SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Which TWO capabilities are provided by Microsoft Defender for Cloud? (Choose two.)
⚠ Common exam trap
Test-takers frequently confuse Microsoft Defender for Cloud with other Microsoft security products like Defender for Endpoint (EDR), Defender for Cloud Apps (CASB), or Microsoft Sentinel (SIEM), because all are part of the Microsoft Security portfolio and often work together, but each has distinct primary capabilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Secure score and security recommendations
Microsoft Defender for Cloud provides a secure score that quantifies your security posture based on implemented controls, and it generates actionable security recommendations to remediate misconfigurations. Additionally, it offers vulnerability assessment for VMs, which identifies and helps remediate vulnerabilities in virtual machines. These are two distinct core capabilities of Defender for Cloud, while EDR, CASB, and SIEM are provided by other Microsoft security products.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Secure score and security recommendations
Why this is correct
Core features for posture management.
- ✗
Endpoint detection and response (EDR)
Why it's wrong here
Provided by Defender for Endpoint.
- ✓
Vulnerability assessment for VMs
Why this is correct
Integrated vulnerability scanning.
- ✗
Cloud Access Security Broker (CASB)
Why it's wrong here
Provided by Defender for Cloud Apps.
- ✗
Security Information and Event Management (SIEM)
Why it's wrong here
Provided by Sentinel.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Microsoft Defender
Microsoft Defender is a suite of security products that protects devices, data, and identities from cyber threats like malware, phishing, and unauthorized access.
Key term
Vulnerability
A vulnerability is a weakness in a system, network, or software that could be exploited by a threat to cause harm or unauthorized access.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.