SC-100 Certification Practice Question #73

Question

You have an Azure subscription that is used as an Azure landing zone for an application.

You need to evaluate the security posture of all the workloads in the landing zone.

What should you do first?

Accepted Answer

Microsoft Defender for Cloud is the tool that evaluates security posture (CSPM) across all workloads in a subscription/landing zone, producing a secure score and recommendations. To evaluate posture of *all* workload/resource types in the landing zone, you first onboard Defender for Cloud and enable its Defender plans, which is what option D describes; the official Suggested Answer and a dominant Most Voted (24) with a 15-👍 Highly Voted comment all converge on D. Confidence is held below 90 because killaK raises a legitimate point that foundational CSPM recommendations are free and don't strictly require enabling the paid (CWPP) Defender plans — so the wording is imperfect — but no answer choice describes "use the free CSPM dashboard," making D the best available action.

More SC-100 practice questions