Design Solutions for Regulatory Compliance SC-100 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is required to comply with the Azure Security Benchmark (ASB). They have enabled Defender for Cloud and assigned the ASB initiative. However, they are seeing many non-compliant resources. The security team wants to automatically remediate as many issues as possible without manual intervention, but they are concerned about breaking existing workloads. What should they do?

   • AUse Defender for Cloud's recommendations to manually remediate each issue.
   • BExclude non-compliant resources from the policy scope.
   • CEnable auto-remediation for policies that have DeployIfNotExists effects, starting with low-risk controls.
   • DChange all policy effects to Deny to prevent non-compliant resources.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A security architect wants to validate that Azure resources meet the NIST SP 800-53 controls. Which action should be taken in Microsoft Defender for Cloud?

   • AConfigure adaptive application controls
   • BAdd the NIST SP 800-53 regulatory compliance standard
   • CRun a vulnerability scan
   • DEnable just-in-time VM access
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A retail company must comply with PCI DSS. They use Microsoft Defender for Cloud to assess their Azure environment. The security team wants to identify which security controls are failing against the PCI DSS benchmark. What should they use in Defender for Cloud?

   • AThe secure score recommendations page filtered by 'PCI DSS'.
   • BThe inventory page to list all resources and their compliance state.
   • CThe regulatory compliance dashboard with the PCI DSS 3.2.1 standard added.
   • DThe workbooks section to create a custom compliance report.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A multinational company must validate its Azure environment against the CIS Microsoft Azure Foundations Benchmark. The security team has enabled Defender for Cloud and wants to see a single score that reflects compliance with CIS controls. They also need to track progress over time. What should you configure?

   • AUse Microsoft Purview Compliance Manager and add the CIS benchmark as a custom assessment.
   • BIn Defender for Cloud, enable the CIS benchmark as a regulatory compliance standard and review the compliance score in the regulatory compliance dashboard.
   • CCreate a custom initiative in Azure Policy that includes all CIS controls and assign it to the root management group.
   • DEnable Azure Security Center's (legacy) secure score and compare it to the CIS benchmark manually.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is subject to the Sarbanes-Oxley Act (SOX) and must ensure that financial data is protected. They use Azure and Microsoft 365. The compliance team needs to identify which controls are required and then implement them. What should they do first?

   • APerform a compliance requirements analysis to map SOX controls to Azure and Microsoft 365 capabilities.
   • BCreate sensitivity labels for financial data.
   • CAssign Azure Policy to enforce encryption on all resources.
   • DEnable Defender for Cloud's regulatory compliance dashboard for SOX.
   Reveal Solution Discussion Select an answer first