SC-900 Microsoft Defender for Cloud 3

Question 1

How does Microsoft Defender for Cloud extend protection to AWS environments?

Accepted Answer

Through native AWS connectors that extend CSPM and workload protection to AWS resources without requiring Azure Arc

Answer

It requires deploying Azure Arc agents on all AWS EC2 instances before protection is available

Answer

AWS environments can only be monitored with read-only API calls providing limited visibility

Answer

AWS protection requires purchasing a separate Microsoft product distinct from Defender for Cloud

Question 2

What is a security initiative in Microsoft Defender for Cloud?

Accepted Answer

A collection of Azure Policy definitions grouped together to achieve a specific security or compliance goal

Answer

A quarterly security awareness campaign for end users

Answer

A manual penetration testing engagement authorized by Microsoft

Answer

A set of network firewall rules applied to a virtual network

Question 3

What does the Attack Path Analysis feature in Microsoft Defender for Cloud do?

Accepted Answer

Identifies potential paths attackers could exploit to reach critical assets and prioritizes remediations to block them

Answer

Reviews logs from past security incidents to reconstruct attacker movements

Answer

Simulates real attacks against your infrastructure to test security controls

Answer

Analyzes network routing paths between Azure resources for performance optimization

Question 4

What is the purpose of File Integrity Monitoring (FIM) in Microsoft Defender for Cloud?

Accepted Answer

To track changes to OS files, Windows registry, and application software that may indicate an attack or compromise

Answer

To monitor available storage capacity and usage trends across Azure file shares

Answer

To enforce data classification and sensitivity labeling policies on stored files

Answer

To detect and remove duplicate files across Azure Storage accounts

Question 5

How does Microsoft Defender for Cloud use Azure Policy?

Accepted Answer

It uses Azure Policy to continuously assess resources against security configurations and can enforce remediations automatically

Answer

Azure Policy is a completely separate product with no technical integration with Defender for Cloud

Answer

Azure Policy only reads Defender for Cloud data but cannot enforce any security settings

Answer

Defender for Cloud replaces Azure Policy with its own proprietary policy engine

Question 6

What is the Microsoft Cloud Security Benchmark (MCSB)?

Accepted Answer

Microsoft's prescriptive cloud security guidance that maps controls to common compliance frameworks like CIS and NIST

Answer

A standardized performance benchmark comparing Azure against other cloud providers

Answer

A pricing comparison tool for evaluating cloud security product costs

Answer

A professional certification exam for Microsoft cloud security administrators

Question 7

How does Microsoft Defender for Cloud correlate security alerts to reduce analyst fatigue?

Accepted Answer

It uses AI to automatically group related individual alerts into security incidents representing attack campaigns

Answer

It requires manual analyst review and grouping of all alerts into incidents

Answer

Alerts are forwarded to Azure Sentinel only, which handles all correlation

Answer

Defender for Cloud suppresses low-priority alerts based on static threshold rules only