sc-900 Practice Question 1791
Exam: sc-900
Domain: Describe the capabilities of Microsoft security solutions
Topic: Describe security management capabilities in Azure
Difficulty: medium
During a recent security audit, Contoso Ltd discovered that some of their Azure virtual machines were not compliant with the latest security baselines. What action should they take to ensure these VMs meet the required security standards?
Answer Options
A
Use Azure Policy to create a custom policy
B
Apply Security Baselines to the affected VMs
C
Configure Azure Monitor to alert on non-compliance
D
Enable Secure Score to monitor compliance
Correct Answer
B: Apply Security Baselines to the affected VMs
Explanation
Security Baselines can be used to set compliance requirements for Azure resources and automatically apply security policies to ensure compliance. Remediation actions can be triggered when a resource does not meet the baseline requirements. Azure Policy can be used to enforce security policies but does not provide automatic remediation. Azure Monitor can be used for monitoring resource health but does not enforce security policies.