Microsoft Exam SC-100 Topic 2 Question 47 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 47
Topic #: 2

You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices. All users are assigned Microsoft 365 5 licenses and the Microsoft Defender Vulnerability Management add-on. The Windows 11 devices are managed by using Microsoft Intune and Microsoft Defender for Endpoint. The Windows 11 devices are configured during deployment to comply with Center for Internet Security (CIS) benchmarks for Windows 11.

You need to recommend a compliance solution for the Windows 11 devices. The solution must identify devices that were modified and no longer comply with the CIS benchmarks.

What should you include in the recommendation?

AAuthenticated scan for Windows in Microsoft Defender Vulnerability Management

BMicrosoft Secure Score for Devices in Defender for Endpoint

Cattack surface reduction (ASR) rules in Defender for Endpoint

Dsecurity baselines assessments in Microsoft Defender Vulnerability Management

Show Suggested Answer

Suggested Answer: D

by Eugene at Jul 12, 2024, 06:33 AM

Limited Time Offer

25%

28 days ago

I think the answer is D. Security baseline assessments in Microsoft Defender Vulnerability Management should be able to identify devices that are no longer compliant with the CIS benchmarks.

upvoted 0 times

Rickie

15 days ago

I agree, D) security baselines assessments in Microsoft Defender Vulnerability Management is the best option.

upvoted 0 times

...

Estrella

1 months ago

I'm not sure, but option A) Authenticated scan for Windows in Microsoft Defender Vulnerability Management also sounds like a good choice.

upvoted 0 times

...

Arlette

1 months ago

I agree with option D. It seems like the most comprehensive solution for our compliance needs.

upvoted 0 times

...

Shenika

2 months ago

I think we should go with option D) security baselines assessments in Microsoft Defender Vulnerability Management.

upvoted 0 times

...