TPT Limited plans to deploy an SAP production landscape to Microsoft Azure which should comply with ISO 27001. Which of the following will help in generating a compliance report for ISO 27001?

Question

Options

• AAzure Monitor
• BAzure Log Analytics
• CAzure Security Center
• DAzure Active Directory (Azure AD)

• A
  2% (1)
• B
  2% (1)
• C
  89% (42)
• D
  6% (3)

Explanation

Azure Security Center (now called Microsoft Defender for Cloud) is correct because it is purpose-built for security posture management and regulatory compliance. It includes a built-in Compliance Dashboard that maps your Azure resources against frameworks like ISO 27001, generating compliance reports and identifying gaps - exactly what TPT Limited needs.

Why the distractors are wrong:

• A. Azure Monitor - focuses on performance metrics, logs, and alerting for operational health; it has no compliance framework mapping or reporting capability.
• B. Azure Log Analytics - is a data query and aggregation tool for log data; it can feed Security Center but cannot itself produce compliance reports against ISO 27001.
• D. Azure Active Directory - manages identities and access control; it contributes to meeting security requirements but does not generate compliance reports.

Memory tip: Think "Security Center = Security Certification Center" - it's the one Azure service that directly ties your environment to compliance certifications like ISO 27001, SOC 2, and PCI-DSS through its Regulatory Compliance blade.

No community discussion yet for this question.