Microsoft SC-100 Exam - Topic 1 Question 45 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 45
Topic #: 1

You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices. All users are assigned Microsoft 365 5 licenses and the Microsoft Defender Vulnerability Management add-on. The Windows 11 devices are managed by using Microsoft Intune and Microsoft Defender for Endpoint. The Windows 11 devices are configured during deployment to comply with Center for Internet Security (CIS) benchmarks for Windows 11.

You need to recommend a compliance solution for the Windows 11 devices. The solution must identify devices that were modified and no longer comply with the CIS benchmarks.

What should you include in the recommendation?

AAuthenticated scan for Windows in Microsoft Defender Vulnerability Management

BMicrosoft Secure Score for Devices in Defender for Endpoint

Cattack surface reduction (ASR) rules in Defender for Endpoint

Dsecurity baselines assessments in Microsoft Defender Vulnerability Management

Show Suggested Answer

Suggested Answer: D

by Hana at Jul 02, 2024, 02:21 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Heidy

3 months ago

B is good for overall security, but might not catch all compliance issues.

upvoted 0 times

...

Charlena

3 months ago

Wait, are we really trusting these scans? Sounds risky!

upvoted 0 times

...

Wava

3 months ago

Not sure about that, D seems more comprehensive for assessments.

upvoted 0 times

...

Coral

4 months ago

Totally agree, authenticated scans are essential!

upvoted 0 times

...

Ronny

4 months ago

I think option A is the best choice for compliance checks.

upvoted 0 times

...

Bettina

4 months ago

I recall that security baselines in Defender Vulnerability Management are specifically designed for compliance, so that might be the best option.

upvoted 0 times

...

Joaquin

4 months ago

I practiced a similar question, and I think Microsoft Secure Score could provide insights, but I'm not convinced it's the best fit for compliance checks.

upvoted 0 times

...

Lenita

4 months ago

I'm not entirely sure, but I feel like the authenticated scan could help identify non-compliant devices too.

upvoted 0 times

...

Margot

5 months ago

I remember studying about compliance solutions, and I think security baselines assessments might be the right choice here.

upvoted 0 times

...

German

5 months ago

This is a tricky one. I'm leaning towards the "Microsoft Secure Score for Devices in Defender for Endpoint" option, as that seems like it could provide a comprehensive view of the device compliance. But I'm not 100% sure, so I'll need to double-check the details.

upvoted 0 times

...

Chu

5 months ago

Okay, I've got a strategy here. I think the "security baselines assessments in Microsoft Defender Vulnerability Management" option is the way to go. That should allow us to monitor the devices and identify any that have drifted from the CIS benchmark configuration.

upvoted 0 times

...

Louvenia

5 months ago

This looks like a straightforward question about compliance monitoring for Windows 11 devices. I think the key is to identify a solution that can detect when devices have been modified and no longer meet the CIS benchmarks.

upvoted 0 times

...

Elke

5 months ago

Hmm, I'm a bit unsure about this one. There are a few options presented, and I'm not sure which one would be the best recommendation. I'll need to think this through carefully.

upvoted 0 times

...

Michel

5 months ago

Okay, let me break this down. The question is asking about the steps for analyzing processes to identify activities that enhance something. I'm leaning towards B - value, but I'll double-check the options.

upvoted 0 times

...

Domingo

5 months ago

This is a good opportunity to demonstrate my knowledge of AdMob ad unit IDs. I'm feeling pretty confident I can nail this question and show the examiner that I really understand this topic.

upvoted 0 times

...

Bev

2 years ago

Option A seems like it could work, but I'm not sure if an authenticated scan would be enough to detect all the modifications. Gotta go with D on this one, security baselines are the way to go.

upvoted 0 times

Nieves

1 year ago

Yeah, security baselines assessments in Microsoft Defender Vulnerability Management should do the trick.

upvoted 0 times

...

Roxane

2 years ago

I agree, security baselines assessments will definitely help identify any modifications.

upvoted 0 times

...

Maile

2 years ago

I think D is the best option, security baselines assessments are thorough.

upvoted 0 times

...

Leila

2 years ago

Definitely, security baselines are essential for ensuring compliance with CIS benchmarks.

upvoted 0 times

...

Narcisa

2 years ago

I agree, I think D is the better choice. Security baselines assessments would give a more comprehensive view.

upvoted 0 times

...

Jamal

2 years ago

Option A seems like it could work, but I'm not sure if an authenticated scan would be enough to detect all the modifications.

upvoted 0 times

...

Sharmaine

2 years ago

I see your point, Shaunna, but I still think option D is more comprehensive for our needs.

upvoted 0 times

...

Shaunna

2 years ago

I'm not sure, I think option A) Authenticated scan for Windows in Microsoft Defender Vulnerability Management could also be a good solution.

upvoted 0 times

...

Loreen

2 years ago

Haha, can we just call it the 'Center for Insecurity' benchmarks? Just kidding, but seriously, option D is the way to go. Security baselines are the way to keep those pesky Windows 11 devices in check.

upvoted 0 times

...

Glendora

2 years ago

I think option B, Microsoft Secure Score for Devices in Defender for Endpoint, would be a good choice too. It provides a detailed assessment of the security posture of the devices and can help identify any compliance issues.

upvoted 0 times

Tiffiny

2 years ago

I think option D, security baselines assessments in Microsoft Defender Vulnerability Management, would also be a good recommendation. It can help us ensure that the devices comply with the CIS benchmarks.

upvoted 0 times

...

Arlyne

2 years ago

I agree, option B sounds like a good choice. It can definitely help us identify any compliance issues.

upvoted 0 times

...

Sharee

2 years ago

I agree with Sharmaine, option D sounds like the best choice to ensure compliance with CIS benchmarks.

upvoted 0 times

...

Tawanna

2 years ago

Option D seems to be the most comprehensive solution for identifying devices that have been modified and no longer comply with the CIS benchmarks. The security baselines assessments in Defender Vulnerability Management should be able to detect any deviations from the established security configurations.

upvoted 0 times

Sina

2 years ago

I agree, the security baselines assessments in Defender Vulnerability Management should be able to catch any modifications on the Windows 11 devices.

upvoted 0 times

...

Viva

2 years ago

I think option D is the best choice. It can help us identify any devices that are not compliant with the CIS benchmarks.

upvoted 0 times

...

Sharmaine

2 years ago

I think we should go with option D) security baselines assessments in Microsoft Defender Vulnerability Management.

upvoted 0 times

...