MENU
You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices. All users are assigned Microsoft 365 5 licenses and the Microsoft Defender Vulnerability Management add-on. The Windows 11 devices are managed by using Microsoft Intune and Microsoft Defender for Endpoint. The Windows 11 devices are configured during deployment to comply with Center for Internet Security (CIS) benchmarks for Windows 11.
You need to recommend a compliance solution for the Windows 11 devices. The solution must identify devices that were modified and no longer comply with the CIS benchmarks.
What should you include in the recommendation?
Suggested Answer: D
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
HE
Heidy
11 months ago
B is good for overall security, but might not catch all compliance issues.
CH
Charlena
11 months ago
Wait, are we really trusting these scans? Sounds risky!
WA
Wava
11 months ago
Not sure about that, D seems more comprehensive for assessments.
CO
Coral
12 months ago
Totally agree, authenticated scans are essential!
RO
Ronny
12 months ago
I think option A is the best choice for compliance checks.
BE
Bettina
1 year ago
I recall that security baselines in Defender Vulnerability Management are specifically designed for compliance, so that might be the best option.
JO
Joaquin
1 year ago
I practiced a similar question, and I think Microsoft Secure Score could provide insights, but I'm not convinced it's the best fit for compliance checks.
LE
Lenita
1 year ago
I'm not entirely sure, but I feel like the authenticated scan could help identify non-compliant devices too.
MA
Margot
1 year ago
I remember studying about compliance solutions, and I think security baselines assessments might be the right choice here.
GE
German
1 year ago
This is a tricky one. I'm leaning towards the "Microsoft Secure Score for Devices in Defender for Endpoint" option, as that seems like it could provide a comprehensive view of the device compliance. But I'm not 100% sure, so I'll need to double-check the details.
CH
Chu
1 year ago
Okay, I've got a strategy here. I think the "security baselines assessments in Microsoft Defender Vulnerability Management" option is the way to go. That should allow us to monitor the devices and identify any that have drifted from the CIS benchmark configuration.
LO
Louvenia
1 year ago
This looks like a straightforward question about compliance monitoring for Windows 11 devices. I think the key is to identify a solution that can detect when devices have been modified and no longer meet the CIS benchmarks.
EL
Elke
1 year ago
Hmm, I'm a bit unsure about this one. There are a few options presented, and I'm not sure which one would be the best recommendation. I'll need to think this through carefully.
MI
Michel
1 year ago
Okay, let me break this down. The question is asking about the steps for analyzing processes to identify activities that enhance something. I'm leaning towards B - value, but I'll double-check the options.
DO
Domingo
1 year ago
This is a good opportunity to demonstrate my knowledge of AdMob ad unit IDs. I'm feeling pretty confident I can nail this question and show the examiner that I really understand this topic.
BE
Bev
2 years ago
Option A seems like it could work, but I'm not sure if an authenticated scan would be enough to detect all the modifications. Gotta go with D on this one, security baselines are the way to go.
NI
Nieves
2 years ago
Yeah, security baselines assessments in Microsoft Defender Vulnerability Management should do the trick.
RO
Roxane
2 years ago
I agree, security baselines assessments will definitely help identify any modifications.
MA
Maile
2 years ago
I think D is the best option, security baselines assessments are thorough.
LE
Leila
2 years ago
Definitely, security baselines are essential for ensuring compliance with CIS benchmarks.
NA
Narcisa
2 years ago
I agree, I think D is the better choice. Security baselines assessments would give a more comprehensive view.
JA
Jamal
2 years ago
Option A seems like it could work, but I'm not sure if an authenticated scan would be enough to detect all the modifications.
SH
Sharmaine
2 years ago
I see your point, Shaunna, but I still think option D is more comprehensive for our needs.
SH
Shaunna
2 years ago
I'm not sure, I think option A) Authenticated scan for Windows in Microsoft Defender Vulnerability Management could also be a good solution.
LO
Loreen
2 years ago
Haha, can we just call it the 'Center for Insecurity' benchmarks? Just kidding, but seriously, option D is the way to go. Security baselines are the way to keep those pesky Windows 11 devices in check.
GL
Glendora
2 years ago
I think option B, Microsoft Secure Score for Devices in Defender for Endpoint, would be a good choice too. It provides a detailed assessment of the security posture of the devices and can help identify any compliance issues.
TI
Tiffiny
2 years ago
I think option D, security baselines assessments in Microsoft Defender Vulnerability Management, would also be a good recommendation. It can help us ensure that the devices comply with the CIS benchmarks.
AR
Arlyne
2 years ago
I agree, option B sounds like a good choice. It can definitely help us identify any compliance issues.
SH
Sharee
2 years ago
I agree with Sharmaine, option D sounds like the best choice to ensure compliance with CIS benchmarks.
TA
Tawanna
2 years ago
Option D seems to be the most comprehensive solution for identifying devices that have been modified and no longer comply with the CIS benchmarks. The security baselines assessments in Defender Vulnerability Management should be able to detect any deviations from the established security configurations.
SI
Sina
2 years ago
I agree, the security baselines assessments in Defender Vulnerability Management should be able to catch any modifications on the Windows 11 devices.
VI
Viva
2 years ago
I think option D is the best choice. It can help us identify any devices that are not compliant with the CIS benchmarks.
SH
Sharmaine
2 years ago
I think we should go with option D) security baselines assessments in Microsoft Defender Vulnerability Management.