Microsoft SC-900

Practice Test #1

50問と45分の制限時間で実際の試験をシミュレーションしましょう。AI検証済み解答と詳細な解説で学習できます。

50問題45分700/1000合格点

練習問題を見る

AI搭載

3重AI検証済み解答＆解説

すべての解答は3つの主要AIモデルで交差検証され、最高の精度を保証します。選択肢ごとの詳細な解説と深い問題分析を提供します。

GPT Pro

Claude Opus

Gemini Pro

選択肢ごとの解説

深い問題分析

3モデル合意の精度

練習問題

問題 1

(2つ選択)

What is a use case for implementing information barrier policies in Microsoft 365?

外出先でもすべての問題を解きたいですか？

Cloud Passを無料でダウンロード — 模擬試験、学習進捗の追跡などを提供します。

他の模擬試験

Practice Test #2

50 問題·45分·合格 700/1000

Practice Test #3

50 問題·45分·合格 700/1000

← すべてのMicrosoft SC-900問題を見る

今すぐ学習を始める

Cloud Passをダウンロードして、すべてのMicrosoft SC-900練習問題を無料で利用しましょう。

外出先でもすべての問題を解きたいですか？

無料アプリを入手

Cloud Passを無料でダウンロード — 模擬試験、学習進捗の追跡などを提供します。

問題 2

What do you use to provide real-time integration between Azure Sentinel and another security source?

問題 3

Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?

問題分析

Core Concept: This question tests knowledge of where Microsoft publishes official compliance documentation for its cloud services (Microsoft 365, Azure, Dynamics 365) against external regulatory standards and certifications (for example ISO/IEC 27001, SOC, PCI DSS). In SC-900, this falls under foundational security/compliance concepts: understanding how organizations verify a cloud provider’s compliance posture. Why the Answer is Correct: The Microsoft Service Trust Portal (STP) is Microsoft’s primary public portal for compliance resources. It provides access to audit reports, compliance guides, certificates, and documentation that demonstrate how Microsoft cloud services meet various regulatory and industry standards. For ISO specifically, STP is where you typically find ISO certificates, audit attestations, and related compliance documentation. This aligns with governance and risk management needs and supports the Azure Well-Architected Framework’s Security pillar (risk management, assurance, and compliance evidence). Key Features: STP includes Compliance Manager (assessment-based compliance posture tracking), downloadable audit reports (e.g., SOC reports), certificates/attestations (e.g., ISO/IEC certifications), and detailed documentation such as the Microsoft cloud security and compliance “trust” content. It is designed for auditors, compliance officers, and security teams who need evidence for due diligence, vendor risk management, and regulatory audits. Common Misconceptions: Learners often confuse STP with the Microsoft Purview compliance portal because Purview is where you configure compliance features (DLP, retention, eDiscovery, audit). However, Purview is primarily for managing your organization’s compliance controls and data governance, not for retrieving Microsoft’s third-party audit reports and certifications. Similarly, Microsoft 365 admin center is for tenant administration, and Azure Cost Management is for spend/chargeback—neither is intended for compliance attestations. Exam Tips: If the question asks for “audit reports,” “certifications,” “attestations,” “ISO/SOC/PCI documentation,” or “how Microsoft complies,” think Service Trust Portal. If it asks where you “configure” compliance policies (DLP, retention labels, eDiscovery), think Microsoft Purview compliance portal. If it asks about user/tenant settings, think Microsoft 365 admin center; if it asks about costs/budgets, think Azure Cost Management + Billing.

問題 4

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

パート1:

Conditional access policies can use the device state as a signal.

パート2:

Conditional access policies apply before first-factor authentication is complete.

パート3:

Conditional access policies can trigger multi-factor authentication (MFA) if a user attempts to access a specific application.

問題 5

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

パート1:

Sensitivity labels can be used to encrypt documents.

パート2:

Sensitivity labels can add headers and footers to documents.

パート3:

Sensitivity labels can apply watermarks to emails.

問題 6

(2つ選択)

What are two capabilities of Microsoft Defender for Endpoint? Each correct selection presents a complete solution. NOTE: Each correct selection is worth one point.

問題分析

Core concept: Microsoft Defender for Endpoint (MDE) is Microsoft’s endpoint security platform (part of Microsoft Defender XDR) that provides prevention, detection, investigation, and response (EDR/XDR) for devices such as Windows, macOS, Linux, iOS, and Android. In SC-900, you’re expected to recognize MDE’s core endpoint-focused capabilities. Why the answer is correct: A (automated investigation and remediation) is a key MDE capability. When alerts are generated (for example, suspicious PowerShell, malware, credential theft behaviors), MDE can automatically investigate related entities (processes, files, registry keys, persistence mechanisms) and take remediation actions such as quarantining files, stopping processes, isolating devices, and removing persistence. This reduces mean time to respond and supports the Azure Well-Architected Framework security pillar by improving detection/response and limiting blast radius. D (attack surface reduction) is also a core MDE capability. Attack Surface Reduction (ASR) includes controls like ASR rules, controlled folder access, network protection, and exploit protection. These are preventive measures that reduce opportunities for common attack techniques (macro abuse, credential theft, ransomware behaviors), aligning with “shift-left” security and least privilege principles. Key features and best practices: MDE includes EDR telemetry, threat and vulnerability management, device isolation, advanced hunting (KQL), indicators, and integration with Microsoft Intune and Microsoft Defender for Cloud Apps. Best practice is to deploy ASR rules in audit mode first, then enforce, and to use automated investigation with appropriate permissions/roles and alert tuning to avoid noise. Common misconceptions: Transport encryption (B) is a general security control (e.g., TLS for data in transit) but is not a defining “capability” of Defender for Endpoint; it’s typically associated with networking, email, or service-to-service security. Shadow IT detection (C) is primarily a Microsoft Defender for Cloud Apps (CASB) capability, focused on discovering unsanctioned cloud app usage from network logs and signals. Exam tips: For SC-900, map products to their “home” capabilities: endpoints = MDE (EDR, ASR, automated investigation), cloud app discovery/shadow IT = Defender for Cloud Apps, email protection = Defender for Office 365, identity protection = Entra ID Protection. When you see “attack surface reduction” or “automated investigation,” think Defender for Endpoint.

問題 7

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

パート1:

______ is a cloud-native security information and event management (SIEM) and security orchestration automated response (SOAR) solution used to provide a single solution for alert detection, threat visibility, proactive hunting, and threat response.

問題 8

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

パート1:

Compliance Manager assesses compliance data ______ for an organization.

問題 9

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

パート1:

You can create one Azure Bastion per virtual network.

パート2:

Azure Bastion provides secure user connections by using RDP.

パート3:

Azure Bastion provides a secure connection to an Azure virtual machine by using the Azure portal.

問題 10

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

パート1:

Microsoft Intune can be used to manage Android devices.

パート2:

Microsoft Intune can be used to provision Azure subscriptions.

パート3:

Microsoft Intune can be used to manage organization-owned devices and personal devices.