus, managing the physical network is the cloud provider's duty, making statement 2 Yes.
These SCI principles are foundational to Microsoft Learn/Docs guidance on Azure's shared responsibility:
provider-"security OF the cloud"; customer-"security IN the cloud," with data protection always remaining the customer's responsibility.