How do security recommendations in Microsoft Defender for Cloud help improve your security posture?

By resetting all user passwords on a regular basis

By automatically blocking all malicious traffic

By providing actionable steps to remediate identified security weaknesses

By creating backup copies of all your data

A company has a large Azure environment with many resources. The security team wants to implement security recommendations but has limited staff. They want to automate remediation where possible, but they are concerned about unintended consequences of automatic changes. What should they do?

Use Azure Policy with 'deployIfNotExists' effect for safe remediations and manual remediation for high-risk changes

Automatically remediate all recommendations using Defender for Cloud's 'Fix' button

Use Azure Blueprints to apply all fixes

Ignore recommendations that require manual effort

A security analyst notices that the secure score in Microsoft Defender for Cloud has decreased over the past week. The analyst wants to identify the specific misconfigurations that contributed to the decrease and understand the potential impact of each issue. What should the analyst review?

The security recommendations list

A security team is using Microsoft Defender for Cloud and sees a recommendation to enable just-in-time (JIT) VM access. However, the team is concerned that JIT might block legitimate administrative access if not configured correctly. They want to implement JIT while minimizing the risk of locking out administrators. What should they do?

Ignore the recommendation because JIT is too risky.

Enable JIT and configure the allowed source IP ranges and ports for each VM, and test with a non-production VM first.

Enable JIT without configuring source IP ranges to allow all traffic.

Enable JIT and then immediately disable it after a week.

What is the primary role of Cloud Security Posture Management (CSPM) in a cloud environment?

To encrypt all data stored in the cloud automatically

To continuously assess and improve the security posture of cloud resources

To provide a backup solution for all cloud workloads

To block all inbound and outbound network traffic by default

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 3Objective 2

Describe Security Management Capabilities of Azure SC-900 Practice Questions (Page 5)

Part of the Describe the capabilities of Microsoft security solutions domain, which accounts for 35–40% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

35–40%of the exam

Questions 21–25

21foundation · easy
How do security recommendations in Microsoft Defender for Cloud help improve your security posture?
Select an answer first
22expert · hard
A company has a large Azure environment with many resources. The security team wants to implement security recommendations but has limited staff. They want to automate remediation where possible, but they are concerned about unintended consequences of automatic changes. What should they do?
Select an answer first
23application · medium
A security analyst notices that the secure score in Microsoft Defender for Cloud has decreased over the past week. The analyst wants to identify the specific misconfigurations that contributed to the decrease and understand the potential impact of each issue. What should the analyst review?
Select an answer first
24expert · hard
A security team is using Microsoft Defender for Cloud and sees a recommendation to enable just-in-time (JIT) VM access. However, the team is concerned that JIT might block legitimate administrative access if not configured correctly. They want to implement JIT while minimizing the risk of locking out administrators. What should they do?
Select an answer first
25foundation · easy
What is the primary role of Cloud Security Posture Management (CSPM) in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.