Which feature of Microsoft Defender for Cloud provides real-time alerts when suspicious activity is detected in your cloud workloads?

Azure Policy integration for compliance

Security alerts and advanced threat protection

Network security group flow logs

What is the primary purpose of Microsoft Defender for Cloud?

To manage user identities and access permissions in Azure Active Directory

To provide a unified security management and threat protection system for cloud workloads

To provide a backup and disaster recovery solution for Azure virtual machines

To replace the need for a firewall in Azure virtual networks

A company has several Azure subscriptions. The security team wants to ensure that all subscriptions are covered by Microsoft Defender for Cloud and that security recommendations are visible in one place. What should they do?

Create a separate Defender for Cloud workspace for each subscription

Add all subscriptions to a management group and enable Defender for Cloud at that scope

Assign Azure Policy to each subscription individually

Use Azure Lighthouse to delegate access

An organization is required to comply with both ISO 27001 and the CIS Microsoft Azure Foundations Benchmark. They want to use a single tool to monitor compliance against both standards and receive recommendations for remediation. What should they do?

Create two separate Azure Policy initiatives, one for each standard.

Enable Defender for Cloud's threat detection for both standards.

Use Azure Sentinel to collect compliance data for both standards.

Add both ISO 27001 and CIS benchmark as standards in Microsoft Defender for Cloud's regulatory compliance dashboard.

Why is it important to adhere to security standards in a cloud environment?

To ensure that security controls meet industry best practices and regulatory requirements

To automatically encrypt all data without any configuration

To eliminate the need for continuous security monitoring

To guarantee that no security breaches will ever occur

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 3Objective 2

Describe Security Management Capabilities of Azure SC-900 Practice Questions (Page 7)

Part of the Describe the capabilities of Microsoft security solutions domain, which accounts for 35–40% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

35–40%of the exam

Questions 31–35

31foundation · easy
Which feature of Microsoft Defender for Cloud provides real-time alerts when suspicious activity is detected in your cloud workloads?
Select an answer first
32foundation · easy
What is the primary purpose of Microsoft Defender for Cloud?
Select an answer first
33application · medium
A company has several Azure subscriptions. The security team wants to ensure that all subscriptions are covered by Microsoft Defender for Cloud and that security recommendations are visible in one place. What should they do?
Select an answer first
34expert · hard
An organization is required to comply with both ISO 27001 and the CIS Microsoft Azure Foundations Benchmark. They want to use a single tool to monitor compliance against both standards and receive recommendations for remediation. What should they do?
Select an answer first
35foundation · easy
Why is it important to adhere to security standards in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.