AZ-900 Describe Azure management and governance Practice Question
What is the purpose of Azure's 'Secure Score' in Microsoft Defender for Cloud?
⚠ Common exam trap
Candidates often confuse Secure Score with a general health or performance metric, when it is specifically a security posture measurement tied to actionable recommendations in Defender for Cloud.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To provide a quantified measurement of your security posture with actionable improvements
Azure Secure Score in Microsoft Defender for Cloud provides a quantified measurement of an organization's security posture based on security controls and recommendations. It calculates a percentage score from completed recommendations, and each recommendation includes actionable steps to improve the score, directly reflecting the security state of your Azure resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To measure the performance speed of Azure resources
Why it's wrong here
Secure Score measures security posture, not performance speed; performance metrics like CPU utilization and request latency are monitored by Azure Monitor and Application Insights. An Azure resource could have excellent performance and still have a low Secure Score, or vice versa. Thus, using Secure Score to gauge performance speed conflates two entirely different assessment dimensions.
- ✓
To provide a quantified measurement of your security posture with actionable improvements
Why this is correct
Secure Score provides a quantified measurement (0 to 100) of your security posture by assessing the implementation status of security controls in Microsoft Defender for Cloud. Each recommended control has a maximum number of points, and you earn points by remediating those recommendations. It gives actionable, prioritized improvements to reduce risk across your Azure resources, which is exactly the purpose described.
- ✗
To show the availability percentage of Azure security services
Why it's wrong here
The availability percentage of Azure security services is published in service SLAs and status pages like Azure Service Health, not in Secure Score. Secure Score evaluates your Azure environment's security configuration and does not measure uptime or availability metrics. A high Secure Score does not guarantee a service's availability percentage, so this option misrepresents the scoring system's purpose.
- ✗
To audit user login attempts and failed authentications
Why it's wrong here
Auditing user login attempts and failed authentications is performed through Azure AD sign-in logs and audit logs, which provide event-level identity activity. Secure Score, in contrast, aggregates security recommendations from Microsoft Defender for Cloud based on your configuration and does not record individual authentication events. Therefore, while both address security, Secure Score is a strategic posture score, not an operational audit trail.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Defender for Cloud
Microsoft Defender for Cloud is a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) that provides unified security management and threat protection across hybrid and multi-cloud environments.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.