AZ-500 Manage identity and access Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Secure Score

  Why this is correct

  The Secure Score blade in Microsoft Defender for Cloud is specifically designed as a prioritized, actionable list of security recommendations. Each recommendation is shown with its potential score impact, so you can see how many points you gain by remediating it, and the list is sorted to highlight the highest-impact actions first. Because it consolidates all recommendations from applied security policies and weights them by severity and resource health, it directly answers the analyst's need to prioritize remediation work.

• ✗

  Regulatory Compliance

  Why it's wrong here

  The Regulatory Compliance dashboard maps your environment's compliance state against specific standards you assign, such as PCI DSS, ISO 27001, or SOC 2, and groups recommendations under each standard's control requirements. It does not serve as a general prioritized recommendation list; instead, it is filtered to show only the controls defined by the selected regulatory framework. An analyst looking for an overall prioritization across all security posture gaps would find this too narrowly scoped, as it omits recommendations that don't align to a chosen standard.

• ✗

  Inventory

  Why it's wrong here

  The Inventory page provides a resource-centric view of all Azure resources connected to Defender for Cloud, showing each resource's security state, resource type, resource group, and subscription. While you can drill into a specific resource to see its applicable recommendations, the page does not aggregate and rank recommendations globally by their impact on your overall security score. It is meant for browsing and filtering individual assets, not for triaging a cross-subscription remediation queue.

• ✗

  Workload protections

  Why it's wrong here

  Workload Protections is the dashboard for managing Microsoft Defender plans and viewing security alerts from threats like malware, suspicious logins, and anomalies across supported workload types. It surfaces alerts and threat detections rather than the hardening recommendations that make up Secure Score; although it may show a few 'recommendation' tiles for enabling plans, its primary purpose is to monitor active attacks and signals. An analyst wanting a prioritized list of remediation actions would be looking at the wrong blade, as this one is geared toward threat response and plan configuration.

Go deeper

Related to this question