Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel →mediumMultiple SelectObjective-mapped
Regulatory Compliance Dashboard in Defender for Cloud — Upload Evidence and View Score
Which TWO actions can be performed using Microsoft Defender for Cloud's 'Regulatory Compliance' dashboard?
Quick Answer
The correct answer is that the Regulatory Compliance dashboard in Defender for Cloud allows you to view the compliance score against a specific regulatory standard and upload manual evidence. This is because the dashboard aggregates continuous assessments from Azure Policy into a single score per standard, while the manual evidence upload feature lets you document controls that cannot be automatically scanned, such as physical security logs. On the AZ-500 exam, this question tests your ability to distinguish between the dashboard’s reporting functions and separate configuration tasks like remediation or continuous export, which are common distractors. A frequent trap is assuming the dashboard itself performs remediation actions, but those are handled through policy initiatives, not the compliance view. Remember the tip: “Score and store” — the dashboard shows the score and stores your manual proof, but it does not fix or export.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Upload evidence documents for manual controls.
Options A and C are correct. The Regulatory Compliance dashboard in Microsoft Defender for Cloud displays compliance scores against specific regulatory standards and allows uploading evidence documents for manual controls. Option B is incorrect because automatic remediation of non-compliant resources is handled through Azure Policy, not directly from the compliance dashboard. Option D is incorrect because continuous export of compliance data is configured in the continuous export settings, not from the dashboard. Option E is incorrect because direct integration with third-party GRC tools is not available from the dashboard.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Upload evidence documents for manual controls.
Why this is correct
Dashboard allows uploading evidence for manual controls.
- ✗
Automatically remediate non-compliant resources.
Why it's wrong here
Remediation is via policy, not the dashboard.
- ✓
View compliance score against a specific regulatory standard.
Why this is correct
Dashboard displays compliance scores.
- ✗
Configure continuous export of compliance data.
Why it's wrong here
Continuous export is a separate configuration.
- ✗
Integrate with third-party GRC tools directly from the dashboard.
Why it's wrong here
Integration is not directly from the dashboard.
Go deeper
Related to this question
About these practice questions
One of 194 original AZ-500 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on AZ-500
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO actions can you perform using Microsoft Defender for Cloud's regulatory compliance dashboard? (Select two.)
medium- A.Create custom regulatory compliance recommendations.
- B.Automatically remediate non-compliant resources.
- ✓ C.View the compliance status for built-in standards like SOC 2 or PCI DSS.
- ✓ D.Assign a compliance standard (e.g., SOC 2) to a subscription.
- E.Enable or disable Microsoft Defender plans for a subscription.
Why C: The regulatory compliance dashboard in Microsoft Defender for Cloud provides a pre-built view of compliance status against built-in standards such as SOC 2, PCI DSS, ISO 27001, and Azure CIS. This dashboard aggregates security assessments and displays pass/fail status for each control, allowing you to track your compliance posture without manual configuration.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-500 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-500 exam.