SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
A security team wants to receive a unified security posture assessment for their hybrid workloads including Azure VMs, on-premises SQL servers, and AWS EC2 instances. They need to get actionable recommendations to harden configurations and improve their overall security score. Which Microsoft security solution provides this capability?
⚠ Common exam trap
Test-takers frequently confuse Microsoft Defender for Cloud (a posture management and CSPM tool) with Microsoft Sentinel (a SIEM), because both can ingest multi-cloud data, but only Defender for Cloud provides the unified secure score and actionable hardening recommendations for hybrid workloads.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Defender for Cloud
Microsoft Defender for Cloud provides a unified security posture assessment across hybrid and multi-cloud workloads, including Azure VMs, on-premises SQL servers, and AWS EC2 instances. It continuously assesses configurations against security baselines (e.g., Azure Security Benchmark, CIS controls) and generates a secure score with actionable recommendations to harden resources. This aligns directly with the requirement for a single dashboard covering all listed workload types.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Defender for Cloud
Why this is correct
Microsoft Defender for Cloud is the correct solution as it provides Cloud Security Posture Management (CSPM) capabilities across Azure, AWS, GCP, and on-premises environments. It continuously assesses the security configuration of resources, identifies misconfigurations, and offers actionable recommendations to improve security posture. This results in a unified secure score, giving security teams a consolidated view of their overall security health and compliance across their entire hybrid and multi-cloud estate.
- ✗
Microsoft Defender for Endpoint
Why it's wrong here
Microsoft Defender for Endpoint is designed as an Enterprise Detection and Response (EDR) and Endpoint Protection Platform (EPP) solution. Its primary function is to protect individual workstations, servers, and mobile devices from advanced threats by detecting and investigating malicious activities. While crucial for endpoint security, it does not provide a unified security posture assessment or secure score for cloud infrastructure, virtual machines, or services across multi-cloud environments.
- ✗
Microsoft Sentinel
Why it's wrong here
Microsoft Sentinel functions as a Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution. It aggregates security data from various sources, detects threats using analytics and machine learning, and enables automated responses. While essential for threat detection and incident management, Sentinel is not designed to provide a proactive, unified security posture assessment or a secure score based on configuration best practices across cloud and hybrid infrastructure.
- ✗
Microsoft Defender for Cloud Apps
Why it's wrong here
Microsoft Defender for Cloud Apps operates as a Cloud Access Security Broker (CASB), providing visibility into cloud applications, identifying shadow IT, and enforcing data protection policies. It helps secure data within SaaS applications and control access to them. However, it does not assess the security configuration of underlying infrastructure components like virtual machines, databases, or network settings across multi-cloud environments to provide a unified security posture.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
SQL
SQL is a standardized programming language used to manage and manipulate relational databases, enabling querying, updating, and data retrieval.
Key term
Microsoft Defender
Microsoft Defender is a suite of security products that protects devices, data, and identities from cyber threats like malware, phishing, and unauthorized access.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.