SC-100 Security Posture Management 3

Question 1

An organization uses multiple cloud providers. How does Microsoft Defender for Cloud support multi-cloud security posture management?

Accepted Answer

By connecting AWS and GCP environments via native connectors to provide unified posture visibility and recommendations

Answer

By requiring all workloads to be migrated to Azure first

Answer

By using a third-party CASB solution as an intermediary

Answer

By monitoring only network traffic from non-Azure clouds

Question 2

Which security posture concept involves continuously discovering all cloud assets, including shadow IT, to ensure nothing is unmonitored?

Accepted Answer

Cloud asset inventory and attack surface management

Answer

Threat intelligence integration

Answer

Vulnerability prioritization scoring

Answer

Security baseline enforcement

Question 3

A cybersecurity architect wants to enforce that all new storage accounts in Azure must have secure transfer (HTTPS) enabled. Which posture management approach should they use?

Accepted Answer

Assign an Azure Policy 'deny' effect to prevent creation of non-compliant storage accounts

Answer

Create a Defender for Cloud alert rule for storage accounts

Answer

Set up a Microsoft Sentinel analytics rule to detect HTTP access

Answer

Configure Defender for Storage threat detection

Question 4

In the context of SC-100, what is 'data-aware security posture' in Microsoft Defender for Cloud?

Accepted Answer

Identifying sensitive data stored in cloud resources and incorporating that context into posture risk prioritization

Answer

Monitoring data loss prevention policies in Microsoft Purview

Answer

Encrypting all data at rest in Azure storage accounts automatically

Answer

Tracking user data access patterns for insider threat detection

Question 5

Which governance capability in Microsoft Defender for Cloud helps ensure security recommendations are actioned promptly by assigning accountability?

Accepted Answer

Governance rules that assign owners and remediation due dates to recommendations

Answer

Security playbooks in Microsoft Sentinel

Answer

Azure Policy assignment with enforcement mode

Answer

Defender for Cloud alert assignment in the incidents queue

Question 6

A security architect is evaluating risk across thousands of cloud resources. Which Defender for Cloud capability uses contextual risk factors such as exposure, permissions, and sensitivity to prioritize critical security issues?

Accepted Answer

Risk-based prioritization using contextual risk factors in the Defender CSPM recommendations

Answer

Microsoft Secure Score ranking by category

Answer

CVSS scoring from vulnerability assessments

Answer

Alert severity levels in Microsoft Sentinel

Question 7

Which Microsoft Defender for Cloud feature allows security teams to visualize how cloud resources are connected and identify which misconfigurations pose the greatest combined risk?

Accepted Answer

Cloud Security Graph and Cloud Security Explorer

Answer

Security alerts correlation in Microsoft Sentinel

Answer

Azure Monitor network topology view

Answer

Microsoft Defender XDR incident graph