Manage Security Posture by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A security analyst reviews the Secure Score in Microsoft Defender for Cloud and notices that the score is lower than expected. Which action would most directly help improve the Secure Score?

   • AReviewing the list of security recommendations and remediating the ones that are marked as unhealthy
   • BDeleting resources that are not compliant with security policies
   • CEnabling more security alerts in the subscription
   • DChanging the pricing tier of Defender for Cloud to a higher tier
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A healthcare organization must demonstrate compliance with HIPAA HITRUST for its Azure workloads. They have enabled Microsoft Defender for Cloud and see the regulatory compliance dashboard, but the HITRUST standard is not listed. What should the administrator do to assess compliance against HITRUST?

   • AAdd the HITRUST standard from the compliance standards gallery in Defender for Cloud and assign it to the relevant subscriptions.
   • BContact Microsoft support to request the HITRUST standard be added to the tenant.
   • CEnable the Defender for Cloud 'Regulatory Compliance' plan to automatically add all available standards.
   • DCreate a custom standard using the Azure Policy initiative for HITRUST and assign it to the management group.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which cloud providers can be integrated with Microsoft Defender for Cloud for multi-cloud security monitoring?

   • AOracle Cloud and IBM Cloud
   • BAlibaba Cloud and Tencent Cloud
   • CSalesforce and ServiceNow
   • DAmazon Web Services (AWS) and Google Cloud Platform (GCP)
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A company needs to add a custom compliance standard that includes specific regulatory requirements not covered by built-in standards. What should they do in Microsoft Defender for Cloud?

   • AModify the built-in standards to include the new requirements
   • BSubmit a request to Microsoft to add the standard
   • CUse the Regulatory Compliance dashboard to create a new standard
   • DCreate a custom initiative in Azure Policy and add it as a custom standard in Defender for Cloud
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is required to comply with both 'CIS Microsoft Azure Foundations Benchmark' and 'ISO 27001'. They have enabled both standards in Defender for Cloud. They notice that the compliance dashboard shows a lower percentage for ISO 27001 than for CIS. They have already remediated all recommendations that are common to both standards. What is the most likely reason for the lower ISO 27001 compliance?

   • AThe ISO 27001 standard is not supported in the region where the resources are deployed.
   • BThe ISO 27001 standard is not enabled for all subscriptions, so some resources are not assessed.
   • CThe Secure Score is lower because ISO 27001 has more recommendations than CIS.
   • DISO 27001 includes additional controls that are not covered by CIS, and those controls have not been remediated yet.
   Reveal Solution Discussion Select an answer first