SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
A company uses a hybrid environment with Azure virtual machines (IaaS) and on-premises Windows servers. The security team needs a single solution that continuously assesses the security posture of these workloads, provides a regulatory compliance dashboard with actionable recommendations, and enables threat detection. Which Microsoft security solution should they use?
⚠ Common exam trap
Many candidates confuse Microsoft Defender for Cloud (a posture management and threat protection platform) with Microsoft Sentinel (a SIEM), but the question specifically asks for a single solution that includes a compliance dashboard and continuous assessment, which is a core feature of Defender for Cloud, not Sentinel.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Defender for Cloud
Microsoft Defender for Cloud is the correct answer because it provides a unified security management platform that continuously assesses the security posture of both Azure VMs (IaaS) and on-premises Windows servers via Azure Arc. It offers a regulatory compliance dashboard with actionable recommendations based on built-in standards like CIS, NIST, and Azure Security Benchmark, and integrates with Microsoft Defender for Cloud's workload protection plans to enable threat detection for these hybrid workloads.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Defender for Cloud Apps
Why it's wrong here
Microsoft Defender for Cloud Apps functions as a Cloud Access Security Broker (CASB), primarily designed to provide visibility and control over data within SaaS applications and to discover shadow IT. Its focus is on protecting information and enforcing policies across cloud applications like Office 365 or Salesforce, rather than offering security posture management or threat protection for IaaS virtual machines or on-premises servers in a hybrid environment.
- ✗
Microsoft Defender for Endpoint
Why it's wrong here
Microsoft Defender for Endpoint is an enterprise endpoint security platform that provides robust Endpoint Detection and Response (EDR), vulnerability management, and next-generation antivirus capabilities for individual endpoints, including servers. While it secures the operating system and applications running on a server, it does not natively offer a comprehensive cloud security posture management (CSPM) solution or a regulatory compliance dashboard for assessing the broader configuration of cloud and hybrid workloads.
- ✓
Microsoft Defender for Cloud
Why this is correct
Microsoft Defender for Cloud is the correct solution as it provides comprehensive Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) across Azure, on-premises, and multi-cloud environments. It continuously assesses security posture, offers a secure score, monitors regulatory compliance against various benchmarks, and delivers integrated threat detection and protection for Azure Virtual Machines and hybrid servers via Azure Arc.
- ✗
Microsoft Sentinel
Why it's wrong here
Microsoft Sentinel is a cloud-native Security Information and Event Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution. Its core capabilities involve collecting security data from diverse sources, performing intelligent threat detection using AI and machine learning, and automating incident response. However, Sentinel does not inherently generate secure scores or provide native regulatory compliance dashboards for workload configurations; instead, it aggregates and analyzes security logs and alerts from other security tools.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Defender for Cloud
Microsoft Defender for Cloud is a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) that provides unified security management and threat protection across hybrid and multi-cloud environments.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.