SC-100 Security Posture Management

Question 1

Which Microsoft service provides Cloud Security Posture Management (CSPM) capabilities to assess and improve security configurations across Azure, AWS, and GCP?

Accepted Answer

Microsoft Defender for Cloud

Answer

Microsoft Defender for Cloud provides CSPM capabilities including Secure Score, recommendations, and multi-cloud posture assessment across Azure, AWS, and GCP.

Question 2

What does Microsoft Secure Score measure?

Accepted Answer

An organization's security posture based on completed security recommendations

Answer

Microsoft Secure Score measures an organization's security posture by assigning points for completing recommended security actions across Microsoft 365 and Azure services.

Question 3

In Microsoft Defender for Cloud, what is the purpose of the 'Regulatory Compliance' dashboard?

Accepted Answer

To compare your environment against specific compliance standards such as CIS, PCI-DSS, and NIST

Answer

The Regulatory Compliance dashboard in Defender for Cloud maps your security controls to specific compliance standards and shows your compliance percentage against each framework.

Question 4

What is the primary difference between Microsoft Defender for Cloud's Foundational CSPM (free) tier and Defender CSPM (paid) tier?

Accepted Answer

The paid tier adds agentless scanning, attack path analysis, and data-aware security posture

Answer

Defender CSPM (paid) adds advanced capabilities such as agentless vulnerability scanning, attack path analysis, cloud security explorer, and data-aware security posture over the free foundational tier.

Question 5

A cybersecurity architect wants to identify lateral movement paths attackers could use across cloud resources. Which Defender for Cloud feature should they use?

Accepted Answer

Attack path analysis

Answer

Attack path analysis in Defender CSPM uses a graph-based algorithm to identify exploitable paths attackers could take across cloud resources, highlighting the most critical risks.

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Security Posture Management