AZ-500 Question #228: Real Exam Question with Answer & Explanation

Question

You have an Azure subscription named Subscription1. You need to view which security settings are assigned to Subscription1 by default. Which Azure policy or initiative definition should you review?

Options

• Athe Audit diagnostic setting policy definition
• Bthe Enable Monitoring in Azure Security Center initiative definition
• Cthe Enable Azure Monitor for VMs initiative definition
• Dthe Azure Monitor solution `Security and Audit' must be deployed policy definition

Explanation

Explanation

Option B is correct because "Enable Monitoring in Azure Security Center" is the built-in initiative definition that contains the default security policies automatically assigned to Azure subscriptions, covering areas like OS vulnerability assessments, endpoint protection, disk encryption, and network security group monitoring - making it the go-to place to review default security settings.

Option A is wrong because the "Audit diagnostic setting" policy is narrowly focused on verifying whether diagnostic logging is enabled for specific resource types, not on reviewing broad security configurations assigned by default.

Option C is wrong because "Enable Azure Monitor for VMs" is an initiative specifically designed to deploy monitoring agents and dependency tracking on virtual machines, which is a performance/operations concern rather than a security settings review.

Option D is wrong because the "Security and Audit" solution policy refers to a specific Log Analytics workspace solution deployment check, not the comprehensive set of default security policies applied to a subscription.

💡 Memory Tip: Think of it this way - Security Center = Security Settings. When you need to review default security policies in Azure, always look to the Azure Security Center initiative, as it is the central hub Microsoft uses to enforce and monitor security baselines across your subscription by default.

No community discussion yet for this question.