Overview

In order to set realistic expectations, please note: These questions are NOT official questions that you will find on the official exam. These questions DO cover all the material outlined in the knowledge sections below. Many of the questions are based on fictitious scenarios which have questions posed within them.The official knowledge requirements for the exam are reviewed routinely to ensure that the content has the latest requirements incorporated in the practice questions. Updates to content are often made without prior notification and are subject to change at any time.Each question has a detailed explanation and links to reference materials to support the answers which ensures accuracy of the problem solutions.The questions will be shuffled each time you repeat the tests so you will need to know why an answer is correct, not just that the correct answer was item "B" last time you went through the test.NOTE: This course should not be your only study material to prepare for the official exam. These practice tests are meant to supplement topic study material.Should you encounter content which needs attention, please send a message with a screenshot of the content that needs attention and I will be reviewed promptly. Providing the test and question number do not identify questions as the questions rotate each time they are run. The question numbers are different for everyone.If you have an interest in Microsoft SCI solutions, this exam is for you, whether you're a:Business stakeholderNew or existing IT professionalStudentYou should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft SCI solutions can span across these solution areas to provide a holistic and end-to-end solution.Skills at a glanceDescribe the concepts of security, compliance, and identity (10-15%)Describe the capabilities of Microsoft Entra (25-30%)Describe the capabilities of Microsoft security solutions (35-40%)Describe the capabilities of Microsoft compliance solutions (20-25%)Describe the concepts of security, compliance, and identity (10-15%)Describe security and compliance conceptsDescribe the shared responsibility modelDescribe defense-in-depthDescribe the Zero Trust modelDescribe encryption and hashingDescribe Governance, Risk, and Compliance (GRC) conceptsDefine identity conceptsDefine identity as the primary security perimeterDefine authenticationDefine authorizationDescribe identity providersDescribe the concept of directory services and Active DirectoryDescribe the concept of federationDescribe the capabilities of Microsoft Entra (25-30%)Describe function and identity types of Microsoft Entra IDDescribe Microsoft Entra IDDescribe types of identitiesDescribe hybrid identityDescribe authentication capabilities of Microsoft Entra IDDescribe the authentication methodsDescribe multi-factor authentication (MFA)Describe password protection and management capabilitiesDescribe access management capabilities of Microsoft Entra IDDescribe Conditional AccessDescribe Microsoft Entra roles and role-based access control (RBAC)Describe identity protection and governance capabilities of Microsoft EntraDescribe Microsoft Entra ID GovernanceDescribe access reviewsDescribe the capabilities of Microsoft Entra Privileged Identity ManagementDescribe Entra ID ProtectionDescribe Microsoft Entra Permissions ManagementDescribe the capabilities of Microsoft security solutions (35-40%)Describe core infrastructure security services in AzureDescribe Azure distributed denial-of-service (DDoS) ProtectionDescribe Azure FirewallDescribe Web Application Firewall (WAF)Describe network segmentation with Azure virtual networksDescribe network security groups (NSGs)Describe Azure BastionDescribe Azure Key VaultDescribe security management capabilities of AzureDescribe Microsoft Defender for CloudDescribe Cloud Security Posture Management (CSPM)Describe how security policies and initiatives improve the cloud security postureDescribe enhanced security features provided by cloud workload protectionDescribe capabilities of Microsoft SentinelDefine the concepts of security information and event management (SIEM) and security orchestration automated response (SOAR)Describe threat detection and mitigation capabilities in Microsoft SentinelDescribe threat protection with Microsoft 365 DefenderDescribe Microsoft 365 Defender servicesDescribe Microsoft Defender for Office 365Describe Microsoft Defender for EndpointDescribe Microsoft Defender for Cloud AppsDescribe Microsoft Defender for IdentityDescribe Microsoft Defender Vulnerability ManagementDescribe Microsoft Defender Threat Intelligence (Defender TI)Describe the Microsoft 365 Defender portalDescribe the capabilities of Microsoft compliance solutions (20-25%)Describe Microsoft Service Trust Portal and privacy principlesDescribe the Service Trust Portal offeringsDescribe the privacy principles of MicrosoftDescribe Microsoft PrivaDescribe compliance management capabilities of Microsoft PurviewDescribe the Microsoft Purview compliance portalDescribe Compliance ManagerDescribe the uses and benefits of compliance scoreDescribe information protection, data lifecycle management, and data governance capabilities of Microsoft PurviewDescribe the data classification capabilitiesDescribe the benefits of Content explorer and Activity explorerDescribe sensitivity labels and sensitivity label policiesDescribe data loss prevention (DLP)Describe records managementDescribe retention policies, retention labels, and retention label policiesDescribe unified data governance solutions in Microsoft PurviewDescribe insider risk, eDiscovery, and audit capabilities in Microsoft PurviewDescribe insider risk managementDescribe eDiscovery solutions in Microsoft PurviewDescribe audit solutions in Microsoft Purview

Skills

Reviews