SC-900 Microsoft Defender for Cloud 3

Question 1

How does Microsoft Defender for Cloud extend protection to AWS environments?

Accepted Answer

Through native AWS connectors that extend CSPM and workload protection to AWS resources without requiring Azure Arc

Answer

Defender for Cloud includes native AWS connectors that automatically extend CSPM and specific workload protection plans to AWS resources.

Question 2

What is a security initiative in Microsoft Defender for Cloud?

Accepted Answer

A collection of Azure Policy definitions grouped together to achieve a specific security or compliance goal

Answer

A security initiative groups multiple Azure Policy definitions together to work toward a common security goal, such as meeting a specific compliance standard.

Question 3

What does the Attack Path Analysis feature in Microsoft Defender for Cloud do?

Accepted Answer

Identifies potential paths attackers could exploit to reach critical assets and prioritizes remediations to block them

Answer

Attack Path Analysis uses graph-based algorithms to discover and visualize potential attack paths through your environment so you can prioritize the most impactful fixes.

Question 4

What is the purpose of File Integrity Monitoring (FIM) in Microsoft Defender for Cloud?

Accepted Answer

To track changes to OS files, Windows registry, and application software that may indicate an attack or compromise

Answer

FIM monitors critical operating system files, registry settings, and application files for unexpected changes that could signal a breach or ongoing attack.

Question 5

How does Microsoft Defender for Cloud use Azure Policy?

Accepted Answer

It uses Azure Policy to continuously assess resources against security configurations and can enforce remediations automatically

Answer

Defender for Cloud leverages Azure Policy definitions and initiatives to continuously assess resources and can automatically enforce or deny non-compliant configurations.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Defender for Cloud 3