A security team wants to track which recommendations have been remediated and which are still open. Which feature in Microsoft Defender for Cloud provides this information?

The Recommendations page, which shows the status of each recommendation

The Inventory page, which lists all resources

The Security alerts page, which shows detected threats

The Activity log, which records all user actions

A security team wants to add the CIS Microsoft Azure Foundations Benchmark to their subscription in Microsoft Defender for Cloud. What is the first step they should take?

Navigate to the Compliance page and select 'Manage compliance standards'

Assign the standard to a resource group

Create a new Azure Policy initiative

Enable Defender for Cloud's enhanced security features

What is the primary purpose of the Inventory feature in Microsoft Defender for Cloud?

To generate compliance reports for regulatory frameworks

To provide a centralized view of all resources and their security posture

To automatically remediate all security issues in the environment

To monitor network traffic between resources

In Microsoft Defender for Cloud, what does the Secure Score represent?

The total number of security controls that are enabled in the subscription

The number of security incidents detected in the last 30 days

The percentage of resources that are currently healthy

A numerical value that indicates the overall security posture based on the completion of security recommendations

A company has 500 Azure VMs and 20 AWS EC2 instances connected to Microsoft Defender for Cloud. The Secure Score is 72%. The security team wants to prioritize remediation efforts based on the highest potential score improvement with the least effort. Which action should the security team take first?

Remediate all recommendations with a 'High' severity rating regardless of the number of affected resources.

Enable all Defender plans to automatically remediate all security issues without manual intervention.

Review the Secure Score recommendations sorted by potential score increase and implement the top recommendations that affect the most resources.

Use the Inventory filter to list all unhealthy resources and manually remediate each one in alphabetical order.

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 2

Manage Security Posture by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 6)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

30–35%of the exam

Questions 26–30

26foundation · easy
A security team wants to track which recommendations have been remediated and which are still open. Which feature in Microsoft Defender for Cloud provides this information?
Select an answer first
27foundation · easy
A security team wants to add the CIS Microsoft Azure Foundations Benchmark to their subscription in Microsoft Defender for Cloud. What is the first step they should take?
Select an answer first
28foundation · easy
What is the primary purpose of the Inventory feature in Microsoft Defender for Cloud?
Select an answer first
29foundation · easy
In Microsoft Defender for Cloud, what does the Secure Score represent?
Select an answer first
30application · medium
A company has 500 Azure VMs and 20 AWS EC2 instances connected to Microsoft Defender for Cloud. The Secure Score is 72%. The security team wants to prioritize remediation efforts based on the highest potential score improvement with the least effort. Which action should the security team take first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.