SC-900 Microsoft Defender for Cloud 1 — Questions and Answers
Question 1: What is the primary purpose of Microsoft Defender for Cloud?
- A unified infrastructure security management system that strengthens security posture and protects workloads across hybrid cloud environments (Correct answer)
- An endpoint detection and response solution exclusively for Windows devices
- A password management and identity verification tool for Azure administrators
- A tool exclusively for monitoring inbound and outbound network traffic
Correct answer: A unified infrastructure security management system that strengthens security posture and protects workloads across hybrid cloud environments
Microsoft Defender for Cloud provides unified security management and advanced threat protection across Azure, on-premises, and multicloud workloads.
Question 2: What does CSPM stand for in the context of Microsoft Defender for Cloud?
- Cloud Security Posture Management (Correct answer)
- Cyber Security Protocol Management
- Cloud System Performance Monitor
- Compliance Security Policy Management
Correct answer: Cloud Security Posture Management
CSPM stands for Cloud Security Posture Management, which continuously assesses and improves the security posture of cloud environments.
Question 3: What is the Secure Score in Microsoft Defender for Cloud?
- A numerical representation of an organization's current security posture based on assessed controls (Correct answer)
- A password complexity strength indicator for Azure AD accounts
- A certification score for meeting regulatory compliance requirements
- A performance metric measuring the availability of Azure virtual machines
Correct answer: A numerical representation of an organization's current security posture based on assessed controls
The Secure Score aggregates all security findings into a single score that gives a snapshot of your current security situation — a higher score means lower risk.
Question 4: Which environments can Microsoft Defender for Cloud protect?
- Azure, on-premises, and multicloud environments including AWS and Google Cloud (Correct answer)
- Only Azure-hosted resources and services
- Only Windows-based servers regardless of where they are hosted
- Only containerized applications running in Azure Kubernetes Service
Correct answer: Azure, on-premises, and multicloud environments including AWS and Google Cloud
Defender for Cloud extends its protection to Azure, on-premises servers, and multicloud environments like AWS and Google Cloud via native connectors.
Question 5: What capabilities does the free tier of Microsoft Defender for Cloud provide?
- Foundational Cloud Security Posture Management (CSPM) including Secure Score and security recommendations (Correct answer)
- Full workload protection for all Azure services at no cost
- Advanced threat detection and automated incident response
- Complete regulatory compliance dashboards for all major standards
Correct answer: Foundational Cloud Security Posture Management (CSPM) including Secure Score and security recommendations
The free foundational CSPM tier provides Secure Score, security recommendations, and basic posture assessment without paid workload protection plans.
Question 6: What is Cloud Workload Protection (CWP) in Microsoft Defender for Cloud?
- Advanced threat detection and protection for specific Azure service types such as servers, databases, and containers (Correct answer)
- A backup and disaster recovery solution for cloud-hosted applications
- A network traffic filtering and firewall management tool for cloud resources
- A compliance reporting tool for tracking cloud workload regulatory status
Correct answer: Advanced threat detection and protection for specific Azure service types such as servers, databases, and containers
CWP provides advanced threat detection, security alerts, and active protection for specific workload types beyond basic posture assessment.
Question 7: What standard does Microsoft Defender for Cloud primarily use to generate security recommendations?
- Microsoft Cloud Security Benchmark (MCSB) (Correct answer)
- NIST SP 800-53 exclusively
- ISO 27001 only
- GDPR compliance requirements
Correct answer: Microsoft Cloud Security Benchmark (MCSB)
Defender for Cloud uses the Microsoft Cloud Security Benchmark (MCSB) as the default initiative to generate actionable security recommendations.
SC-900 Microsoft Defender for Cloud 1
What is the primary purpose of Microsoft Defender for Cloud?