SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
A company uses Microsoft Defender for Cloud to secure its Azure resources. The security team wants to receive a single recommendation for all resources that are missing just-in-time (JIT) VM access. Which Microsoft Defender for Cloud feature should they use?
⚠ Common exam trap
Test-takers frequently confuse 'security recommendations' (proactive posture improvements) with 'security alerts' (reactive threat detections), leading them to select D because they think missing JIT is a security incident rather than a configuration gap.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Security recommendations
Microsoft Defender for Cloud's security recommendations feature provides a centralized list of actionable steps to improve your security posture, including a specific recommendation to enable just-in-time (JIT) VM access on all eligible virtual machines. This recommendation aggregates all resources missing JIT configuration into a single entry, allowing the security team to remediate them collectively. The other options do not aggregate missing JIT configurations into a single recommendation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Regulatory compliance dashboard
Why it's wrong here
The Regulatory compliance dashboard in Microsoft Defender for Cloud primarily assesses an organization's adherence to various regulatory standards and industry benchmarks, such as Azure Security Benchmark, PCI DSS, or ISO 27001. It provides a compliance score and detailed reports on controls that are met or not met, but it does not directly offer actionable security recommendations like enabling Just-In-Time (JIT) VM access for specific resources. Its focus is on reporting compliance posture, not proactive security improvement tasks.
- ✓
Security recommendations
Why this is correct
Microsoft Defender for Cloud's security recommendations are actionable suggestions generated by continuously analyzing the security state of your Azure resources against Microsoft's security benchmarks and best practices. These recommendations, such as enabling Just-In-Time (JIT) VM access or applying adaptive application controls, directly guide users on specific steps to mitigate vulnerabilities and enhance their overall security posture. They are designed to improve the secure score and provide a prioritized list of tasks for remediation.
- ✗
Inventory
Why it's wrong here
The Inventory feature in Microsoft Defender for Cloud provides a comprehensive list of all monitored Azure resources, including their security posture and any associated security issues. While it allows for filtering and viewing the security health of individual resources, its primary function is resource discovery and management. It does not generate or display actionable security recommendations for improving the security configuration of those resources; it merely presents their current state.
- ✗
Security alerts
Why it's wrong here
Security alerts in Microsoft Defender for Cloud are notifications triggered when an active threat or suspicious activity is detected against your resources, such as a brute-force attack or a malware infection. These alerts are designed for immediate incident response and provide details about the attack, affected resources, and steps for remediation of the active threat. They are distinct from proactive security recommendations, which focus on preventing future attacks by improving the security configuration.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Defender for Cloud
Microsoft Defender for Cloud is a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) that provides unified security management and threat protection across hybrid and multi-cloud environments.
Key term
Security posture
An organization's overall cybersecurity strength, including policies, controls, and readiness to defend against and respond to threats.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.