SC-100 Certification Practice Question #82

Question

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

You need to enforce ISO 27001:2013 standards for new resources deployed to the subscription. The solution must ensure that noncompliant resources are automatically detected.

What should you use?

Accepted Answer

The requirement is twofold — enforce ISO 27001:2013 on newly deployed resources AND automatically detect noncompliance. MS Learn's ISO/IEC 27001 offering page and the ISO 27001:2013 Regulatory Compliance built-in initiative both state that Azure Policy "helps to enforce organizational standards and assess compliance at scale," with built-in initiatives mapping directly to ISO 27001 controls and a compliance dashboard that detects noncompliant resources. The regulatory compliance dashboard (B) only surfaces assessment results — it provides no enforcement and is itself driven by Azure Policy. The early dissenter who chose B explicitly reversed himself after reading the docs. Suggested Answer, Most Voted, the highest-voted comments, and MS Learn all converge on C.

More SC-100 practice questions