SC-100 Certification Practice Question #71

Question

Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud.
The company signs a contract with the United States government.
You need to review the current subscription for NIST 800-53 compliance.
What should you do first?

Accepted Answer

Enhanced security (a Defender plan) is already enabled, but Defender for Cloud only shows the Microsoft cloud security benchmark by default; any other framework — including NIST SP 800-53 — must be explicitly added/assigned to the subscription before its compliance can be reviewed in the Regulatory compliance dashboard. So the first action is to add the NIST 800-53 regulatory compliance standard. MS Learn states this directly, and Suggested + a strong Most Voted (17) + a Highly Voted comment all align, giving high confidence. The lone caveat (NIST not present by default) only reinforces that adding the standard is the prerequisite step.

More SC-100 practice questions