SC-100 Certification Practice Question #63

Question

You open Microsoft Defender for Cloud as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

This HOTSPOT maps two Defender for Cloud secure-score security controls to the recommendation/product that raises their score. For "Restrict unauthorized network access," the only network-layer option offered is network security groups (NSGs) — Conditional Access is identity-based and WAF/Firewall is application-layer (DDoS), so NSG is the fit, matching the 103-👍 top answer. For "Enable endpoint protection," MS Learn states this control is satisfied by deploying Microsoft Defender for Endpoint, which is included in the Defender for Servers plan; the other options (Defender for Resource Manager, private endpoints) are unrelated to endpoint/EDR. The overwhelming community consensus (single 103-👍 comment plus ~7 corroborating posts) and MS Learn both confirm NSG + Microsoft Defender for servers. Confidence is 88% (not higher) because there is no official Suggested Answer in the file and a minor early WAF dissent existed before self-correcting.

More SC-100 practice questions