Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel →mediumMultiple ChoiceObjective-mapped
Adding CIS and PCI DSS Compliance Standards to Defender for Cloud
Your organization uses Microsoft Defender for Cloud to assess the security posture of Azure subscriptions. The security team wants to implement a continuous compliance monitoring solution using Microsoft Defender for Cloud's regulatory compliance dashboard. They need to monitor compliance against the 'CIS Microsoft Azure Foundations Benchmark' and 'PCI DSS v3.2.1'. Currently, the subscription has the 'Azure Security Benchmark' initiative assigned. You need to configure the compliance dashboard to show both CIS and PCI DSS standards. The subscription already has Microsoft Defender for Cloud's CSPM plan enabled. You have also enabled the 'Defender for Cloud' plan for servers. What should you do to meet the requirements?
Quick Answer
The correct answer is to add the CIS Microsoft Azure Foundations Benchmark and PCI DSS v3.2.1 policy initiatives to the regulatory compliance dashboard. This is because Defender for Cloud’s compliance dashboard displays standards only when their corresponding Azure Policy initiatives are assigned at the subscription or management group level; simply enabling Defender plans or server protections does not automatically load these benchmarks. On the AZ-500 exam, this question tests your understanding that regulatory compliance is driven by policy assignments, not by security settings alone—a common trap is assuming CIS is enabled by default when you enable the CSPM plan. Remember that the Azure Security Benchmark is pre-assigned, but any additional standard like CIS or PCI DSS must be manually added as a policy initiative. A helpful memory tip: “No initiative, no compliance—assign the policy to see the score.”
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add the CIS Microsoft Azure Foundations Benchmark and PCI DSS v3.2.1 policy initiatives to the regulatory compliance dashboard.
To add compliance standards to the regulatory compliance dashboard, you need to add the corresponding policy initiatives. Option A is correct because you can add the CIS Microsoft Azure Foundations Benchmark and PCI DSS v3.2.1 initiatives to the existing dashboard without removing the Azure Security Benchmark. Option B is incorrect because the CIS benchmark is not a setting but a policy initiative that must be added. Option C is incorrect because there is no separate regulatory compliance add-on; you add initiatives directly. Option D is incorrect because removing the Azure Security Benchmark is unnecessary and would cause loss of monitoring for that standard.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Add the CIS Microsoft Azure Foundations Benchmark and PCI DSS v3.2.1 policy initiatives to the regulatory compliance dashboard.
Why this is correct
You can add multiple compliance standards by assigning their policy initiatives.
- ✗
Enable the CIS benchmark in the Microsoft Defender for Cloud settings.
Why it's wrong here
You need to assign the policy initiative; enabling is not an option in settings.
- ✗
Enable Microsoft Defender for Cloud's regulatory compliance add-on.
Why it's wrong here
There is no separate add-on; you assign initiatives.
- ✗
Remove the Azure Security Benchmark initiative and assign the CIS and PCI DSS initiatives.
Why it's wrong here
Removing the Azure Security Benchmark is unnecessary; you can have multiple initiatives.
Go deeper
Related to this question
About these practice questions
This AZ-500 question is part of Courseiva's 194-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on AZ-500
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Your organization uses Microsoft Defender for Cloud to assess regulatory compliance. You need to ensure that the compliance dashboard reflects the latest standards and that custom assessments are included. What should you do?
easy- A.Configure Microsoft Purview compliance portal to include Azure subscriptions.
- B.Use Azure Policy to apply custom definitions and assign to management groups.
- C.Create an Azure Blueprint with custom policies.
- ✓ D.Add a custom regulatory compliance standard in Defender for Cloud.
Why D: Microsoft Defender for Cloud allows you to add custom regulatory compliance standards directly within the compliance dashboard. This enables you to include both built-in standards (e.g., SOC 2, ISO 27001) and custom assessments tailored to your organization's specific compliance requirements, ensuring the dashboard reflects the latest standards.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-500 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-500 exam.