sc-900 Practice Question 1767
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security concepts
Difficulty: medium
Contoso Ltd is experiencing issues with unauthorized access to their hybrid cloud resources. They suspect that the issue might be due to weak password policies or misconfigured network settings. How can you use Threat Intelligence to help identify and mitigate this risk?
Answer Options
A
Performing internal audits to check compliance with security policies
B
Utilizing threat intelligence to identify and mitigate known vulnerabilities
C
Adding more complex firewall rules to restrict access
D
Implementing multi-factor authentication for all users
Correct Answer
B: Utilizing threat intelligence to identify and mitigate known vulnerabilities
Explanation
The correct answer is B. Threat intelligence can provide insights into known vulnerabilities and attack patterns, helping to identify misconfigurations or weak password policies. Option A is incorrect as it focuses on internal audits, which may not provide real-time threat information. Option C is incorrect because it suggests increasing firewall rules, which does not address the root cause of the risk. Option D is incorrect as it does not leverage external threat data to identify specific risks.