Microsoft Exam SC-100 Topic 4 Question 49 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 49
Topic #: 4

You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices. All users are assigned Microsoft 365 5 licenses and the Microsoft Defender Vulnerability Management add-on. The Windows 11 devices are managed by using Microsoft Intune and Microsoft Defender for Endpoint. The Windows 11 devices are configured during deployment to comply with Center for Internet Security (CIS) benchmarks for Windows 11.

You need to recommend a compliance solution for the Windows 11 devices. The solution must identify devices that were modified and no longer comply with the CIS benchmarks.

What should you include in the recommendation?

AAuthenticated scan for Windows in Microsoft Defender Vulnerability Management

BMicrosoft Secure Score for Devices in Defender for Endpoint

Cattack surface reduction (ASR) rules in Defender for Endpoint

Dsecurity baselines assessments in Microsoft Defender Vulnerability Management

Show Suggested Answer

Suggested Answer: D

by Leana at Aug 23, 2024, 05:05 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lanie

3 months ago

Ooh, I have a joke for this one! Why did the cybersecurity expert cross the road? To get to the other SIDE of the CIS benchmark! Ba dum tss.

upvoted 0 times

Chauncey

2 months ago

D) security baselines assessments in Microsoft Defender Vulnerability Management

upvoted 0 times

...

Twila

2 months ago

C) attack surface reduction (ASR) rules in Defender for Endpoint

upvoted 0 times

...

Rocco

2 months ago

B) Microsoft Secure Score for Devices in Defender for Endpoint

upvoted 0 times

...

Carin

2 months ago

A) Authenticated scan for Windows in Microsoft Defender Vulnerability Management

upvoted 0 times

...

Makeda

3 months ago

I'm not sure, but option A) Authenticated scan for Windows in Microsoft Defender Vulnerability Management could also be a good choice.

upvoted 0 times

...

Alesia

3 months ago

I agree with option D. It seems like the most comprehensive solution for our needs.

upvoted 0 times

...

Laurel

3 months ago

Hmm, I'd go with B. The Secure Score for Devices in Defender for Endpoint should give a good overview of the compliance posture. Gotta love those fancy security scores!

upvoted 0 times

Bo

2 months ago

I agree, having a security score can really help prioritize actions to improve security posture.

upvoted 0 times

...

Melda

2 months ago

That sounds like a solid choice. It's always good to have a clear view of compliance.

upvoted 0 times

...

Aja

3 months ago

B) Microsoft Secure Score for Devices in Defender for Endpoint

upvoted 0 times

...

Vince

3 months ago

I think we should go with option D) security baselines assessments in Microsoft Defender Vulnerability Management.

upvoted 0 times

...

Sabine

4 months ago

I agree, D seems the most relevant. Keeping those devices in compliance is crucial, and the vulnerability management tools can really help with that.

upvoted 0 times

...

Reuben

4 months ago

Option D looks like the way to go. Security baselines assessments should help identify any deviations from the CIS benchmarks.

upvoted 0 times

Denae

2 months ago

I agree, security baselines assessments in Microsoft Defender Vulnerability Management would be the best choice for this scenario.

upvoted 0 times

...

Arlean

2 months ago

Yes, using security baselines assessments will ensure that any modifications to the Windows 11 devices are quickly identified and remediated.

upvoted 0 times

...

Emogene

3 months ago

Option D looks like the way to go. Security baselines assessments should help identify any deviations from the CIS benchmarks.

upvoted 0 times

...