SC-900 Practice Online

Question 1

What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?

A : applications

B : network controls

C : operating systems

D : accounts and identities

Answer: D

Question 2

CIA is a way to think about security trade-offs. What does the initialism CIA stand for?

A : Confidentiality, Integrity, Availability

B :

Credentials, Integrity, Availability

C : Credentials, Integrity, Accessibility

D : Confidentiality, Integrity, Accessibility

Answer: A

Question 3

To protect your Azure AD accounts with privileged roles, you enable MFA for 7 of 10 privileged accounts.

How many points does your action contribute to the Microsoft Secure Score if the maximum score for this improvement action is 10?

A : None of the above

B : 10

C : 7

D : 0

Answer: C

Question 4

Is it possible to delete a resource group that has resources with read-only resource locks?

A : Yes

B : No

Answer: B

Question 5

You have a Microsoft 365 E3 subscription.

You plan to audit user activity by using the unified audit log and Basic Audit.

For how long will the audit records be retained?

A : 15 days

B : 30 days

C : 90 days

D : 180 days

Answer: C

Name:	Microsoft Security, Compliance, and Identity Fundamentals
Exam Code:	SC-900
Certification:	Security, Compliance, and Identity Fundamentals
Vendor:	Microsoft
Total Questions:	504
Last Updated:	Oct 24, 2026