SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
A company wants to improve its security posture across Microsoft 365. The security team needs a central dashboard that provides a score based on current security configurations, gives recommendations for improving the score, and allows tracking of improvement actions over time. Which Microsoft security solution should they use?
⚠ Common exam trap
Many candidates confuse Microsoft Secure Score with Microsoft Purview Compliance Manager, because both provide a score and recommendations, but Secure Score focuses on security configurations while Compliance Manager focuses on regulatory compliance controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Secure Score
Microsoft Secure Score is the correct solution because it provides a central dashboard that calculates a numerical score based on the tenant's current security configurations across Microsoft 365 services. It offers prioritized improvement actions, tracks progress over time, and allows security teams to monitor and manage their security posture in a single view.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Secure Score
Why this is correct
Microsoft Secure Score is a robust measurement tool within the Microsoft 365 Defender portal designed to help organizations understand and improve their security posture. It aggregates security configurations and behaviors across various Microsoft services, providing a numerical score and actionable recommendations. These recommendations guide administrators in implementing best practices and mitigating risks, thereby enhancing overall tenant security over time.
- ✗
Microsoft Defender for Cloud Apps
Why it's wrong here
Microsoft Defender for Cloud Apps functions as a Cloud Access Security Broker (CASB), primarily focused on discovering cloud applications, enforcing data loss prevention policies, and detecting anomalous activities within sanctioned and unsanctioned cloud services. While it significantly contributes to cloud security by identifying shadow IT and protecting sensitive information, its scope is specific to cloud app governance and threat protection, not a holistic security posture score for the entire Microsoft 365 ecosystem.
When this WOULD be correct
A question asking for a solution to discover shadow IT, control access to cloud apps, and protect data in SaaS applications (e.g., 'Which Microsoft solution provides visibility into cloud app usage and enforces access policies?') would make Defender for Cloud Apps correct.
- ✗
Microsoft Purview Compliance Manager
Why it's wrong here
Microsoft Purview Compliance Manager is specifically engineered to assist organizations in managing their regulatory compliance obligations and data governance requirements. It provides a compliance score based on an organization's adherence to various industry standards and regulations, such as GDPR or HIPAA, through predefined assessment templates. This tool focuses on demonstrating compliance with specific legal and policy frameworks, which is distinct from a general security posture assessment that measures overall tenant security configurations.
When this WOULD be correct
A company needs to assess and improve its compliance posture against regulatory standards like GDPR or ISO 27001, with a dashboard showing compliance scores and recommendations for meeting specific compliance controls.
- ✗
Microsoft Intune
Why it's wrong here
Microsoft Intune is a cloud-based endpoint management solution that focuses on mobile device management (MDM) and mobile application management (MAM). Its primary role involves securing and managing corporate resources on devices, including configuration policies, application deployment, and data protection on endpoints. While crucial for device and application security, Intune does not provide a consolidated security posture score for the entire Microsoft 365 tenant, as its scope is limited to endpoint and application management.
When this WOULD be correct
A company needs to manage and enforce compliance policies on devices, such as requiring encryption or PIN codes, and ensure devices meet security requirements before accessing corporate resources. Intune would be the correct solution for device management and conditional access.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SC-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Microsoft Secure ScoreCorrect answer▾
Why this is correct
Microsoft Secure Score is a robust measurement tool within the Microsoft 365 Defender portal designed to help organizations understand and improve their security posture. It aggregates security configurations and behaviors across various Microsoft services, providing a numerical score and actionable recommendations. These recommendations guide administrators in implementing best practices and mitigating risks, thereby enhancing overall tenant security over time.
✗Microsoft Defender for Cloud AppsWrong answer — click to see why▾
Why this is wrong here
Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) focused on discovering and controlling cloud app usage, not a central dashboard for security configuration scores and improvement tracking across Microsoft 365.
★ When this WOULD be the correct answer
A question asking for a solution to discover shadow IT, control access to cloud apps, and protect data in SaaS applications (e.g., 'Which Microsoft solution provides visibility into cloud app usage and enforces access policies?') would make Defender for Cloud Apps correct.
Why candidates choose this
Candidates may confuse 'security score' with 'cloud app security' because both involve security posture, but Defender for Cloud Apps addresses app-level risks rather than overall configuration score.
✗Microsoft Purview Compliance ManagerWrong answer — click to see why▾
Why this is wrong here
Microsoft Purview Compliance Manager focuses on compliance with regulations and standards, not on improving the overall security posture through a score based on security configurations and tracking improvement actions.
★ When this WOULD be the correct answer
A company needs to assess and improve its compliance posture against regulatory standards like GDPR or ISO 27001, with a dashboard showing compliance scores and recommendations for meeting specific compliance controls.
Why candidates choose this
Candidates may confuse compliance with security, as both involve scores and recommendations, and Compliance Manager also provides a score and improvement actions, but for compliance rather than security.
✗Microsoft IntuneWrong answer — click to see why▾
Why this is wrong here
Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) tool, not a central dashboard for security score, recommendations, and tracking improvements across Microsoft 365.
★ When this WOULD be the correct answer
A company needs to manage and enforce compliance policies on devices, such as requiring encryption or PIN codes, and ensure devices meet security requirements before accessing corporate resources. Intune would be the correct solution for device management and conditional access.
Why candidates choose this
Candidates may associate Intune with security configurations and improvements, but it focuses on device-level management rather than providing a holistic security score and recommendations across Microsoft 365.
Analysis generated from the official SC-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.