Microsoft Exam SC-100 Topic 9 Question 37 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 37
Topic #: 9

Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud.

The company signs a contract with the United States government. You need to review the current subscription for NIST 800-53 compliance. What should you do first?

AFrom Defender for Cloud, review the Azure security baseline for audit report.

BFrom Defender for Cloud, review the secure score recommendations.

CFrom Azure Policy, assign a built-in initiative that has a scope of the subscription.

DFrom Defender for Cloud, enable Defender for Cloud plans.

Show Suggested Answer

Suggested Answer: D

by Kanisha at Mar 19, 2024, 05:58 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Melissa

21 days ago

I'll go with option C. Auditing the current security baseline is the logical first step before adding any new compliance standards. Can't build on a shaky foundation, you know?

upvoted 0 times

...

Lavina

23 days ago

Adding a regulatory compliance standard in Defender for Cloud is a good idea, but I think it makes more sense to start by reviewing the existing baseline first.

upvoted 0 times

...

Raina

1 months ago

Reviewing the Azure security baseline for audit report is a solid choice. That should give me a clear picture of how the current setup measures up to the NIST standard.

upvoted 0 times

Verona

2 days ago

That sounds like a good plan. Checking the baseline will definitely help ensure NIST compliance.

upvoted 0 times

...

Jodi

4 days ago

C) From Defender for Cloud, review the Azure security baseline for audit report.

upvoted 0 times

...

Sheron

19 days ago

A) From Defender for Cloud, review the secure score recommendations.

upvoted 0 times

...

Renay

1 months ago

Configuring the Microsoft Defender for Cloud data connector in Sentinel could be useful, but it doesn't seem directly relevant to reviewing NIST 800-53 compliance.

upvoted 0 times

...

Flo

1 months ago

The secure score recommendations seem like a good place to start. That's probably the quickest way to get an overview of the current security posture.

upvoted 0 times