Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsMedium
A company wants to assess its overall security posture across its Azure subscriptions, identify misconfigurations, and get actionable recommendations to improve its security score. They need a centralized view of security recommendations for virtual machines, databases, storage accounts, and network resources. Which Microsoft security solution provides this capability?
- AAzure DDoS Protection
- BMicrosoft Defender for Cloud
- CAzure Monitor
- DAzure Bastion
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Defender for Cloud
Microsoft Defender for Cloud (formerly Azure Security Center) provides Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP). It continuously assesses the security posture of Azure resources, identifies vulnerabilities, and offers actionable recommendations to improve the secure score.
Why the other options are wrong
- A. Azure DDoS Protection protects against Distributed Denial of Service attacks, not security posture management.
- C. Azure Monitor collects and analyzes telemetry data from Azure resources, but it's not primarily a security posture management tool.
- D. Azure Bastion provides secure RDP/SSH connectivity to virtual machines, not security posture assessment.
Microsoft Defender for Cloud (CSPM)
A unified security management system that strengthens the security posture of your cloud resources and provides advanced threat protection.
- Provides a Secure Score for continuous security posture assessment
- Offers actionable recommendations to remediate vulnerabilities
- Covers Azure, hybrid, and multi-cloud environments
Memory trick: Defender for Cloud keeps your cloud fit.