exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 14 question 2 discussion

Actual exam question from Microsoft's AZ-500
Question #: 2
Topic #: 14
[All AZ-500 Questions]

From Microsoft Defender for Cloud, you need to deploy SecPol1.
What should you do first?

  • A. Enable Microsoft Defender for Cloud.
  • B. Create an Azure Management group.
  • C. Create an initiative.
  • D. Configure continuous export.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
JakeCallham
Highly Voted 2 years, 10 months ago
Selected Answer: A
It doesnt state Defender for cloud is enabled? So thats a first
upvoted 13 times
...
Gesbie
Highly Voted 2 years, 3 months ago
In Exam April 11, 2023
upvoted 6 times
...
jozef_chudy76
Most Recent 2 months, 1 week ago
Selected Answer: A
Please note the "Planned Changes" section - "Deploy SecPol1 by using Microsoft Defender for Cloud" - so it didn't take place yet, hence A for me.
upvoted 2 times
...
Hot_156
5 months ago
Selected Answer: C
It states, "From Microsoft Defender..." That means Defender for cloud is enabled lol
upvoted 1 times
...
pentium75
1 year ago
Selected Answer: C
It says "From Defender for Cloud ..." which for me sounds as if Defender for Cloud is already there. But as it can't deploy policies, only initiatives, the first step would be creating an initiative. (If the task is "From the Azure portal, create XXX" the first step would NOT be "Create an Azure subscription".)
upvoted 1 times
...
Yuppers2024
1 year ago
I see majority of people selecting option A. Is Defender for Cloud a requirement for a custom policy definition?
upvoted 1 times
...
wardy1983
1 year, 8 months ago
Answer: A Explanation: First enable Microsoft Defender for Cloud for your subscriptions, see URL https://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-management-group
upvoted 1 times
...
tweleve
1 year, 9 months ago
in exam 13 Oct
upvoted 3 times
...
TheProfessor
1 year, 10 months ago
Selected Answer: A
Since it is asking "What should you do first?", I will go with A. If MDC is already there, then the answer is C.
upvoted 3 times
...
ErikPJordan
1 year, 10 months ago
Selected Answer: C
Tricky one this To deploy SecPol1 from Microsoft Defender for Cloud, you should first enable Microsoft Defender for Cloud. So, the correct answer is: A. Enable Microsoft Defender for Cloud. Enabling Microsoft Defender for Cloud is the first step to start using its security features and policies, including deploying security policies like SecPol1. If you assume that Microsoft Defender for Cloud is already enabled, and you need to deploy SecPol1, then the logical next step would be to create an initiative. So, the correct step in this scenario would be: C. Create an initiative. An initiative in Azure Policy is a set of policies designed to help you achieve specific compliance goals for your resources. Deploying an initiative would allow you to apply SecPol1 and other related policies to your Azure resources.
upvoted 3 times
...
ESAJRR
1 year, 10 months ago
Selected Answer: A
A. Enable Microsoft Defender for Cloud.
upvoted 1 times
...
cyberebyc
1 year, 11 months ago
Answer is: C It says "From DFC" so it's assumed to be enabled already. Hence, the answer is C
upvoted 3 times
heatfan900
1 year, 10 months ago
CORRECT
upvoted 1 times
...
TheProfessor
1 year, 9 months ago
There is a well saying - there is no assumption in security. Either it has or it has not. Unless questions says there is MDFC, only then it has MDFC.
upvoted 1 times
...
...
Cock
2 years, 2 months ago
in exam 20.05.2023
upvoted 2 times
...
majstor86
2 years, 5 months ago
Selected Answer: A
A. Enable Microsoft Defender for Cloud.
upvoted 2 times
...
danlo
2 years, 7 months ago
Selected Answer: A
The only thing dealing with policies or initiatives in DfC is in the regulatory compliance section which requires enhanced features enabled. I would say A. https://learn.microsoft.com/en-us/azure/defender-for-cloud/enhanced-security-features-overview https://learn.microsoft.com/en-us/azure/defender-for-cloud/custom-security-policies?pivots=azure-portal
upvoted 2 times
...
Amit3
2 years, 10 months ago
First enable Microsoft Defender for Cloud for your subscriptions, see URL https://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-management-group
upvoted 5 times
koreshio
2 years, 9 months ago
thanks for pointing this out. the linked page describes this which seems relevant: "When any Microsoft Defender plan is enabled, it's described in a policy definition as being on the 'Standard' setting. When it's disabled, it's 'Free'. "
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...