SC-900 Review

With federation, trust is always bidirectional?

• True

• False

Security such as securing access to virtual machines either on-premises or in the cloud by closing certain ports.

• Perimeter

• Network

• Compute

• Application

Which of the following measures might an organization implement as part of the defense in-depth security methodology?

• Locating all its servers in a single physical location.

• Multifactor authentication for all users.

• Ensuring there's no segmentation of your corporate network.

Security controls, such as multifactor authentication or condition-based access, to control access to infrastructure and change control.

• Physical

• Perimeter

• Identity and access

• Network

Requires more than one form of verification.

• Multi-factor Authentication (MFA)

• Role-based access control (RBAC)

• Single sign-on

• Conditional Access

Cloud provider is responsible for managing everything except data, devices, accounts, and identities. It's usually licensed through a monthly or annual subscription.

• IaaS

• SaaS

• PaaS

• On-premises

Requires the most management by the cloud customer.

• IaaS

• PaaS

• SaaS

• DBaaS

This operates on the principle of "trust no one, verify everything."

• Shared Responsibility

• CIA

• AAA

• Zero Trust

Security of your corporate network includes DDoS protection to filter large-scale attacks before they can cause a denial of service for users.

• Physical

• Perimeter

• Network

• Compute

An organization has deployed Microsoft 365 applications to all employees. Considering the shared responsibility model, who is responsible for the accounts and identities relating to these employees?

• The organization.

• Microsoft, the SaaS provider.

• There's shared responsibility between an organization and Microsoft.

• You.