Microsoft Security, Compliance, and Identity Fundamentals (SC-900日本語版) : SC-900日本語

Correct Answer:

Explanation:
Security defaults require an Azure Active Directory (Azure AD) Premium license. No Security defaults can be enabled for a single Azure Active Directory (Azure AD) user. No When Security defaults are enabled, all administrators must use multi-factor authentication (MFA). Yes Microsoft explains that Security defaults are baseline identity protections that are "available to all tenants at no additional cost" and are intended to "help protect your organization from common identity-related attacks." They are a tenant-wide setting: Microsoft states that security defaults are "either on or off for the entire tenant" and "can't be customized or targeted to specific users or groups." If you require per-user or granular targeting, Microsoft directs customers to use Conditional Access policies instead.
A core behavior of security defaults is enforcing MFA: "All users are required to register for Azure AD Multi- Factor Authentication," and "administrators are required to perform MFA." In addition, security defaults
"block legacy authentication" and apply other baseline requirements, but they do not enable premium features such as Azure AD Identity Protection or PIM. Summarizing the implications for the statements: no premium license is required; you cannot enable security defaults for just one user because the control is global; and when enabled, administrators must use MFA, with Microsoft recommending exclusion only for a break-glass account if necessary.

Correct Answer: B  🗳️

Explanation: Only visible for DumpsTests members. You can sign-up / login (it's free).

Correct Answer:

Explanation:

Microsoft describes Identity Protection as a capability that "detects risky users and risky sign-ins using real- time and offline detections and allows you to configure automated responses." Microsoft is explicit that detections aren't limited to after authentication; rather, signals are evaluated during sign-in and also by offline analytics, where "some detections are offline and can take up to 48 hours to appear." Therefore, saying it only
"generates risk detections once a user is authenticated" is incorrect.
For risk scoring, Microsoft states that Identity Protection "assigns a risk level to each detection," and that
"risk levels are Low, Medium, or High," which are then used by user-risk and sign-in-risk policies to drive remediation (for example, requiring password change or MFA).
Microsoft also defines the two core risk concepts: "User risk represents the probability that a given identity or account is compromised," while "Sign-in risk represents the probability that a given authentication request isn' t authorized by the identity owner." These definitions underpin Conditional Access and Identity Protection policies that can require additional verification or block access based on the assessed risk.
Taken together, the documentation confirms: detections are not restricted to post-authentication (No), detections carry Low/Medium/High levels (Yes), and user risk is the probability the identity is compromised (Yes).

Correct Answer:

Explanation:

Microsoft positions Compliance Manager as a capability available inside the Microsoft 365 Compliance Center (now Microsoft Purview compliance portal). In Microsoft's SCI learning content, Compliance Manager is described as the centralized workspace in the compliance portal that "helps you manage your organization's compliance requirements," providing a compliance score, pre-built and custom assessments, and improvement actions you track and assign. The documentation explains that admins "use the Microsoft
365 Compliance Center to access Compliance Manager," where they can review the score, map controls to regulations and standards, and manage evidence and testing of controls. It also clarifies that Compliance Manager is surfaced directly in the compliance portal navigation, enabling authorized roles (such as Compliance Administrator, Global Administrator, or Compliance Data Administrator) to open the Compliance Manager blade to create or view assessments, assign actions, and review detailed guidance. By contrast, the Microsoft 365 admin center focuses on tenant, billing, and user management; the Microsoft 365 Defender portal focuses on security operations and threat protection; and the Microsoft Support portal is for service requests. Therefore, the direct and intended entry point for Compliance Manager is the Microsoft 365 Compliance Center.

Correct Answer:

Explanation:
YES YES YES
Microsoft Entra Conditional Access is explicitly described by Microsoft as a system of policies that act as if- then statements: if a user wants to access a resource, then certain controls must be satisfied. These are called Conditional Access policies, and they combine assignments and access controls to enforce organizational requirements.
Among the configurable conditions in a policy is Device platforms. The documentation explains that Conditional Access identifies the device platform (Android, iOS, Windows, macOS, Linux) from the user agent and notes that this condition is typically used with grant controls such as block access or in combination with other controls. This allows administrators to block or allow access based specifically on the operating system of the user's device.
For scoping, the Users and groups assignment lets you include or exclude groups instead of individual users.
Microsoft's Entra groups overview states that you can create a Conditional Access policy that applies to a group, and that Entra supports both security groups and Microsoft 365 groups, while another architecture article notes that either a security group or a Microsoft 365 Group can be used in Conditional Access policies.