SC-100 Security Posture Management

Question 1

Which Microsoft service provides Cloud Security Posture Management (CSPM) capabilities to assess and improve security configurations across Azure, AWS, and GCP?

Accepted Answer

Microsoft Defender for Cloud

Answer

Microsoft Sentinel

Answer

Microsoft Entra ID Protection

Answer

Microsoft Defender for Endpoint

Question 2

What does Microsoft Secure Score measure?

Accepted Answer

An organization's security posture based on completed security recommendations

Answer

The number of active threats detected in the environment

Answer

The compliance percentage against a regulatory framework

Answer

The patch level of all devices in the organization

Question 3

In Microsoft Defender for Cloud, what is the purpose of the 'Regulatory Compliance' dashboard?

Accepted Answer

To compare your environment against specific compliance standards such as CIS, PCI-DSS, and NIST

Answer

To assign security policies to management groups

Answer

To generate incident reports for auditors automatically

Answer

To enforce Azure Policy definitions on all subscriptions

Question 4

What is the primary difference between Microsoft Defender for Cloud's Foundational CSPM (free) tier and Defender CSPM (paid) tier?

Accepted Answer

The paid tier adds agentless scanning, attack path analysis, and data-aware security posture

Answer

The free tier only monitors Azure while the paid tier monitors AWS and GCP

Answer

The free tier does not provide Secure Score

Answer

The paid tier includes Microsoft Sentinel integration

Question 5

A cybersecurity architect wants to identify lateral movement paths attackers could use across cloud resources. Which Defender for Cloud feature should they use?

Accepted Answer

Attack path analysis

Answer

Secure Score improvement actions

Answer

Just-in-time VM access

Answer

Adaptive application controls

Question 6

Which Azure construct allows a cybersecurity architect to apply a consistent set of security policies across multiple subscriptions simultaneously?

Accepted Answer

Management Groups with Azure Policy initiatives

Answer

Resource Groups

Answer

Azure Blueprints only

Answer

Subscription-level RBAC assignments

Question 7

What is 'cloud security explorer' in Microsoft Defender for Cloud used for?

Accepted Answer

Running graph-based queries to proactively identify security risks across cloud assets

Answer

Browsing Azure Marketplace for security solutions

Answer

Monitoring real-time alerts from connected cloud environments

Answer

Managing security agent deployments to virtual machines