AZ-305 Practice Question 61: Security Posture Single Score
Microsoft Azure Solutions Architect Expert (AZ-305) · Test 7 · question 1 of 10
A company has 40 Azure subscriptions under several management groups. The chief information security officer wants one measurable security posture score across all of them, a ranked list of recommendations that shows which fixes improve the score most, and a way to compare business units at management group level.
What should you use?
Show answer and explanation
Answer:
Defender for Cloud calculates a secure score from the recommendations that apply to your resources. Higher scores mean fewer identified risks, recommendations are grouped into security controls that show how much each fix raises the score, and the score can be shown for individual subscriptions and for management groups, which gives the roll-up the CISO wants.
Option A is manual and only shows policy compliance, not a weighted posture score with prioritized fixes.
Option B analyzes activity events for threat detection and investigation. It does not produce a posture score or remediation priorities.
Option D scores reliability, cost, performance and operational excellence advice, and its security category is not a management group posture score with prioritized security controls.
Reference: Cloud Secure Score in Microsoft Defender for Cloud