SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Your company uses Microsoft Defender for Cloud to assess the security posture of Azure resources. The security team wants to identify resources that are missing system updates. Which feature should they use?
⚠ Common exam trap
It's easy for candidates to confuse 'Vulnerability assessment solutions' (Option B) with 'system updates,' but vulnerability assessment focuses on software vulnerabilities and misconfigurations, whereas missing system updates are a distinct category tracked by a specific Secure Score recommendation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Secure Score recommendations
Secure Score recommendations in Microsoft Defender for Cloud include a specific recommendation for 'System updates should be installed on your machines' (or similar naming). This recommendation identifies Azure resources, particularly VMs, that are missing critical or security system updates by integrating with the Update Management solution or Microsoft Defender for Cloud's built-in vulnerability assessment. Selecting this recommendation allows the security team to view and remediate missing updates, directly addressing the requirement to assess security posture regarding system updates.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Just-in-time VM access
Why it's wrong here
Just-in-time (JIT) VM access in Microsoft Defender for Cloud is a feature designed to reduce the attack surface of virtual machines by locking down inbound traffic to management ports. It ensures that these ports are only opened for a limited time when a user explicitly requests access, significantly minimizing exposure to brute-force attacks and other network-based threats. While crucial for VM security, JIT access does not directly assess or recommend actions for missing operating system or application updates.
- ✗
Vulnerability assessment solutions
Why it's wrong here
Vulnerability assessment solutions, integrated within Microsoft Defender for Cloud, are indeed critical for identifying security weaknesses and misconfigurations in virtual machines, databases, and other resources. These solutions scan for known vulnerabilities, including those that might arise from outdated software or operating systems. However, while they pinpoint the existence of vulnerabilities, the specific, actionable recommendations for applying missing security updates and patches are typically surfaced and prioritized through the broader Secure Score mechanism, which aggregates findings from various assessments.
- ✗
Adaptive application controls
Why it's wrong here
Adaptive application controls in Microsoft Defender for Cloud are a powerful security feature designed to harden servers by creating a dynamic allowlist of known-safe applications. This control helps prevent malicious software from executing by ensuring only approved applications can run on your Windows and Linux machines. Its primary function is application whitelisting and execution control, which is distinct from assessing the patch status or recommending missing operating system or software updates.
- ✓
Secure Score recommendations
Why this is correct
Secure Score in Microsoft Defender for Cloud provides a quantifiable measure of an organization's security posture across its hybrid cloud environment. It aggregates findings from various security assessments, including those related to missing system updates, security misconfigurations, and other vulnerabilities. The platform generates specific, prioritized recommendations to address these issues, such as applying missing operating system patches or software updates, directly contributing to an improved security score and overall security posture.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Vulnerability assessment
A vulnerability assessment is a systematic review of security weaknesses in an information system, evaluating if the system is susceptible to any known vulnerabilities, assigning severity levels, and recommending remediation or mitigation.
Key term
Microsoft Defender
Microsoft Defender is a suite of security products that protects devices, data, and identities from cyber threats like malware, phishing, and unauthorized access.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.