SC-200 Governance & Compliance 3

Question 1

A security team needs to continuously monitor resource configurations against CIS benchmarks. Which Microsoft service provides this capability natively?

Accepted Answer

Microsoft Defender for Cloud with security policies

Answer

Microsoft Defender for Cloud provides built-in security policies mapped to CIS benchmarks and continuously assesses resource compliance against them.

Question 2

An analyst needs to review all changes made to Azure Role-Based Access Control (RBAC) assignments in the last 30 days. Where should they look?

Accepted Answer

Azure Activity Log filtered by role assignment operations

Answer

Azure Activity Log captures all management-plane operations including RBAC role assignment changes, filterable by operation type and time range.

Question 3

Which Sentinel data connector is required to ingest Azure Active Directory audit and sign-in logs into Microsoft Sentinel?

Accepted Answer

Azure Active Directory connector

Answer

The Azure Active Directory data connector in Sentinel ingests AAD audit logs and sign-in logs for identity-related compliance monitoring.

Question 4

A compliance requirement mandates that privileged access to Azure resources must use multi-factor authentication. Which tool enforces this at the policy level?

Accepted Answer

Azure AD Conditional Access policy

Answer

Azure AD Conditional Access policies can require MFA for privileged roles and high-risk sign-ins, enforcing authentication standards at the identity plane.

Question 5

In the context of SC-200, what is the purpose of the MITRE ATT&CK framework mapping in Microsoft Sentinel analytics rules?

Accepted Answer

To categorize detections by adversary tactics and techniques for coverage assessment

Answer

Mapping analytics rules to MITRE ATT&CK tactics and techniques helps SOC teams assess detection coverage and identify gaps across the attack lifecycle.

(SC-200) Microsoft Security Operations Analyst Practice Test

(SC-200) Microsoft Security Operations Analyst Practice Test

SC-200 Governance & Compliance 3