What is the purpose of an Azure Policy initiative?

To provide a dashboard for monitoring virtual machine performance

To manage user roles and permissions in Azure Active Directory

To group multiple policies together to achieve a broader compliance goal

To create a virtual network and subnets

Your company has a mix of Azure VMs and on-premises servers. The security team wants a single dashboard that shows security recommendations and compliance status for both environments, and they want to enforce consistent security policies across all resources. What should you configure?

Enable Microsoft Defender for Cloud on the Azure subscription and connect the on-premises servers via Azure Arc.

Configure Azure Policy with a custom initiative and assign it only to the Azure subscription.

Deploy Azure Sentinel and connect both Azure and on-premises log sources.

Use Microsoft Intune to manage security baselines for all servers.

A company has a mix of Azure resources and on-premises servers. They want to enforce a security policy that requires all servers to have a specific security configuration. The on-premises servers are not currently managed by Azure. What should they do to include the on-premises servers in the policy enforcement?

Create a VPN connection to the on-premises network and then assign the policy.

Onboard the on-premises servers to Azure Arc and then assign the Azure Policy initiative to the Arc-enabled servers.

Use Microsoft Intune to enforce the policy on on-premises servers.

Install the Azure Monitor agent on the on-premises servers.

A security team wants to prioritize which security recommendations to implement first. They want to focus on recommendations that have the highest potential to improve their secure score. What should they use?

The secure score controls in Defender for Cloud

Microsoft Entra ID access reviews

A security administrator wants to improve the organization's security posture by reducing the attack surface of Azure VMs. They notice that many VMs have unnecessary open management ports. What should they use to identify and remediate this issue?

Microsoft Defender for Cloud recommendations

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 3Objective 2

Describe Security Management Capabilities of Azure SC-900 Practice Questions (Page 4)

Part of the Describe the capabilities of Microsoft security solutions domain, which accounts for 35–40% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

35–40%of the exam

Questions 16–20

16foundation · easy
What is the purpose of an Azure Policy initiative?
Select an answer first
17application · medium
Your company has a mix of Azure VMs and on-premises servers. The security team wants a single dashboard that shows security recommendations and compliance status for both environments, and they want to enforce consistent security policies across all resources. What should you configure?
Select an answer first
18expert · hard
A company has a mix of Azure resources and on-premises servers. They want to enforce a security policy that requires all servers to have a specific security configuration. The on-premises servers are not currently managed by Azure. What should they do to include the on-premises servers in the policy enforcement?
Select an answer first
19application · medium
A security team wants to prioritize which security recommendations to implement first. They want to focus on recommendations that have the highest potential to improve their secure score. What should they use?
Select an answer first
20application · medium
A security administrator wants to improve the organization's security posture by reducing the attack surface of Azure VMs. They notice that many VMs have unnecessary open management ports. What should they use to identify and remediate this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.