MENU
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You need to enforce ISO 27001:2013 standards for new resources deployed to the subscription. The solution must ensure that noncompliant resources are automatically detected.
What should you use?
Suggested Answer: D
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
24 comments · newest first
AM
Amie
11 months ago
Azure RBAC? That’s more about permissions, not compliance.
GO
Goldie
11 months ago
I disagree, the regulatory compliance dashboard is more for monitoring than enforcement.
LO
Lorriane
11 months ago
Wait, can Azure Blueprints do that too? I'm not sure.
RA
Rasheeda
12 months ago
Definitely agree, Azure Policy can enforce standards automatically.
MA
Marvel
12 months ago
I think Azure Policy is the way to go for compliance.
AR
Ardella
1 year ago
Azure RBAC seems more focused on permissions rather than compliance, so I don't think that's the answer.
SH
Sharmaine
1 year ago
I feel like the regulatory compliance dashboard in Defender for Cloud is more about monitoring than enforcing standards.
DE
Denny
1 year ago
I'm not entirely sure, but I remember something about Azure Blueprints being used for compliance frameworks. Could that be relevant?
WE
Wendell
1 year ago
I think Azure Policy might be the right choice here since it can enforce compliance and automatically detect noncompliant resources.
KR
Kris
1 year ago
I'm pretty confident that Azure Blueprints is the way to go. It allows you to define a compliant environment and then deploy it consistently, which is exactly what this question is asking for. The other options don't seem as well-suited for this specific task.
AL
Alise
1 year ago
Azure RBAC is more about managing access and permissions, so I don't think that's the right solution for enforcing compliance standards. I'm leaning towards either Azure Blueprints or Azure Policy as the best options here.
MA
Marsha
1 year ago
Azure Policy seems like a good choice for this scenario. You can create custom policy definitions to ensure new resources comply with the ISO 27001:2013 standards, and then assign those policies to your subscription.
CH
Chuck
1 year ago
I'm a bit confused on this one. I know Defender for Cloud has some compliance features, but I'm not sure if the regulatory compliance dashboard specifically enforces ISO 27001:2013. I'll need to look into that option a bit more.
TE
Teddy
1 year ago
I think Azure Blueprints would be the best option here. It allows you to define a set of Azure resources that implement the ISO 27001:2013 standards, and then deploy those resources consistently across your subscription.
VA
Vallie
1 year ago
Hmm, this looks like a tricky one. I'll need to think through the details of OpenID Connect and how it relates to the Okta integration network.
KR
Kristal
1 year ago
I'm a bit confused on the different VPN technologies and their specific features. I'll have to think this through carefully.
YE
Yesenia
1 year ago
Hmm, this seems like a tricky one. I'll need to think through the permissions and roles carefully to figure out the right approach.
JE
Jennifer
1 year ago
I'm pretty sure portsentry and scanlogd can detect stealth port scans, but I'm not sure about the other options. I'll need to review those a bit more closely.
LY
Lyda
2 years ago
True, but Blueprints don't enforce ongoing compliance like Azure Policy does.
AL
Allene
2 years ago
Isn't Azure Blueprints also a candidate? It sets up environment standards.
KE
Keva
2 years ago
Agreed, Azure Policy can detect noncompliant resources easily.
CH
Charlena
2 years ago
I think the answer has to be Azure Policy. It checks compliance automatically.
AL
Allene
3 years ago
Yeah, it's about Azure subscriptions and Microsoft Defender for Cloud.
LY
Lyda
3 years ago
The exam question seems straightforward. Anyone knows what to use for enforcing ISO 27001:2013?