SC-100 Design security solutions for infrastructure Practice Question
Exhibit
Get-AzSqlDatabaseVulnerabilityAssessmentRuleBaseline -ResourceGroupName 'rg-sql' -ServerName 'sqlsrv01' -DatabaseName 'sqldb01' -BaselineName 'default' -RuleId 'VA2108'
Refer to the exhibit. You run the PowerShell command against an Azure SQL Database. The command returns a baseline object for rule VA2108. What does this indicate about the database's vulnerability assessment configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The security team has approved the current state of rule VA2108 as acceptable
The security team has approved the current state of rule VA2108 as acceptable. In Azure SQL Database vulnerability assessment, a baseline object returned for a rule such as VA2108 means a baseline has been set for that rule, which records the current scan results as the accepted/approved state so those results are no longer flagged as findings. It does not mean automatic remediation is occurring, so A is wrong; vulnerability assessment being disabled would prevent baseline objects from being returned, so C is wrong; and a baseline does not mean there are no findings, only that the baselined results are treated as acceptable, so D is wrong.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The vulnerability assessment scan is automatically remediating findings for rule VA2108
Why it's wrong here
Setting a baseline for a vulnerability assessment rule, as done in the PowerShell command, does not trigger any automatic remediation. The scan itself is read-only and never modifies database settings; a baseline only instructs the assessment engine to suppress that rule's result in future reports. To actually fix the issue, you would need to apply a separate configuration change, such as altering a database permission or enabling auditing.
- ✓
The security team has approved the current state of rule VA2108 as acceptable
Why this is correct
When you set a baseline, you are formally recording the security team's decision that the current state of the rule is an accepted risk. The PowerShell cmdlet stores the current scan result for VA2108 as the expected baseline for future scans, so any deviation from this approved configuration would be flagged. It is a governance process of waiver approval, not a technical remediation.
- ✗
Vulnerability assessment is disabled for this database
Why it's wrong here
To retrieve a baseline for rule VA2108, the vulnerability assessment feature must already be enabled and have performed scans on the database. If VA were disabled, the PowerShell cmdlet would fail because no baseline configuration would exist to read. Moreover, the presence of a baseline indicates the assessment engine is running and storing results in the associated storage account.
- ✗
The database has no vulnerability findings
Why it's wrong here
A baseline for rule VA2108 only suppresses findings for that single rule; it has no bearing on the results of any other vulnerability assessment rules. The database may still have many unbaselined findings that are actively reported. Additionally, a baseline is usually set because the rule was flagged in a scan, so the database almost certainly has at least that one finding accepted.
Go deeper
Related to this question
About these practice questions
One of 605 original SC-100 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.