SC-900 Practice Question: Describe the concepts of security, compliance, and identity
Your organization uses Microsoft Defender XDR. The security team wants a central dashboard showing the overall security posture and recommended actions. Which tool should they use?
⚠ Common exam trap
SC-900 often tests whether candidates can distinguish posture-management tools (Secure Score) from operational security tools (Sentinel) and compliance tools (Purview), since all three appear in the same Defender XDR portal.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Secure Score
Microsoft Secure Score is the dashboard within Microsoft Defender XDR that quantifies an organization's security posture and provides prioritized, actionable improvement recommendations. It aggregates signals from Microsoft 365 services and Defender workloads, assigning points for implemented controls so the security team can track posture over time.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview
Why it's wrong here
Microsoft Purview governs data — classifying, labelling and protecting information, plus compliance and audit — and surfaces no unified Defender XDR posture score or remediation recommendations. It would be correct for data governance and compliance scenarios, not for viewing security posture and recommended actions.
- ✗
Microsoft Entra ID
Why it's wrong here
Microsoft Entra ID handles identity and access — authentication, conditional access and privileged identity management — and does not aggregate Defender XDR signals into a posture score. It would be correct for identity governance and sign-in control, not for a dashboard of security posture and recommended actions.
- ✗
Microsoft Sentinel
Why it's wrong here
Microsoft Sentinel is a cloud-native SIEM and SOAR platform for ingesting logs, correlating detections and automating responses, not a posture dashboard with recommendations. It would be correct for centralised log analytics and threat hunting, whereas Microsoft Secure Score provides the posture view and recommended actions.
- ✓
Microsoft Secure Score
Why this is correct
Microsoft Secure Score aggregates your security posture across Microsoft 365 services and surfaces prioritised improvement actions. It satisfies the requirement for a central dashboard showing overall posture and recommended actions, unlike Defender-specific incident views or compliance reports.
Go deeper
Related to this question
Learn chapter
Cloud Security Posture Management (CSPM)
Key term
Microsoft Defender XDR
Microsoft Defender XDR is a unified security platform that automatically correlates alerts from across an organization's endpoints, email, identities, and cloud apps to stop complex attacks.
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
About these practice questions
This SC-900 question is part of Courseiva's 1,279-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.