Discuss Microsoft SC-100 Exam Topic 14 Question 17

Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud.

The company signs a contract with the United States government.

You need to review the current subscription for NIST 800-53 compliance.

What should you do first?

AFrom Defender for Cloud, review the secure score recommendations.

BFrom Microsoft Sentinel, configure the Microsoft Defender for Cloud data connector.

CFrom Defender for Cloud, review the Azure security baseline for audit report.

DFrom Defender for Cloud, add a regulatory compliance standard.

Suggested Answer: D

https://docs.microsoft.com/en-us/azure/defender-for-cloud/update-regulatory-compliance-packages#what-regulatory-compliance-standards-are-available-in-defender-for-cloud

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Titus 11 months ago

I agree, the secure score is key for compliance checks!

Anglea 11 months ago

Wait, can we really trust the secure score for NIST compliance?

Honey 12 months ago

Adding a compliance standard seems like a good start too!

Roslyn 12 months ago

I think reviewing the audit report is more important.

Pauline 1 year ago

Gotta check the secure score first!

Leonida 1 year ago

I feel like adding a regulatory compliance standard is a good first step, but I also wonder if we should check the secure score first. It's tough to decide!

Andra 1 year ago

I practiced a similar question where we had to check the security baseline first. That makes me lean towards option C, but I'm not completely confident.

Mattie 1 year ago

I'm not entirely sure, but I remember something about secure score recommendations being important for compliance. Could that be option A?

Eric 1 year ago

I think we might need to start by reviewing the compliance standards, so maybe option D is the right choice?

Marylyn 1 year ago

Usability testing was covered a lot in our sessions, so perhaps C is the best choice? I hope I'm recalling it correctly!

Julianna 1 year ago

Hmm, this seems straightforward. I think I'll go with blob storage since that's typically used for unstructured data like files.

Bernardo 1 year ago

This question seems straightforward, I think I can handle it.

Fausto 1 year ago

Okay, let's see here. The key can be stored in the database, the config file, or a separate secure file on the server. I'll need to consider the security implications of each location to determine the best option.

Oretha 1 year ago

Okay, I think I've got this. The question is asking whether the application of those two patterns would prevent the unauthorized access that was discovered. Based on the information provided, the answer is likely True, since those patterns are designed to address those kinds of security issues.

Microsoft SC-100 Exam - Topic 14 Question 17 Discussion