AZ-900 Practice Question 100: Defender for Cloud Secure Score
Microsoft Azure Fundamentals (AZ-900) · Test 10 · question 10 of 10
A subscription owner wants one place to see how securely her Azure resources are currently configured, get a single score summarizing that posture, and receive prioritized recommendations for fixing the weakest points. Which service should she use?
Show answer and explanation
Answer:
Microsoft Defender for Cloud provides cloud security posture management: it checks the configuration of your resources against security recommendations, and as you remediate those recommendations your secure score improves, a single number summarizing your overall posture, exactly what the subscription owner is asking for.
Option A, Conditional Access, enforces sign-in conditions such as requiring multifactor authentication before granting access; it controls who can sign in under what circumstances, but it does not assess how your resources are configured or produce a security score. Option C, Azure Monitor, collects metrics and logs for performance and availability observability; it tells you how your resources are running, not how securely they are configured. Option D, Microsoft Purview, focuses on data governance and classification (discovering and labeling sensitive data across your estate) rather than on infrastructure security posture and recommendations.
Reference: Microsoft Defender for Cloud overview