Correct Answer:

Explanation:

Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service. Reference:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

Correct Answer:

Explanation:

In the Microsoft Purview compliance portal, administrators can tailor the user experience to match the roles and responsibilities of users in the organization. One key feature provided to enable this customization is the
"Customize navigation" option.
According to Microsoft's Security, Compliance, and Identity (SCI) learning paths and SC-series certification materials (especially SC-400 and SC-900), the Customize navigation option in the Microsoft Purview compliance portal is used to add, remove, or rearrange features in the navigation pane. This is especially useful for compliance or security administrators who want to streamline the portal for ease of use or hide sections that are not relevant to their work.
The SCI documentation states:
"The Microsoft Purview compliance portal provides a Customize navigation option that allows admins to personalize the left-hand navigation pane. This feature supports removing unused features or rearranging the order in which services appear, improving navigation efficiency and reducing clutter." This setting does not change permissions or access to features but purely controls the visibility and layout for users. The other listed options like Compliance Manager, Policies, and Settings are functional sections of the portal, but only " Customize navigation " is explicitly designed to manage the visual layout and visibility of the features shown in the portal ' s navigation pane.

Correct Answer:

Explanation:

Microsoft documents for Defender for Endpoint (MDE) describe it as an enterprise endpoint security platform that supports Windows 10/11, Windows Server, Linux, macOS, and mobile platforms (Android and iOS
/iPadOS). The platform provides threat and vulnerability management, attack surface reduction, next- generation protection, endpoint detection and response, and automated investigation and remediation across those supported operating systems. Because MDE supports Windows client operating systems and servers, it can also be used on Azure virtual machines that run supported Windows versions; onboarding methods include local scripts, Microsoft Endpoint Manager, or cloud integrations, allowing VM endpoints to receive the same protection and EDR capabilities as physical devices.
By contrast, malware scanning in SharePoint Online, OneDrive, and Microsoft Teams is provided by Microsoft Defender for Office 365 (Safe Attachments for SharePoint, OneDrive, and Teams)-a different service within the Microsoft 365 Defender family. This service analyzes files as they are uploaded or shared to detect and block malicious content in collaboration workloads, which is outside the scope of MDE's endpoint-focused protections. Therefore: Android protection (Yes), Azure VMs running Windows 10 (Yes), and SharePoint Online anti-virus protection by MDE (No, handled by Defender for Office 365).

Correct Answer:

Explanation:

In Microsoft Entra ID (formerly Azure AD), Managed Identities for Azure resources are the built-in way for an Azure resource to authenticate to other Azure services without storing credentials. Microsoft's documentation states: "Managed identities for Azure resources provide Azure services with an automatically managed identity in Azure Active Directory." It further distinguishes the two types and clarifies the one used here: "A system-assigned managed identity is enabled directly on an Azure service instance. When enabled, Azure creates an identity for the instance in Azure AD." Microsoft also emphasizes the lifecycle binding:
"This identity is tied to the lifecycle of that service instance and is deleted when the resource is deleted." Once enabled, the resource can call Azure services by requesting tokens: "You can use this identity to obtain Azure AD tokens for authentication to services that support Azure AD authentication." Because the prompt explicitly says "system-assigned", the correct completion is managed identity. The other options do not match Microsoft's definition: a user identity refers to a human user; a service principal is the underlying object applications use but isn't what Azure terms "system-assigned"; and an Azure AD-joined device pertains to device registration, not resource-to-service authentication. Therefore, the sentence correctly reads: "An Azure resource can use a system-assigned managed identity to access Azure services."