Purpose and usage of Microsoft Secure Score Flashcards
6 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Purpose and usage of Microsoft Secure Score flashcards as text
What is the primary function of Microsoft Secure Score?
Answer: To provide a numerical representation of security posture and offer improvement recommendations.
Microsoft Secure Score serves as a centralized dashboard and measurement of an organization's security posture. It provides visibility into security gaps and offers guided recommendations, known as improvement actions, to help organizations prioritize and reduce their attack surface.
In the context of Microsoft Secure Score, what is an 'improvement action'?
Answer: A recommended configuration task that will improve the security score when completed.
Improvement actions are the specific, actionable recommendations provided by Secure Score. Each action is tailored to the organization's environment and explains the threat it mitigates, the user impact, and the steps needed for implementation to improve the score.
An administrator enables multi-factor authentication (MFA) for all admin roles as recommended by an improvement action. When should they expect to see the Secure Score increase?
Answer: The score will update automatically, typically within 24-48 hours.
After an improvement action is implemented, Microsoft's services need time to detect and verify the configuration change. The Secure Score is not updated in real-time; it typically reflects the new, improved security posture within 24 to 48 hours.
Microsoft Secure Score provides a holistic view by providing recommendations across which set of categories?
Answer: Identity, Devices, and Apps.
Secure Score is comprehensive and provides a view of security posture across multiple domains. It includes scores and recommendations for Identity (Azure AD), Devices (Microsoft Defender for Endpoint), and Apps (such as Microsoft Defender for Cloud Apps).
Your organization uses a third-party tool to enforce a specific security control that is also listed as an improvement action in Secure Score. How should you handle this situation to ensure the score is accurate?
Answer: Mark the improvement action as 'Resolved through third party'.
Secure Score cannot always detect non-Microsoft compensating controls. To address this, it allows administrators to manually update the status of an improvement action to 'Resolved through third party' or 'Risk Accepted', ensuring the score more accurately reflects the true security posture.
How does the 'History' tab and benchmark comparison feature in Secure Score help security administrators?
Answer: By tracking score changes over time and comparing against similar organizations.
The history and benchmarking features are key for reporting and planning. Tracking the score over time demonstrates security improvement to leadership, while comparing the score against organizations of a similar size provides context and helps justify security investments.