SC-900 無料問題集「Microsoft Security Compliance and Identity Fundamentals」
Hotspot Question
Select the answer that correctly completes the sentence.
Select the answer that correctly completes the sentence.
正解：
Explanation:
An incident in Microsoft 365 Defender is a collection of correlated alerts and associated data that make up the story of an attack.
https://learn.microsoft.com/es-es/microsoft-365/security/defender/incidents-overview?view=o365-worldwide
Hotspot Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
Explanation:
Box 1: Yes
A certificate is required that provides a private and a public key.
Box 2: Yes
The public key is used to validate the private key that is associated with a digital signature.
Box 3: No
Only the signer has access to his or her private key.
Reference:
https://support.microsoft.com/en-us/office/obtain-a-digital-certificate-and-create-a-digital-signature-e3d9d813-3305-4164-a820-2e063d86e512
https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/fin-ops/organization-administration/electronic-signature-overview
Hotspot Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
Hotspot Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
Explanation:
Box 1: Yes
Azure AD supports custom roles.
Box 2: Yes
Global Administrator has access to all administrative features in Azure Active Directory.
Box 3: No
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/roles/concept-understand-roles
https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
Hotspot Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正解：
Explanation:
Box 1: No
The Microsoft Service Trust Portal (STP) is not used to establish federated trust with another organization.
Box 2: Yes
The Microsoft Service Trust Portal (STP) is a primary resource for finding information regarding the security, compliance, and privacy practices of Microsoft cloud services, including audit reports and third-party assessments that may reveal security findings.
Key details regarding vulnerability-related information on the portal include:
Audit Reports and Penetration Tests: The portal provides access to independent third-party audit reports (such as SOC 1, SOC 2, and ISO reports) and penetration tests conducted on Microsoft cloud services, which detail the security posture and controls.
Third-Party Assessments: Users can find specialized reports, such as third-party vulnerability assessments of products like Microsoft 365 Copilot.
Data Protection and Breach Information: The portal contains information on how Microsoft detects and responds to personal data breaches and provides Data Protection Impact Assessments (DPIAs).
Content Types: The STP hosts Microsoft-authored whitepapers, compliance guides, and security assessments.
Box 3: Yes
The Microsoft Service Trust Portal is a, "one-stop shop for security, regulatory compliance, and privacy information related to the Microsoft Cloud". It is primarily a public site for publishing audit reports (ISO, SOC, GDPR, etc.), whitepapers, and compliance guides.
Reference:
https://learn.microsoft.com/en-us/purview/get-started-with-service-trust-portal