What is the purpose of the secure score in Microsoft Defender for Cloud?

To indicate the number of security alerts generated in the last 24 hours

To measure your overall security posture based on completed recommendations

To show the performance of your virtual machines

To rank your organization against other companies in your industry

A company must comply with both the Azure Security Benchmark and a custom internal security standard. They want to avoid duplicate effort and ensure that both are continuously assessed. What should they do?

Use only the Azure Security Benchmark and manually track internal standards

Use Defender for Cloud's regulatory compliance dashboard to add both standards and monitor them together

Use Azure Blueprints to deploy both standards

Create two separate Azure Policy initiatives and assign them independently

Your organization must comply with the Payment Card Industry Data Security Standard (PCI DSS). The security team wants to monitor compliance continuously and receive a compliance score. What should they configure in Microsoft Defender for Cloud?

Use Azure Sentinel to collect PCI DSS audit logs.

Create a custom Azure Policy initiative for PCI DSS.

Enable Defender for Cloud's threat detection for VMs.

Add the PCI DSS 3.2.1 standard to the regulatory compliance dashboard.

A company runs a mix of Azure VMs, Azure SQL databases, and Azure Storage accounts. They want to enable advanced threat protection for all three resource types, but they have budget constraints and want to minimize costs while still covering all three. What should they do?

Enable only the Defender for Servers plan and rely on it to protect all resources.

Enable the Defender for Servers, Defender for Databases, and Defender for Storage plans in Microsoft Defender for Cloud.

Enable only the Defender for Databases plan and rely on it to protect all resources.

Enable only the Defender for Storage plan and rely on it to protect all resources.

A company wants to ensure that all new storage accounts in Azure are created with the 'Secure transfer required' setting enabled. They also want to be notified if any existing storage account does not comply. What should they configure?

Enable Microsoft Defender for Cloud's just-in-time VM access.

Configure Azure Security Center's adaptive application controls.

Use Azure Blueprints to define the storage account template.

Create an Azure Policy initiative that includes the 'Secure transfer to storage accounts should be enabled' policy and assign it to the subscription.

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 3Objective 2

Describe Security Management Capabilities of Azure SC-900 Practice Questions (Page 8)

Part of the Describe the capabilities of Microsoft security solutions domain, which accounts for 35–40% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

35–40%of the exam

Questions 36–40

36foundation · easy
What is the purpose of the secure score in Microsoft Defender for Cloud?
Select an answer first
37expert · hard
A company must comply with both the Azure Security Benchmark and a custom internal security standard. They want to avoid duplicate effort and ensure that both are continuously assessed. What should they do?
Select an answer first
38application · medium
Your organization must comply with the Payment Card Industry Data Security Standard (PCI DSS). The security team wants to monitor compliance continuously and receive a compliance score. What should they configure in Microsoft Defender for Cloud?
Select an answer first
39expert · hard
A company runs a mix of Azure VMs, Azure SQL databases, and Azure Storage accounts. They want to enable advanced threat protection for all three resource types, but they have budget constraints and want to minimize costs while still covering all three. What should they do?
Select an answer first
40application · medium
A company wants to ensure that all new storage accounts in Azure are created with the 'Secure transfer required' setting enabled. They also want to be notified if any existing storage account does not comply. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.