AZ-900 Describe Azure management and governance Practice Question
Which Azure feature provides an overview of the overall security posture across your Azure subscriptions with a secure score?
⚠ Common exam trap
Many exam-takers confuse Azure Advisor's security recommendations (which are part of Advisor but not a 'secure score') with Microsoft Defender for Cloud's dedicated Secure Score, leading them to pick Option A because both involve security recommendations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Defender for Cloud Secure Score
Microsoft Defender for Cloud (formerly Azure Security Center) provides a unified security management dashboard that includes a Secure Score. This score aggregates security recommendations across all your Azure subscriptions and calculates a percentage based on how many of those recommendations you have implemented, giving you a quantifiable measure of your overall security posture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Advisor security score
Why it's wrong here
Azure Advisor is a personalized recommendation engine that identifies best practices for cost, performance, reliability, operational excellence, and security. Its security category offers actionable recommendations based on Azure Security Benchmark, but it does not produce a single, aggregated security posture score across subscriptions. The 'security score' concept that measures overall security posture is exclusive to Microsoft Defender for Cloud.
- ✓
Microsoft Defender for Cloud Secure Score
Why this is correct
Microsoft Defender for Cloud's Secure Score aggregates the health of all security controls across subscriptions into a single numerical score, expressed as a percentage. Each security control contains multiple recommendations; the score reflects the percentage of healthy resources within those controls. This score directly measures and tracks your overall security posture, enabling prioritized remediation across your entire Azure estate.
- ✗
Azure Policy compliance score
Why it's wrong here
Azure Policy enforces and evaluates compliance of resources against individual policy definitions and initiatives. The compliance percentage shown by Azure Policy indicates how many of your resources conform to a specific policy's conditions, which may be unrelated to security (e.g., tagging or networking rules). It does not aggregate security recommendations into a holistic posture metric; Secure Score is broader and incorporates additional signals such as threat intelligence and security recommendations from Defender for Cloud.
- ✗
Azure Sentinel analytics score
Why it's wrong here
Microsoft Sentinel is a cloud-native SIEM and SOAR solution designed for threat detection, investigation, and response. Its analytics rules generate alerts and incidents based on log queries, but it does not compute a continuous, subscription-wide security posture score. Sentinel excels at hunting and incident management, whereas Secure Score is the metric that quantifies how well your environment is secured against known threats and best practices.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Dashboard
A dashboard is a visual display of key metrics and data points that helps IT professionals monitor, analyze, and manage systems or processes in real time.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.