MENU
Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud.
The company signs a contract with the United States government. You need to review the current subscription for NIST 800-53 compliance. What should you do first?
Suggested Answer: D
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
SK
Skye
11 months ago
I thought we needed to assign an initiative before anything else?
VA
Valentin
11 months ago
Agreed, secure score gives a clear path to compliance!
MI
Micheal
11 months ago
Wait, are we sure enabling Defender plans is necessary right away?
BE
Beckie
12 months ago
I think reviewing the Azure security baseline is more important first.
AI
Aimee
12 months ago
Definitely start with the secure score recommendations!
QU
Queenie
1 year ago
Enabling Defender for Cloud plans sounds important, but I wonder if we should focus on compliance reviews before that.
MA
Marnie
1 year ago
I feel like assigning a built-in initiative from Azure Policy could be a good move, but I can't recall if that's the very first action we should take.
NO
Noah
1 year ago
I remember practicing a question where we had to look at secure score recommendations first. Could that be relevant here too?
TE
Teresita
1 year ago
I think we might need to start by checking the Azure security baseline, but I'm not entirely sure if that's the first step for NIST compliance.
SO
Sommer
1 year ago
I'm a little unsure if reviewing the secure score recommendations or enabling Defender for Cloud plans is the right approach here. I think I'll start with the Azure security baseline audit report and go from there.
GR
Gracia
1 year ago
I'm feeling pretty confident about this one. Reviewing the Azure security baseline for audit report in Defender for Cloud seems like the logical first step to understand the current compliance posture.
SY
Sylvia
1 year ago
Okay, I've got this. The key is to first review the Azure security baseline for audit report in Defender for Cloud. That will give me a good overview of the current compliance status against the NIST 800-53 standard.
CA
Carmelina
1 year ago
I'm a bit confused on the best approach here. Should I be looking at the secure score recommendations in Defender for Cloud or assigning a built-in initiative through Azure Policy? I'll need to review the details of each option.
HE
Hermila
1 year ago
Hmm, this seems like a straightforward question about reviewing NIST 800-53 compliance. I think I'll start by reviewing the Azure security baseline for audit report in Defender for Cloud.
MI
Misty
1 year ago
I'm a bit unsure about this one. The options seem similar, but I'm not sure which one will best meet the customer's needs. I'll have to carefully read through each choice to make the right recommendation.
NI
Nilsa
1 year ago
I remember we discussed how the government plays a key role as an external stakeholder in our last class.
MA
Marge
1 year ago
I think image lazy loading might help improve the rendering times, but does it really apply to GIFs when they are scrolling?
LO
Louann
1 year ago
The key here is to identify the two selling advantages of using Expedition. I'll need to read the options closely and choose the best two.
GL
Gladys
1 year ago
Hmm, this looks like a tricky one. I'm thinking we could try increasing the number of parallel jobs to speed things up, but I'm not sure if that's the best approach here.
ME
Melissa
1 year ago
I'll go with option C. Auditing the current security baseline is the logical first step before adding any new compliance standards. Can't build on a shaky foundation, you know?
LA
Lavina
1 year ago
Adding a regulatory compliance standard in Defender for Cloud is a good idea, but I think it makes more sense to start by reviewing the existing baseline first.
EL
Elliot
1 year ago
That sounds like a logical approach. Let's start by reviewing the baseline and then proceed accordingly.
SA
Salome
1 year ago
Once we have a clear understanding of the current state, we can then add a regulatory compliance standard if needed.
FA
Fausto
1 year ago
I agree, reviewing the Azure security baseline for audit report should be the first step.
RA
Raina
2 years ago
Reviewing the Azure security baseline for audit report is a solid choice. That should give me a clear picture of how the current setup measures up to the NIST standard.
VE
Verona
1 year ago
That sounds like a good plan. Checking the baseline will definitely help ensure NIST compliance.
JO
Jodi
1 year ago
C) From Defender for Cloud, review the Azure security baseline for audit report.
SH
Sheron
1 year ago
A) From Defender for Cloud, review the secure score recommendations.
RE
Renay
2 years ago
Configuring the Microsoft Defender for Cloud data connector in Sentinel could be useful, but it doesn't seem directly relevant to reviewing NIST 800-53 compliance.
FL
Flo
2 years ago
The secure score recommendations seem like a good place to start. That's probably the quickest way to get an overview of the current security posture.
TA
Tamar
1 year ago
D) From Defender for Cloud, add a regulatory compliance standard.
KE
Keshia
1 year ago
C) From Defender for Cloud, review the Azure security baseline for audit report.
SH
Shaun
1 year ago
B) From Microsoft Sentinel, configure the Microsoft Defender for Cloud data connector.
LO
Lorita
2 years ago
A) From Defender for Cloud, review the secure score recommendations.
MA
Margurite
2 years ago
I think we should also review the Azure security baseline for audit report to cover all bases.
CA
Casandra
2 years ago
I agree with Lashawna. It's important to prioritize security compliance.
LA
Lashawna
2 years ago
I think we should review the secure score recommendations first.