SC-100 Security Posture Management 3

Question 1

An organization uses multiple cloud providers. How does Microsoft Defender for Cloud support multi-cloud security posture management?

Accepted Answer

By connecting AWS and GCP environments via native connectors to provide unified posture visibility and recommendations

Answer

Defender for Cloud supports multi-cloud CSPM through native connectors for AWS and GCP, providing unified Secure Score, recommendations, and compliance assessments across cloud providers.

Question 2

Which security posture concept involves continuously discovering all cloud assets, including shadow IT, to ensure nothing is unmonitored?

Accepted Answer

Cloud asset inventory and attack surface management

Answer

Cloud asset inventory and attack surface management ensures complete visibility into all deployed resources, including unsanctioned or shadow IT assets, which is foundational to effective posture management.

Question 3

A cybersecurity architect wants to enforce that all new storage accounts in Azure must have secure transfer (HTTPS) enabled. Which posture management approach should they use?

Accepted Answer

Assign an Azure Policy 'deny' effect to prevent creation of non-compliant storage accounts

Answer

Azure Policy with a 'deny' effect proactively prevents non-compliant resources from being created, enforcing the secure transfer requirement at provisioning time rather than detecting it after the fact.

Question 4

In the context of SC-100, what is 'data-aware security posture' in Microsoft Defender for Cloud?

Accepted Answer

Identifying sensitive data stored in cloud resources and incorporating that context into posture risk prioritization

Answer

Data-aware security posture discovers sensitive data across cloud storage resources and uses that sensitivity context to prioritize security risks — for example, elevating the risk of a misconfigured storage account that contains PII.

Question 5

Which governance capability in Microsoft Defender for Cloud helps ensure security recommendations are actioned promptly by assigning accountability?

Accepted Answer

Governance rules that assign owners and remediation due dates to recommendations

Answer

Governance rules in Defender for Cloud assign specific owners to recommendations with remediation due dates, enabling accountability tracking and SLA reporting for posture improvement.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Security Posture Management 3