Courseiva

SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

A company uses Microsoft Defender for Cloud to secure its Azure resources. The security team wants to receive a single recommendation for all resources that are missing just-in-time (JIT) VM access. Which Microsoft Defender for Cloud feature should they use?

⚠ Common exam trap

Test-takers frequently confuse 'security recommendations' (proactive posture improvements) with 'security alerts' (reactive threat detections), leading them to select D because they think missing JIT is a security incident rather than a configuration gap.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Security recommendations

Microsoft Defender for Cloud's security recommendations feature provides a centralized list of actionable steps to improve your security posture, including a specific recommendation to enable just-in-time (JIT) VM access on all eligible virtual machines. This recommendation aggregates all resources missing JIT configuration into a single entry, allowing the security team to remediate them collectively. The other options do not aggregate missing JIT configurations into a single recommendation.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Regulatory compliance dashboard

    Why it's wrong here

    The Regulatory compliance dashboard in Microsoft Defender for Cloud primarily assesses an organization's adherence to various regulatory standards and industry benchmarks, such as Azure Security Benchmark, PCI DSS, or ISO 27001. It provides a compliance score and detailed reports on controls that are met or not met, but it does not directly offer actionable security recommendations like enabling Just-In-Time (JIT) VM access for specific resources. Its focus is on reporting compliance posture, not proactive security improvement tasks.

  • Security recommendations

    Why this is correct

    Microsoft Defender for Cloud's security recommendations are actionable suggestions generated by continuously analyzing the security state of your Azure resources against Microsoft's security benchmarks and best practices. These recommendations, such as enabling Just-In-Time (JIT) VM access or applying adaptive application controls, directly guide users on specific steps to mitigate vulnerabilities and enhance their overall security posture. They are designed to improve the secure score and provide a prioritized list of tasks for remediation.

  • Inventory

    Why it's wrong here

    The Inventory feature in Microsoft Defender for Cloud provides a comprehensive list of all monitored Azure resources, including their security posture and any associated security issues. While it allows for filtering and viewing the security health of individual resources, its primary function is resource discovery and management. It does not generate or display actionable security recommendations for improving the security configuration of those resources; it merely presents their current state.

  • Security alerts

    Why it's wrong here

    Security alerts in Microsoft Defender for Cloud are notifications triggered when an active threat or suspicious activity is detected against your resources, such as a brute-force attack or a malware infection. These alerts are designed for immediate incident response and provide details about the attack, affected resources, and steps for remediation of the active threat. They are distinct from proactive security recommendations, which focus on preventing future attacks by improving the security configuration.

About these practice questions

One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.