Prepare and test your skills

Prepare and test your skills

Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
A financial services company hosts workloads across Azure and on-premises environments. The organization must adhere to strict industry regulations and needs a centralized way to continuously evaluate its environment against recognized regulatory standards, generate audit-ready reports, and receive actionable remediation guidance.
Which feature in Microsoft Defender for Cloud should the organization use to meet these compliance tracking requirements?
Adaptive application controls is an intelligent security capability within Microsoft Defender for Cloud that defines automated allowlists of known-safe applications running on your virtual machines.
Adaptive application controls are designed for endpoint and workload hardening, specifically preventing malicious or unauthorized software from executing. They do not evaluate cloud infrastructure against regulatory benchmarks or produce compliance assessment reports.
This option would be correct if the organization needed to automatically identify safe applications and block unauthorized software execution across their virtual servers.
Just-in-time (JIT) VM access is a security feature within Microsoft Defender for Cloud that locks down inbound management ports (such as SSH and RDP) on virtual machines and only opens them on demand for authorized users for a limited duration.
JIT VM access serves as a network threat mitigation tool to reduce exposure to brute-force attacks and port scanning. While implementing JIT VM access can help meet specific network security controls, it is not a compliance tracking tool or reporting interface.
This option would be correct if the scenario required limiting persistent inbound network access to virtual machines and reducing the risk of management port attacks.
The Regulatory compliance dashboard and reports feature in Microsoft Defender for Cloud provides a centralized interface designed to help organizations monitor, assess, and manage their compliance posture against established industry benchmarks, standards, and regulatory requirements.
The Regulatory compliance dashboard is purpose-built to aggregate security telemetry and map it directly into compliance frameworks. It eliminates the need to manually audit resources against individual regulatory requirements.
Workflow automation in Microsoft Defender for Cloud allows administrators to trigger automated actions and playbooks using Azure Logic Apps in response to specific security alerts or recommendations.
While workflow automation helps streamline responses to security events—such as automatically opening an IT ticket or notifying security teams via email—it does not provide an interactive dashboard or formal reporting tools to track compliance against industry standards.
This option would be correct if the requirement were to automatically dispatch an email notification or trigger an incident playbook when a high-severity security alert is detected.
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
Keep the momentum going with these hand-picked practice scenarios
Last updated