Design security operations, identity, and compliance capabilities →hardMultiple ChoiceObjective-mapped
Microsoft Defender for Cloud Quick Fix Remediation
Your organization uses Microsoft Defender for Cloud to secure multi-cloud resources. You need to ensure that security recommendations are automatically remediated for non-compliant resources without manual intervention. What should you configure?
Quick Answer
Quick Fix remediation is Defender for Cloud's built-in mechanism for applying a predefined fix to a specific security recommendation with a single action — think enabling a missing diagnostic setting or turning on encryption at rest — and on its own it still needs someone to trigger it. What closes the gap to fully automatic, no-touch remediation is pairing it with automation, typically a Logic App or Azure Automation runbook wired to fire whenever Defender for Cloud raises that recommendation, so the Quick Fix action runs the moment a resource drifts out of compliance rather than waiting for an administrator to notice and click it. It's worth separating this from the two nearby-sounding distractors: a Secure Score target with alerting only tells you the score changed, it takes no remediation action itself, and Azure Policy remediation tasks generally still need to be triggered manually or through separate automation rather than firing natively off a Defender for Cloud recommendation. Any scenario asking for non-compliant resources to be fixed automatically and continuously, not just flagged, is describing Quick Fix plus automation working together, not either piece alone.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Quick Fix remediation for security recommendations and enable automation
Quick Fix remediation allows you to automatically apply a predefined remediation step for a security recommendation, and when combined with automation (such as a logic app or Azure Automation runbook triggered by Defender for Cloud), non-compliant resources can be auto-remediated without manual intervention. Option A is incorrect because Azure Policy initiatives with remediation tasks require manual trigger or a separate automation setup to run automatically; they do not directly auto-remediate within Defender for Cloud recommendations. Option B is incorrect because setting a Secure Score target and alerting on changes only monitors the secure score, it does not perform any remediation. Option D is incorrect because automatic provisioning of Log Analytics agent is about collecting data, not remediation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Policy initiatives with remediation tasks
Why it's wrong here
Azure Policy can remediate but requires manual trigger for existing resources.
- ✗
Set a Secure Score target and alert on changes
Why it's wrong here
Secure Score is a metric, not a remediation mechanism.
- ✓
Use Quick Fix remediation for security recommendations and enable automation
Why this is correct
Quick Fix allows one-click remediation, and automation can trigger it automatically.
- ✗
Enable automatic provisioning of Log Analytics agent
Why it's wrong here
Automatic provisioning does not remediate recommendations.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-100 question from scratch — 208 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-100
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Your company uses Microsoft Defender for Cloud to manage security posture across hybrid workloads. You need to ensure that critical vulnerabilities found on Azure VMs are automatically remediated without manual intervention. Which feature should you enable?
medium- ✓ A.Enable 'Remediate' for security recommendations in Defender for Cloud
- B.File Integrity Monitoring (FIM)
- C.Microsoft Defender for Cloud's Regulatory Compliance dashboard
- D.Azure Automation Update Management
Why A: Microsoft Defender for Cloud's 'Remediate' feature allows you to automatically apply the necessary configuration changes or deploy the required patches to fix critical vulnerabilities on Azure VMs without manual intervention. This is achieved by enabling the 'Remediate' option on specific security recommendations, which triggers an automated workflow (often using Azure Policy or a custom script) to resolve the identified issue. This directly addresses the requirement for automatic remediation of critical vulnerabilities.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.