easyMultiple ChoiceObjective-mapped
SC-200 Practice Question: In Microsoft Defender for Cloud, what does the…
In Microsoft Defender for Cloud, what does the Secure Score represent?
⚠ Common exam trap
It's easy for candidates to confuse the Secure Score with a simple compliance percentage or a count of alerts, but Microsoft specifically designed it as a posture metric that reflects the implementation of security controls, not just compliance with a single benchmark or the number of threats detected.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The overall security posture of your resources, based on implemented security controls and recommendations.
The Secure Score in Microsoft Defender for Cloud is a numeric representation of your overall security posture, calculated based on the implementation of security controls and the remediation of recommendations. It aggregates the status of all assessed resources against security best practices, providing a single score that reflects how well you are protecting your workloads. This score helps prioritize actions to improve security, as each recommendation contributes a specific number of points toward the total possible score.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The number of currently active security alerts.
Why it's wrong here
The Secure Score is a quantified measure of security control implementation, not a real-time threat counter. Active security alerts are displayed in the Alerts dashboard and represent suspicious detections, whereas Secure Score aggregates the status of all security recommendations across your resources without reflecting current alert volume.
- ✗
The percentage of compliance with the Azure Security Benchmark.
Why it's wrong here
The Secure Score is calculated from the implementation percentage of each recommended security control, weighted by severity and resource coverage, rather than being tied to a single compliance framework. Azure Security Benchmark compliance is a distinct regulatory compliance dashboard metric that tracks adherence to that specific standard, not your overall posture.
- ✓
The overall security posture of your resources, based on implemented security controls and recommendations.
Why this is correct
The Secure Score is a percentage (0-100%) that quantifies how well your subscriptions and resources have implemented Microsoft's security best practices as recommendations. Each recommendation contributes points based on its associated security control and risk weight, so the score reflects your aggregate posture and helps prioritize remediation actions across all resource types.
- ✗
The number of VMs that have been assessed for vulnerabilities.
Why it's wrong here
The Secure Score is not a raw count of any resource type, such as VMs assessed for vulnerabilities. While recommendations like 'Vulnerability assessment should be enabled on your virtual machines' feed into the score, the overall score is a weighted composite of all security control states, and the number of assessed VMs is only one small data point.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SC-200 question from scratch — 209 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-200 exam.