SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
A company uses Microsoft Defender for Cloud to improve their cloud security posture. They want to see an aggregated score that reflects how well their resources are protected against threats. Which feature in Defender for Cloud provides this?
⚠ Common exam trap
A common mix-up: candidates confuse the broader Cloud Security Posture Management (CSPM) capability with the specific Security Score feature, but CSPM is the umbrella term for posture management, while Security Score is the concrete metric that provides the aggregated score.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Security Score
The Security Score in Microsoft Defender for Cloud aggregates findings from security assessments and controls into a single percentage score, reflecting how well resources are protected against threats. It is based on the Secure Score algorithm, which calculates the ratio of passed controls to total controls, weighted by the potential impact of each control. This provides a unified, quantitative measure of cloud security posture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Compliance dashboard
Why it's wrong here
The Compliance dashboard in Microsoft Defender for Cloud provides a centralized view of an organization's adherence to various regulatory standards and industry benchmarks, such as ISO 27001, PCI DSS, and Azure Security Benchmark. It assesses compliance against specific controls and offers recommendations for improvement. However, it focuses on reporting compliance status rather than aggregating all security controls into a single, quantifiable security posture score.
- ✓
Security Score
Why this is correct
The Security Score is a crucial feature within Microsoft Defender for Cloud that provides a quantifiable, aggregated metric reflecting an organization's overall security posture across its hybrid and multi-cloud environments. It is calculated based on the implementation status of security recommendations derived from continuous assessments against security benchmarks. This score helps prioritize security efforts by showing the potential impact of implementing specific recommendations on the overall security posture, enabling clear tracking of improvements over time.
- ✗
Cloud Security Posture Management (CSPM)
Why it's wrong here
Cloud Security Posture Management (CSPM) is a comprehensive set of capabilities within Microsoft Defender for Cloud designed to identify and remediate misconfigurations and vulnerabilities across cloud resources. While CSPM encompasses features like asset discovery, security assessment, and compliance monitoring, and is the underlying framework that *enables* the calculation and display of the Security Score, it is the broader category of solution, not the specific metric itself that represents the aggregated security posture score.
- ✗
Workload protections
Why it's wrong here
Workload protections in Microsoft Defender for Cloud are specialized security plans designed to detect and respond to threats targeting specific types of resources, such as virtual machines, SQL databases, containers, or storage accounts. These protections offer advanced threat detection, just-in-time access, and adaptive application controls for individual workloads. While essential for securing specific assets, workload protections focus on threat prevention and detection for individual resource types and do not provide an aggregated, overarching security posture score for the entire cloud environment.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Security posture
An organization's overall cybersecurity strength, including policies, controls, and readiness to defend against and respond to threats.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.