Describe Security Management Capabilities of Azure SC-900 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement accurately describes Microsoft Defender for Cloud?

   • AIt is a unified security management and threat protection system for cloud and hybrid workloads
   • BIt is a security management tool that only works for Azure virtual machines
   • CIt is a tool for monitoring network traffic and blocking malicious packets in real time
   • DIt is a compliance reporting tool that only generates audit reports for regulatory standards
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company has enabled Microsoft Defender for Cloud with the Defender for Servers plan. They are receiving a high volume of security alerts, many of which are false positives. The security team is overwhelmed and wants to reduce noise while still detecting real threats. What should they do?

   • AIncrease the alert severity threshold to only show high severity alerts.
   • BDisable the Defender for Servers plan to stop all alerts.
   • CUse alert suppression rules to suppress specific alerts that are known false positives, and review the remaining alerts.
   • DCreate an Azure Policy to block all security alerts.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company uses Microsoft Defender for Cloud to protect its Azure environment. The security team wants to receive immediate notifications when a high-severity security alert is triggered. What should they configure?

   • AAzure Service Health alerts
   • BAzure Monitor metric alerts
   • CMicrosoft Entra ID sign-in logs
   • DEmail notifications for security alerts in Defender for Cloud
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security team has a high secure score but is concerned about 'shadow IT' resources that are not properly monitored. They want to ensure that all Azure resources are continuously assessed for security misconfigurations. What is the most effective way to achieve this?

   • AEnable Microsoft Defender for Cloud at the management group level to ensure all subscriptions are covered
   • BUse Azure Resource Graph to periodically query for unmonitored resources
   • CUse Azure Policy to require Defender for Cloud to be enabled on all subscriptions
   • DEnable Defender for Cloud on each subscription individually
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   Your organization must demonstrate alignment with the CIS Microsoft Azure Foundations Benchmark. The security team wants to continuously monitor the environment and receive a compliance score. What should you configure in Microsoft Defender for Cloud?

   • AConfigure Azure Sentinel to collect audit logs and generate compliance reports.
   • BCreate a custom Azure Policy initiative based on the CIS benchmark.
   • CEnable Defender for Cloud's threat intelligence alerts.
   • DAdd the CIS benchmark as a regulatory compliance standard in the Defender for Cloud compliance dashboard.
   Reveal Solution Discussion Select an answer first