AZ-500 Manage identity and access Practice Question
A company uses Microsoft Defender for Cloud. The security team wants to receive a weekly email digest that includes the current Secure Score, the number of healthy and unhealthy resources, and a list of top recommendations. Which Defender for Cloud feature should they configure?
⚠ Common exam trap
Many exam-takers confuse the weekly digest feature with Continuous Export, assuming that exporting data to a third-party system is the only way to get a summary, but Defender for Cloud has a native email notification feature specifically for this purpose.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Email notifications for alerts and weekly digests
Microsoft Defender for Cloud provides a built-in 'Email notifications for alerts and weekly digests' feature that allows security teams to configure a weekly email containing the current Secure Score, the number of healthy and unhealthy resources, and a list of top recommendations. This feature is specifically designed to deliver a summary of the security posture directly to recipients without requiring manual export or custom automation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Regulatory Compliance dashboard
Why it's wrong here
The Regulatory Compliance dashboard is an interactive view within Microsoft Defender for Cloud that aggregates your compliance posture against built-in or custom regulatory standards, using Azure Policy initiatives to continuously assess resource configurations. It provides a detailed breakdown of pass/fail controls, but it is purely a reporting and monitoring surface. It has no built-in capability to generate or send email digests, so it cannot meet the team's requirement for automated weekly summaries.
- ✗
Security policies
Why it's wrong here
Security policies in Defender for Cloud are the underlying definitions, often implemented as Azure Policy assignments, that determine which recommendations and compliance standards are enforced and evaluated on your subscriptions. They control the assessment engine that drives Secure Score and the list of recommendations, but they are declarative configuration objects rather than a notification or communication mechanism. As such, they do not send email digests or any other proactive correspondence to specific recipients.
- ✓
Email notifications for alerts and weekly digests
Why this is correct
Email notifications for alerts and weekly digests is the correct feature. Under Environment settings > Email notifications, you can enable both real-time alerts for high severity findings and a separate weekly digest. The digest email includes your current Secure Score, a summary of resource health, and the top recommendations, and it can be sent to specified individual email addresses or Microsoft Entra ID role members such as subscription owners. This is the only option that natively delivers a scheduled, human-readable email summary, making it the proper choice for the team's request.
- ✗
Continuous Export
Why it's wrong here
Continuous Export is a data-exfiltration and integration feature that streams security alerts and recommendations to Azure Event Hubs or a Log Analytics workspace for external processing, SIEM integration, or custom automation. While it allows you to build your own email-sending logic using, for example, an Azure Logic App that queries the exported data, it does not itself generate a built-in weekly email digest. Because the question specifically asks for a native Defender for Cloud capability, Continuous Export does not satisfy the requirement.
Go deeper
Related to this question
About these practice questions
One of 194 original AZ-500 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-500 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-500 exam.