Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudMedium
A security operations team is using Microsoft Defender for Cloud to manage the security posture of their Azure environment. They have defined several custom security standards based on internal corporate policies. The team needs to ensure that all Azure resources are continuously assessed against these custom standards and that any non-compliance generates a high-priority alert. Which feature in Microsoft Defender for Cloud should be configured to achieve this goal?
- ARegulatory compliance dashboard
- BCustom recommendations
- CWorkbook integration
- DSecure Score calculations
Show answer & explanationAnswer & explanation
Correct answer: A. Regulatory compliance dashboard
The regulatory compliance dashboard in Microsoft Defender for Cloud allows organizations to manage their compliance posture against various standards, including custom ones. By onboarding custom initiatives (based on Azure Policy) to the regulatory compliance dashboard, non-compliant resources will be identified, and the associated recommendations can be configured to generate alerts.
Why the other options are wrong
- B. While custom recommendations can be created, the regulatory compliance dashboard is the central place to monitor and report on compliance against a set of standards, including custom ones, and integrate with alerting.
- C. Workbook integration is for visualization and reporting, not for continuous assessment against custom standards and alert generation.
- D. Secure Score reflects the overall security posture based on built-in recommendations but doesn't directly manage custom standards for alerting.
Defender for Cloud Regulatory Compliance Dashboard
The regulatory compliance dashboard in Microsoft Defender for Cloud provides a centralized view of compliance status against various regulatory standards and custom policies, enabling continuous assessment and reporting.
- Maps security recommendations to compliance controls.
- Supports built-in and custom compliance standards (Azure Policy initiatives).
- Provides a compliance score for each standard.
- Helps identify and remediate non-compliant resources.
Memory trick: Compliance's core: Custom rules, constant checks, clear reports.