SC_900_Exam_Prep_Azhar

Statement: "The shared responsibility model makes responsibilities clear. When organizations move to the cloud, some responsibilities transfer to the cloud provider and some to the customer organization."

Select Yes if the statement is true. Otherwise, select No.

• Yes

• No

Statement: "The goal of PaaS is to help you create an application quickly without managing the underlying infrastructure. With PaaS, the cloud provider manages the hardware and operating systems, and the customer is responsible for applications and data." Select Yes if the statement is true. Otherwise, select No.

• Yes

• No

The Zero Trust model operates on the principle of ?

• trust all, verify everything

• trust no one, verify everything

• trust all, verify no one

• trust few, verify everything

Statement: "Governance is the process of identifying, assessing, and responding to threats or events that can impact company or customer objectives." Select Yes if the statement is true. Otherwise, select No.

• Yes

• No

An organization has deployed Microsoft 365 applications to all employees. Considering the shared responsibility model, who is responsible for the accounts and identities relating to these employees?

• The organization.

• Microsoft, the SaaS provider.

• There's shared responsibility between an organization and Microsoft.

Which of the following measures might an organization implement as part of the defense in-depth security methodology?

• Locating all its servers in a single physical location.

• Multifactor authentication for all users.

• Ensuring there's no segmentation of your corporate network.

The human resources organization wants to ensure that stored employee data is encrypted. Which security mechanism would they use?

• Hashing.

• Encryption in transit.

• Encryption at rest.

Which of the following best describes the concept of data sovereignty?

• There are regulations that govern the physical locations where data can be stored and how and when it can be transferred, processed, or accessed internationally.

• Data, particularly personal data, is subject to the laws and regulations of the country/region in which it's physically collected, held, or processed.

• Trust no one, verify everything.

Statement: "Authorization is the process of proving that a person is who they say they are." Select Yes if the statement is true. Otherwise, select No.

• Yes

• No

Statement: "Modern authentication is an umbrella term for authentication and authorization methods between a client, such as your laptop or phone, and a server, like a website or application." Select Yes if the statement is true. Otherwise, select No.

• Yes

• No