Select the answer that correctly completes the sentence.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

What are customers responsible for when evaluating security in a software as a service (SaaS) cloud services model?

• A.applications
• B.network controls
• C.operating systems
• D.accounts and identities

Comment: *

Name: *

Email: *

Verification: *

Select the answer that correctly completes the sentence.

Correct Answer:

In Microsoft's SCI guidance, Insider risk management is a Microsoft Purview capability surfaced and administered from the Microsoft Purview compliance portal. The official description states that Insider risk management "helps you minimize internal risks by enabling you to detect, investigate, and act on risky activities in your organization." Microsoft further clarifies access and configuration by directing admins to
"use the Microsoft Purview compliance portal to configure and manage insider risk policies, alerts, and investigations," and that you can "go to the Microsoft Purview compliance portal and select Insider risk management" to start. These statements place the feature squarely in the compliance plane-not the Microsoft
365 admin center (tenant-wide service management), not the Microsoft 365 Defender portal (threat protection and incident response), and not Microsoft Defender for Cloud Apps (app discovery and cloud app protection).
In the SCI learning path, Insider risk is consistently grouped with Microsoft Purview solutions (Information Protection, DLP, eDiscovery, and Audit), emphasizing compliance workflows, risk indicators, policy tuning, and case management. Therefore, the correct completion of the sentence "Insider risk management is configured from the" is the Microsoft Purview compliance portal, where administrators create policies, review alerts, investigate user activity timelines, and take appropriate remediation actions within a compliance- centric experience.

Comment: *

Name: *

Email: *

Verification: *

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Microsoft Purview Insider Risk Management is designed to identify, investigate, and act on risky activities by internal users-for example data exfiltration, data theft, policy violations, and user sentiments/signals that may indicate insider risk. SCI documentation explains that Insider Risk policies analyze signals such as file downloads, copying to USB, sharing to personal cloud, printing, or anomalous activity following events like performance warnings or resignation notices. Because it focuses on insider behaviors, it is not used to detect external threat vectors like phishing scams; those are addressed by Microsoft Defender for Office 365 and related anti-phishing protections-hence statement 1 is No. The solution is accessed in the Microsoft Purview (formerly Microsoft 365) compliance center under Insider risk management, where admins configure policies, alerts, and workflows-so statement 2 is Yes. Finally, its core purpose includes detecting and investigating potential data leaks by disgruntled or departing employees, using built-in policy templates (e.g., Data theft by departing employee, Data leaks), making statement 3 Yes.

Comment: *

Name: *

Email: *

Verification: *

Select the answer that correctly completes the sentence.

Correct Answer:

Explanation:

Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

Comment: *

Name: *

Email: *

Verification: *