Microsoft Exam SC-100 Topic 1 Question 46 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 46
Topic #: 1

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

You need to enforce ISO 27001:2013 standards for new resources deployed to the subscription. The solution must ensure that noncompliant resources are automatically detected.

What should you use?

AAzure Blueprints

Bthe regulatory compliance dashboard in Defender for Cloud

CAzure role-based access control (Azure RBAC)

DAzure Policy

Show Suggested Answer

Suggested Answer: D

by Yaeko at Jul 07, 2024, 11:25 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lewis

4 months ago

Haha, I bet the exam writer is trying to trick us. Everyone knows Azure Policy is the way to go for this. Unless, of course, they're really testing our knowledge of Defender for Cloud's hidden capabilities. But nah, I'm sticking with D.

upvoted 0 times

...

Margarita

4 months ago

This is a no-brainer! The answer is definitely D. Azure Policy is the Swiss Army knife of compliance enforcement. Defender for Cloud is just the flashy dashboard that tells you what Azure Policy is already doing.

upvoted 0 times

...

Jesus

4 months ago

Hmm, I'm torn between B and D. I guess I'll go with D, Azure Policy, since it's more of a proactive enforcement tool compared to the dashboard in Defender for Cloud.

upvoted 0 times

Jamal

3 months ago

Yeah, the regulatory compliance dashboard in Defender for Cloud is more for monitoring, while Azure Policy is for enforcement.

upvoted 0 times

...

Jeannetta

3 months ago

I agree, Azure Policy is a proactive enforcement tool that can automatically detect noncompliant resources.

upvoted 0 times

...

Eva

3 months ago

I think Azure Policy is the way to go for enforcing ISO 27001:2013 standards.

upvoted 0 times

...

Lenny

4 months ago

Azure Blueprints can help with standardization, but Azure Policy is more suitable for enforcing compliance.

upvoted 0 times

...

Lera

4 months ago

But what about Azure Blueprints? Wouldn't that be a better option for standardizing deployments?

upvoted 0 times

...

Solange

4 months ago

I'm going with B. The regulatory compliance dashboard in Defender for Cloud is specifically built to monitor and report on compliance with various standards, including ISO 27001:2013.

upvoted 0 times

Marica

3 months ago

I see your point. Using the regulatory compliance dashboard in Defender for Cloud does seem like the most suitable solution for this scenario.

upvoted 0 times

...

Mee

3 months ago

Actually, I believe B is the best option. The regulatory compliance dashboard in Defender for Cloud is specifically designed for monitoring and reporting on compliance with standards like ISO 27001:2013.

upvoted 0 times

...

Trevor

4 months ago

I agree with you. Azure Policy is the correct choice for automatically detecting noncompliant resources.

upvoted 0 times

...

Adelina

4 months ago

I think D. Azure Policy can help enforce compliance with ISO 27001:2013 standards for new resources.

upvoted 0 times

...

Kaitlyn

5 months ago

I agree with Lenny, Azure Policy can automatically detect noncompliant resources.

upvoted 0 times

...

Novella

5 months ago

I think the answer is D. Azure Policy seems like the right tool to enforce the ISO 27001:2013 standards and automatically detect noncompliant resources. It's designed for that purpose.

upvoted 0 times

Cordell

4 months ago

I think the answer is D. Azure Policy seems like the right tool to enforce the ISO 27001:2013 standards and automatically detect noncompliant resources. It's designed for that purpose.

upvoted 0 times

...