SC-100 Certification Practice Question #75

Question

Your company has an Azure subscription that uses Microsoft Defender for Cloud.

The company signs a contract with the United States government.

You need to review the current subscription for NIST 800-53 compliance.

What should you do first?

Accepted Answer

This is the same NIST SP 800-53 scenario as Q30 (the community even notes it is a repeated question), with the answer choices relabeled — the correct first action is to assign the NIST SP 800-53 built-in *initiative* (policy set) at subscription scope, after which Defender for Cloud's Regulatory compliance dashboard evaluates the subscription. MS Learn confirms NIST 800-53 is delivered as an Azure Policy regulatory-compliance built-in initiative, and the Suggested Answer (D, marked ✓) plus the cited, undisputed community comments all agree. No competing answer selections appear in the discussion, so confidence sits at 90.

More SC-100 practice questions