3.6 Identify and Describe Methods for Managing Custom and Out-Of-The-Box Compliance Standards / Controls, Assessments, and Reporting CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Your compliance officer needs a monthly report that shows the compliance percentage for each control in the 'Azure Security Benchmark' standard. The report should be automatically generated and sent to the officer's email on the first day of each month. What is the most efficient way to set this up?

   • ASchedule a compliance assessment and rely on the assessment email notification.
   • BCreate a custom standard with the same controls and schedule a report for it.
   • CRun a one-time assessment and manually export the results to a PDF to email.
   • DSchedule a compliance report for the Azure Security Benchmark with a monthly recurrence and email distribution.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   Your security team needs to receive a daily compliance report for the 'Azure Security Benchmark' at 6:00 AM. The report should include all assessment results from the previous day. What should you configure?

   • ASchedule a compliance report with a daily recurrence and set the time to 6:00 AM.
   • BConfigure an alert rule that triggers when the compliance score changes.
   • CCreate a custom standard and schedule a report for it.
   • DRun a compliance assessment every day at 6:00 AM and manually email the results.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   Your compliance officer wants to receive a weekly report every Friday at 5:00 PM. However, the compliance assessment that generates the data is scheduled to run every Friday at 4:00 PM. You are concerned that the assessment might not complete by 5:00 PM, leading to an incomplete report. What is the most reliable way to ensure the report includes the latest assessment data?

   • ARun the assessment manually on Friday morning and schedule the report for 5:00 PM.
   • BSchedule the report for 5:00 PM and accept that it might use data from the previous week if the assessment is slow.
   • CSchedule the report for a later time, such as 6:00 PM, to allow more time for the assessment to complete.
   • DSchedule the report to run after the assessment is confirmed complete, using a dependency or trigger.
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   Your company has a custom compliance standard that includes a control requiring all network security groups to have no inbound rules allowing 'Any' source. After a recent audit, you need to update this control to also require that no inbound rules allow port 3389 from the internet. What is the most direct way to implement this change?

   • AEdit the existing control in the custom standard to add the new requirement.
   • BDelete the existing standard and create a new one with the updated control.
   • CCreate a new custom standard and add the updated control to it.
   • DRun an assessment and manually note the new requirement in the report.
   Reveal Solution Discussion Select an answer first
6. 15application · easy

   You have just created a new custom compliance standard and added several controls to it. You need to see the current compliance status of your environment against this new standard. What is the most immediate action you can take?

   • AWait for the next scheduled assessment to run automatically.
   • BRun a compliance assessment against the new standard.
   • CGenerate a report without running an assessment.
   • DReview the Azure Policy compliance blade for the standard.
   Reveal Solution Discussion Select an answer first