SC-100 Question #158: Real Exam Question with Answer & Explanation

Question

Your company plans to evaluate the security of its Azure environment based on the principles of the Microsoft Cloud Adoption Framework for Azure. You need to recommend a cloud-based service to evaluate whether the Azure resources comply with the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF). What should you recommend?

Options

• ACompliance Manager in Microsoft Purview
• BMicrosoft Defender for Cloud
• CMicrosoft Sentinel
• DMicrosoft Defender for Cloud Apps

Explanation

{"question_number": 2, "correct_answer": "B", "explanation": "Microsoft Defender for Cloud includes a built-in Regulatory Compliance dashboard that allows organizations to assess their Azure resources against frameworks such as the NIST Cybersecurity Framework (CSF). It continuously evaluates resource configurations against control requirements and surfaces compliance gaps with remediation guidance. Compliance Manager in Microsoft Purview (A) focuses on Microsoft 365 and data compliance, not Azure resource posture. Microsoft Sentinel (C) is a SIEM/SOAR platform for threat detection and response, not compliance evaluation. Microsoft Defender for Cloud Apps (D) is a Cloud Access Security Broker (CASB) focused on SaaS application security, not Azure resource compliance.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.