Describe the capabilities of Microsoft security solutions →hardMultiple ChoiceObjective-mapped

SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Exhibit

Refer to the exhibit.
```bicep
resource defenderCloudApp 'Microsoft.Security/customAssessmentAutomations@2021-07-01-preview' = {
  name: 'myAssessment'
  properties: {
    description: 'Assessment for Defender for Cloud Apps'
    severity: 'High'
    supportedCloud: 'AWS'
  }
}
```

Refer to the exhibit. You are deploying a custom assessment automation in Microsoft Defender for Cloud using Bicep. The deployment fails with an error that the resource type is not valid. What is the most likely reason?

⚠ Common exam trap

Candidates often assume the error is due to a simple typo in the resource type name (Option D) or an API version mismatch (Option A), when in fact the issue is a property name/syntax error that is specific to the Bicep/ARM schema for Defender for Cloud custom assessments.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The property 'supportedCloud' should be 'supportedClouds' as an array.

In Bicep for Microsoft Defender for Cloud custom assessments, the property that defines which cloud environments the assessment applies to must be named 'supportedClouds' and must be an array of strings (e.g., ['Azure', 'AWS', 'GCP']). Using the singular 'supportedCloud' is invalid syntax and causes the deployment to fail with a resource type validation error.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The API version is not supported.
Why it's wrong here
The API version specified, `2021-06-01`, is a valid and commonly supported version for Azure Policy definitions, including those used for custom assessments in Microsoft Defender for Cloud. While an incorrect or unsupported API version would indeed cause a deployment failure, the version provided in the exhibit is recognized by Azure Resource Manager. Therefore, the issue preventing the custom assessment from deploying is not related to an unsupported API version, but rather a different structural or property-related error within the definition.
✓
The property 'supportedCloud' should be 'supportedClouds' as an array.
Why this is correct
Azure Policy definitions, particularly for custom assessments, require the `supportedClouds` property (plural) to correctly specify the cloud environments where the policy should be active. The exhibit incorrectly uses `supportedCloud` (singular), which is not a recognized property in the Azure Policy schema. Furthermore, this property is expected to be an array of strings, even if only one cloud is specified, ensuring proper schema validation and deployment. This specific misnaming and incorrect data type are critical errors preventing successful deployment.
✗
The name property is missing.
Why it's wrong here
The exhibit clearly includes a `name` property, such as `"name": "myCustomAssessment"`, which is essential for uniquely identifying the custom assessment within Azure Policy. This property is correctly provided and formatted in the example, indicating that a name has been assigned. Since the name is explicitly present and adheres to the expected structure for a policy definition, its absence is not the underlying cause of the deployment failure for the custom assessment.
✗
The resource type is misspelled.
Why it's wrong here
The resource type specified in the exhibit, `Microsoft.Security/assessments`, is the correct and standard resource type used for defining custom security assessments within Azure Security Center, now known as Microsoft Defender for Cloud. This type accurately identifies the kind of object being deployed and is recognized by Azure Resource Manager. Therefore, the problem preventing the custom assessment from deploying is not due to a misspelling of the resource type, but rather an issue with the properties or structure within the definition itself.

Go deeper

SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question