sc-900 Practice Question 1793
Exam: sc-900
Domain: Describe the capabilities of Microsoft security solutions
Topic: Describe security management capabilities in Azure
Difficulty: medium
Contoso Ltd wants to ensure that their Azure resources are configured according to the latest security best practices without manual intervention. Which feature should they enable to automate this process?
Answer Options
A
Secure Score
B
Security Baselines
C
Microsoft Defender for Cloud
D
Azure Policy
Correct Answer
B: Security Baselines
Explanation
Security Baselines can be used to set compliance requirements for Azure resources and automatically apply security policies to ensure compliance. This feature allows for automated enforcement of security policies without manual intervention. Secure Score provides a security posture assessment but does not enforce policies. Microsoft Defender for Cloud can monitor and respond to security events but does not provide automated policy enforcement. Azure Policy can be used to enforce security policies but requires manual configuration.