Free SC-900 flashcards

Which CSPM plan in Defender for Cloud is free and enabled by default on every onboarded subscription?

Foundational CSPM. Defender for Cloud offers two CSPM plans: Foundational CSPM is free and switched on by default for all onboarded subscriptions and accounts, while Defender CSPM is the paid plan that adds advanced posture capabilities.

Defender CSPM is the posture plan that comes switched on for free on onboarded subscriptions.

Defender CSPM is the paid plan that adds advanced features such as attack path analysis and risk prioritisation, so it is not the free option enabled by default that a no-cost scenario requires.

Within the Microsoft Entra product family, what role does Microsoft Entra ID play?

Microsoft Entra ID is the foundational product of the family: a cloud-based identity and access management service that provides authentication, policy enforcement, and protection for users, devices, apps, and resources.

Microsoft Entra ID is a managed domain service that provides group policy, LDAP, and Kerberos for legacy applications.

Group policy, LDAP, and Kerberos for legacy apps describe Microsoft Entra Domain Services, a separate product in the family, not Microsoft Entra ID itself.

In Microsoft Purview, which classification capability is trained on sample content so it can recognise a content category automatically?

A trainable classifier. You give it samples to evaluate and it learns to recognise that type of content, after which it can identify matching items for use in solutions such as Office sensitivity labels and retention label policies. This handles categories that simple keyword or pattern rules cannot reliably catch.

A sensitive information type learns to recognise a content category by being shown example documents.

A sensitive information type matches known patterns of data, such as bank account numbers, and is an automated pattern-matching method. It is not trained from samples the way a trainable classifier is, so it cannot learn a fuzzy content category from examples.

In the cloud shared responsibility model, which area stays with the customer across on-premises, IaaS, PaaS, and SaaS alike?

Data and identities. For every cloud deployment type you own your data and identities, and data, accounts, and access management remain your responsibility regardless of the model.

The customer is responsible for maintaining the physical hosts in every deployment type.

Physical hosts are a Microsoft responsibility in IaaS, PaaS, and SaaS; only on-premises leaves them with the customer, so they are not always retained.