Question 74

Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud. The company signs a contract with the United States government. You need to review the current subscription for NIST 800-53 compliance. What should you do first?

• AFrom Azure Policy, assign a built-in initiative that has a scope of the subscription.
• BFrom Azure Policy, assign a built-in policy definition that has a scope of the subscription.
• CFrom Defender for Cloud, review the Azure security baseline for audit report.
• DFrom Microsoft Defender for Cloud Apps, create an access policy for cloud applications.