SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
A company uses Microsoft Defender for Cloud to assess the security posture of their Azure subscriptions. They want to improve their secure score. What should they do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement the security recommendations
The secure score is calculated based on the implementation of security recommendations provided by Microsoft Defender for Cloud. By implementing these recommendations, the company improves their security posture and increases their secure score. Option B is incorrect because simply removing virtual machines does not address underlying security issues and may not improve the score. Option C is incorrect because increasing the Azure budget does not directly impact the secure score; the score depends on security configurations, not spending. Option D is incorrect because disabling Microsoft Defender for Cloud would remove the security assessments and recommendations, leading to a lower or unavailable secure score.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Implement the security recommendations
Why this is correct
Implementing the security recommendations provided by Microsoft Defender for Cloud directly addresses identified vulnerabilities and misconfigurations within your Azure environment. Each recommendation, when remediated, contributes points towards your secure score, reflecting an improved security posture by aligning resources with best practices and security controls. This is the primary mechanism for actively enhancing the secure score and reducing your attack surface.
- ✗
Remove all virtual machines from the subscription
Why it's wrong here
Removing all virtual machines from a subscription would indeed reduce the overall attack surface by eliminating potential targets. However, this action does not actively improve the secure score for the *remaining* resources or the subscription's security posture in the way that implementing security controls does. The secure score is designed to measure the effectiveness of security measures applied to *existing* assets, not to reward the absence of resources.
- ✗
Increase the Azure budget
Why it's wrong here
Increasing the Azure budget is a financial management action that allocates more funds for cloud services and operations. This action has no direct or indirect impact on the technical security posture of your resources or the calculation of the secure score within Microsoft Defender for Cloud. The secure score is determined by security assessments, compliance with recommendations, and the implementation of security controls, not financial allocations.
- ✗
Disable Microsoft Defender for Cloud
Why it's wrong here
Disabling Microsoft Defender for Cloud would immediately halt all security assessments, recommendations, and threat protection capabilities for your Azure environment. This action would prevent any further secure score calculations or improvements, as the very tool designed to identify and guide security enhancements would be rendered inoperative. Consequently, your ability to monitor and improve your security posture would be severely compromised.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Defender for Cloud
Microsoft Defender for Cloud is a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) that provides unified security management and threat protection across hybrid and multi-cloud environments.
Key term
Security posture
An organization's overall cybersecurity strength, including policies, controls, and readiness to defend against and respond to threats.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.