SC-100 Security Posture Management 2

Question 1

A security architect is designing posture management for a hybrid environment. Which Defender for Cloud feature provides agentless assessment of on-premises servers onboarded through Azure Arc?

Accepted Answer

Agentless scanning available in Defender CSPM and Defender for Servers Plan 2

Answer

Agentless scanning in Defender CSPM and Defender for Servers Plan 2 can assess Azure Arc-onboarded machines without requiring an agent installed on the server.

Question 2

Which metric in Microsoft Defender for Cloud represents the maximum achievable Secure Score if all recommendations are remediated?

Accepted Answer

Max score

Answer

The Max score in Defender for Cloud represents the highest possible Secure Score if every recommendation within a security control is remediated.

Question 3

An architect needs to exempt a specific resource from a Defender for Cloud recommendation without affecting the overall Secure Score calculation for other resources. What should they configure?

Accepted Answer

Create an exemption rule on the recommendation for that specific resource

Answer

Exemption rules in Defender for Cloud allow specific resources or subscriptions to be excluded from a recommendation, either as mitigated or as a waiver, without disabling it globally.

Question 4

What is the role of 'security initiatives' in Microsoft Defender for Cloud?

Accepted Answer

They are collections of Azure Policy definitions grouped to achieve a specific security goal

Answer

Security initiatives in Defender for Cloud are collections of Azure Policy definitions assigned together to assess and enforce security standards across your environment.

Question 5

Which Defender for Cloud feature continuously monitors the security configuration of Azure resources and provides prioritized recommendations to reduce attack surface?

Accepted Answer

Continuous assessment with security recommendations

Answer

Continuous assessment in Defender for Cloud constantly evaluates resource configurations against the Microsoft Cloud Security Benchmark and provides prioritized remediation recommendations.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Security Posture Management 2