SC-200 Certification Practice Question #197

Question

You have an Azure subscription named Sub1 that uses Microsoft Defender for Cloud.
You need to assign the PCI DSS 4.0 initiative to Sub1 and have the initiative displayed in the Defender for Cloud Regulatory compliance dashboard.

From Security policies in the Environment settings, you discover that the option to add more industry and regulatory standards is unavailable.

What should you do first?

Accepted Answer

The "add more industry and regulatory standards" option is greyed out because the subscription has no Defender plan that provides the Regulatory compliance capability. MS Learn states regulatory compliance is one of the Defender CSPM plan's features and becomes available once at least one Defender plan is enabled, so enabling the CSPM plan first is the unblocking step before PCI DSS 4.0 can be assigned. Suggested Answer, a unanimous 8-vote Most Voted, multiple ≥2 👍 comments, and MS Learn all converge, giving high confidence; continuous-export options manage data egress (not standards) and disabling MCSB is counterproductive.

More SC-200 practice questions