SC-900 Practice Question: Describe the capabilities of Microsoft security solutions

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Regulatory compliance standards in Microsoft Defender for Cloud

  Why this is correct

  Regulatory compliance standards in Microsoft Defender for Cloud provide continuous assessment of your cloud environment against a wide array of industry and regulatory benchmarks, such as ISO 27001, SOC 2, and PCI DSS. It automatically maps security recommendations to specific controls within these standards, offering a compliance score and detailed reports. This feature helps organizations understand their current compliance posture and provides actionable insights to remediate non-compliant resources, simplifying the audit preparation process.

• ✗

  Microsoft Sentinel analytics rules

  Why it's wrong here

  Microsoft Sentinel analytics rules are designed for Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) capabilities. These rules identify threats, anomalies, and suspicious activities across an organization's digital estate by correlating logs and events from various sources. While critical for threat detection and incident response, Sentinel's primary function is not to directly assess or report against established regulatory compliance frameworks or provide a compliance score.

• ✗

  Azure Policy initiatives

  Why it's wrong here

  Azure Policy initiatives are collections of Azure Policy definitions that enforce organizational standards and assess compliance for Azure resources at scale. They are instrumental for governance, ensuring resource configurations adhere to specified rules (e.g., requiring encryption or specific VM sizes). However, Azure Policy primarily focuses on enforcing technical configurations and auditing resource properties, rather than providing a comprehensive, high-level assessment and reporting framework against specific regulatory compliance standards like those offered by Defender for Cloud.

• ✗

  Microsoft Defender for Cloud Apps session policies

  Why it's wrong here

  Microsoft Defender for Cloud Apps session policies, part of the Cloud Access Security Broker (CASB) capabilities, are used to monitor and control user activities within cloud applications in real-time. These policies can prevent data exfiltration, enforce 'protect' actions, or block specific activities within SaaS applications. While crucial for data protection and access control in cloud apps, their scope is focused on application usage and user behavior, not on assessing the overall infrastructure's adherence to broad regulatory compliance frameworks.

Go deeper

Related to this question