Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsMedium
A security auditor needs to gain a comprehensive overview of the security posture of an organization's Azure subscriptions, identify misconfigurations, and receive actionable recommendations to improve security. The auditor also requires a 'secure score' to track progress over time. Which basic security capability in Azure provides this centralized view and guidance?
- AAzure Active Directory
- BAzure Network Watcher
- CAzure Monitor
- DMicrosoft Defender for Cloud (Free Tier)
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Defender for Cloud (Free Tier)
The free tier of Microsoft Defender for Cloud (formerly Azure Security Center Free) provides a secure score, security recommendations, and continuous assessment of the security posture for all Azure resources, offering a centralized view for identifying misconfigurations and improving security.
Why the other options are wrong
- A. Azure Active Directory manages identities and access, not overall security posture or secure score.
- B. Azure Network Watcher provides tools for monitoring, diagnosing, and viewing metrics in an Azure virtual network, not overall security posture.
- C. Azure Monitor collects and analyzes telemetry data, but doesn't provide a secure score or direct security recommendations for posture management.
Microsoft Defender for Cloud (Free Tier)
The foundational level of Microsoft Defender for Cloud, offering basic cloud security posture management for Azure resources.
- Provides a secure score.
- Offers security recommendations.
- Performs continuous security assessment for Azure resources.
Memory trick: Defender Free: Foundational Recommendations for Everyone.