AZ-900 Describe Azure management and governance Practice Question
Which Azure feature provides a unified compliance score and consolidated view of your organization's compliance posture across different regulatory standards?
⚠ Common exam trap
Watch out — candidates often confuse Azure Policy's compliance dashboard (which shows per-policy compliance) with Defender for Cloud's multi-standard compliance score, leading them to select Azure Policy because it also has a 'compliance' tab, but it lacks the aggregated, cross-standard scoring and regulatory-specific views that Defender for Cloud provides.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Defender for Cloud
Microsoft Defender for Cloud (formerly Azure Security Center) provides a unified compliance score and a consolidated view of your organization's compliance posture across multiple regulatory standards (e.g., SOC 2, ISO 27001, PCI DSS). It continuously assesses your Azure and hybrid workloads against these standards, calculates a compliance score based on the percentage of compliant controls, and offers actionable recommendations to improve your overall security and compliance posture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Policy
Why it's wrong here
Azure Policy enforces organizational standards and evaluates resource compliance by applying policies to subscriptions and resource groups. Its focus is on individual policy rules and audit results per resource, not on aggregating those results into a single, unified compliance score against multiple regulatory frameworks. The service lacks the built-in regulatory compliance dashboards and scoring mechanisms that come with Defender for Cloud.
- ✓
Microsoft Defender for Cloud
Why this is correct
Microsoft Defender for Cloud continuously monitors your cloud resources and workloads, assessing them against industry benchmarks and regulatory standards. Its Regulatory Compliance dashboard aggregates the findings into a single compliance score per standard, such as SOC 2, ISO 27001, PCI DSS, and Azure CIS, while also providing actionable remediation steps. This integrated scoring and dashboard capability is exactly what the scenario requires.
- ✗
Azure Blueprints
Why it's wrong here
Azure Blueprints provides a declarative way to orchestrate the deployment of resources, policies, and role assignments to create governed, consistent environments. However, its role ends at the initial deployment: it does not continuously evaluate the deployed resources or produce an ongoing compliance score or dashboard. Monitoring and scoring regulatory compliance is not a Blueprints function, whereas Defender for Cloud delivers that through its compliance dashboard.
- ✗
Azure Active Directory
Why it's wrong here
Azure Active Directory (now Microsoft Entra ID) is an identity and access management service that handles authentication, single sign-on, and conditional access policies. While it provides security-related reports and identity risk detections, it does not assess Azure workloads against regulatory frameworks or generate a compliance score for infrastructure. Regulatory compliance scoring for cloud assets is a security posture management capability, not an identity service feature.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Microsoft Defender for Cloud
Microsoft Defender for Cloud is a cloud-native application protection platform that provides unified security management and advanced threat protection across multicloud and hybrid environments.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.