Question 1 of 10 · Describe the concepts of security, compliance, and identity
What is the difference between symmetric and asymmetric encryption?
Symmetric encryption uses the same key to encrypt and decrypt, while asymmetric encryption uses a mathematically related public and private key pair. Option B reverses the two, both types can protect data at rest or in transit, and both are reversible with the right key; the irreversible process is hashing.
Question 2 of 10 · Describe the capabilities of Microsoft Entra
What is a managed identity used for?
A managed identity gives an Azure resource, such as a virtual machine or app, an identity in Microsoft Entra ID that Azure manages, so it can access other services without developers storing credentials in code. Guest sign-in with a home account is B2B collaboration, passwordless sign-in is for people, and time-bound role activation is Privileged Identity Management.
Question 3 of 10 · Describe the capabilities of Microsoft security solutions
Why centralize security data in a SIEM like Sentinel?
Bringing data from identities, endpoints, email, cloud and network sources into one SIEM lets analytics correlate events and reveal attacks that no single source would show on its own. A SIEM complements rather than replaces endpoint protection, retention is a separate configuration choice, and individual products still raise their own alerts, which the SIEM then correlates.
Question 4 of 10 · Describe the capabilities of Microsoft compliance solutions
What is the benefit of retention policies for compliance?
Retention policies help meet legal and regulatory requirements to keep certain content for a set time and to delete it when that time ends, which also reduces risk from holding data longer than needed. Stopping data leaving the tenant is DLP, encryption comes from sensitivity labels, and detecting risky activity is Insider Risk Management or Defender.
Question 5 of 10 · Describe the concepts of security, compliance, and identity
What does assume breach mean in zero trust?
Assume breach means designing as though an attacker is already present, so you segment access, encrypt end to end and use analytics to limit the blast radius and detect threats. Trusting devices on the corporate network is the perimeter thinking zero trust rejects, regulatory reporting is unrelated, and verifying every request using all signals is the separate principle of verify explicitly.
Question 6 of 10 · Describe the capabilities of Microsoft Entra
What is Microsoft Entra ID?
Microsoft Entra ID, formerly Azure Active Directory, is Microsoft's cloud-based identity and access management service, handling sign-in, authentication and access to resources. The cloud-native SIEM and SOAR is Microsoft Sentinel, the XDR suite is Microsoft Defender XDR, and data governance and compliance are handled by Microsoft Purview.
Question 7 of 10 · Describe the capabilities of Microsoft security solutions
What does Microsoft Defender for Endpoint protect?
Microsoft Defender for Endpoint protects devices such as laptops, phones, tablets and servers with prevention, endpoint detection and response, and automated investigation. Email and Teams are protected by Defender for Office 365, on-premises Active Directory by Defender for Identity, and SaaS apps by Defender for Cloud Apps.
Question 8 of 10 · Describe the capabilities of Microsoft compliance solutions
What does a data lifecycle management policy handle?
Microsoft Purview Data Lifecycle Management uses retention policies and labels to keep content as long as required and delete it when it is no longer needed. Encryption by sensitivity comes from sensitivity labels, blocking sharing is DLP, and searching content for legal requests is eDiscovery.
Question 9 of 10 · Describe the concepts of security, compliance, and identity
What are the three principles of zero trust?
Microsoft's zero trust model rests on three principles: verify explicitly using all available signals, use least privilege access, and assume breach. Trusting the internal network or authorizing by location is the perimeter model zero trust replaces, and confidentiality, integrity and availability form the CIA triad rather than zero trust principles.
Question 10 of 10 · Describe the capabilities of Microsoft Entra
What is the benefit of SSO for security?
With single sign-on, users authenticate once to a central identity provider, so they manage fewer passwords and are less likely to reuse or write them down, and access can be removed in one place. SSO does not make each app check identity separately, it still requires authentication, and it does not rely on shared accounts.
0 of 10
Describe the concepts of security, compliance, and identity
Describe the capabilities of Microsoft Entra
Describe the capabilities of Microsoft security solutions
Describe the capabilities of Microsoft compliance solutions
Which domains cost you the points? Members see a breakdown by domain and a study plan built from it.