You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to enforce ISO 27001:2013 standards for the subscription. The solution must ensure that noncompliant resources…

The correct answer is B. Azure Policy. Azure Policy is the correct choice because it can both enforce compliance standards (like ISO 27001:2013) and automatically remediate noncompliant resources through remediation tasks. The regulatory compliance dashboard (A) only visualizes compliance status - it does not…

Design security operations, identity, and compliance capabilities

Question

You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to enforce ISO 27001:2013 standards for the subscription. The solution must ensure that noncompliant resources are remediated automatically. What should you use?

Options

Athe regulatory compliance dashboard in Defender for Cloud
BAzure Policy
CAzure Blueprints
DAzure role-based access control (Azure RBAC)

How the community answered

(65 responses)

A
6% (4)
B
89% (58)
C
2% (1)
D
3% (2)

Explanation

Azure Policy is the correct choice because it can both enforce compliance standards (like ISO 27001:2013) and automatically remediate noncompliant resources through remediation tasks. The regulatory compliance dashboard (A) only visualizes compliance status - it does not enforce or remediate. Azure Blueprints (C) is a packaging mechanism that bundles policies, role assignments, and ARM templates, but the actual enforcement and auto-remediation comes from the underlying Azure Policy. Azure RBAC (D) governs who can do what in Azure, not what resource configurations are compliant. Only Azure Policy supports the 'deployIfNotExists' and 'modify' effects that enable automatic remediation of noncompliant resources.

Topics

#Azure Policy#Regulatory Compliance#Automatic Remediation#ISO 27001

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice