SC-100 Certification Practice Question #273

Question

You need to recommend a solution to meet the AWS requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

The AWS requirement is to flag EC2 instances that are noncompliant with secure score recommendations. Secure score and AWS-specific security recommendations are a Defender for Cloud (CSPM) capability calculated per AWS connector, so box 1 is Defender for Cloud. The second requirement — collecting AWS *service logs* — is satisfied by the Microsoft Sentinel AWS connector, which "pulls AWS service logs (CloudTrail, VPC Flow Logs, GuardDuty, CloudWatch) into Microsoft Sentinel," so box 2 is Microsoft Sentinel. The two Highly Voted comments (51 and 19 👍) align on exactly this pairing. The only notable dissent argued for Defender for servers in box 1 because it underpins secure score; however, secure score and its recommendations are viewed and evaluated in Defender for Cloud, which is the option that directly maps to "noncompliant with secure score recommendations." Because the file records no official Suggested Answer letter and there is a reasoned (if minority) Defender-for-servers view, confidence is set at 86.

More SC-100 practice questions