Describe Security Management Capabilities of Azure SC-900 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company runs a web application on Azure VMs. They want to detect and respond to threats such as suspicious logins, malware, and brute-force attacks against the VMs. They also want to receive security alerts in a central dashboard. Which Microsoft Defender for Cloud feature should they enable?

   • ADefender for Storage
   • BDefender for App Service
   • CDefender for Servers
   • DDefender for Key Vault
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company wants to enforce a policy that requires all Azure SQL databases to have auditing enabled. They also want to see a compliance report showing which databases are non-compliant. What should they use?

   • AAzure Policy with audit effect
   • BMicrosoft Defender for Cloud workload protection
   • CAzure SQL threat detection
   • DAzure Monitor logs
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is planning to migrate a legacy application to Azure. The application has known vulnerabilities and cannot be patched immediately. The security team wants to use Microsoft Defender for Cloud to reduce the risk during the migration. Which combination of actions is most effective?

   • AEnable only the free CSPM features
   • BUse Azure Firewall to block all inbound traffic
   • CEnable Defender for Servers, apply Azure Policy to restrict network exposure, and use Defender for Cloud recommendations to monitor for further issues
   • DDeploy Microsoft Sentinel to monitor logs
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How are security policies used in Azure to enforce compliance?

   • ABy automatically remediating all security issues without human intervention
   • BBy defining rules that can be applied to resources to ensure they meet security requirements
   • CBy encrypting all data at rest and in transit
   • DBy blocking all external access to Azure resources
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A large enterprise has multiple Azure subscriptions and wants to implement a consistent security baseline across all of them. They need to enforce specific resource configurations and also receive a unified view of security recommendations and compliance. The team has limited administrative overhead and wants to avoid managing policies per subscription. What should they do?

   • ACreate a separate Azure Policy initiative for each subscription and assign them individually.
   • BCreate an Azure Policy initiative and assign it at the management group level, then use Microsoft Defender for Cloud to view recommendations and compliance across all subscriptions.
   • CUse Azure Blueprints to assign policies to each subscription manually.
   • DEnable Microsoft Defender for Cloud only on the primary subscription and rely on its recommendations for all subscriptions.
   Reveal Solution Discussion Select an answer first