nerdexam
Microsoft

SC-100 · Question #273

You have a multicloud environment that contains an Azure subscription, an Amazon Web Services (AWS) subscription, and a Google Cloud Platform (GCP) subscription. You plan to assess data security and…

The correct answer is A. Microsoft Defender for Cloud. The correct answer is A: Microsoft Defender for Cloud. Defender for Cloud natively supports multicloud environments (Azure, AWS, and GCP) and provides built-in regulatory compliance dashboards that automatically monitor compliance against frameworks (e.g., NIST, CIS, PCI-DSS)…

Design security operations, identity, and compliance capabilities

Question

You have a multicloud environment that contains an Azure subscription, an Amazon Web Services (AWS) subscription, and a Google Cloud Platform (GCP) subscription. You plan to assess data security and compliance. You need to design a Compliance Manager solution that meets the following requirements:

  • Provides recommended improvement actions that include detailed

implementation guidance

  • Automatically monitors regulatory compliance
  • Minimizes administrative effort

What should you include in the solution?

Options

  • AMicrosoft Defender for Cloud
  • BCompliance Manager connectors
  • CMicrosoft Defender for Cloud Apps
  • DMicrosoft Sentinel

How the community answered

(24 responses)
  • A
    83% (20)
  • B
    4% (1)
  • C
    8% (2)
  • D
    4% (1)

Explanation

The correct answer is A: Microsoft Defender for Cloud. Defender for Cloud natively supports multicloud environments (Azure, AWS, and GCP) and provides built-in regulatory compliance dashboards that automatically monitor compliance against frameworks (e.g., NIST, CIS, PCI-DSS) with no manual connector setup. It surfaces prioritized, actionable improvement recommendations with detailed implementation guidance and continuously reassesses posture across all three clouds. Compliance Manager connectors (B) require additional setup per cloud and increase administrative overhead. Defender for Cloud Apps (C) focuses on SaaS app discovery and CASB capabilities, not multicloud IaaS/PaaS compliance. Microsoft Sentinel (D) is a SIEM/SOAR platform, not a compliance assessment solution.

Topics

#Multicloud security#Compliance management#Microsoft Defender for Cloud#CSPM

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice