Microsoft SC-100 Exam Questions & Answers

Correct Answer: D

Add a regulatory standard to your dashboard

The following steps explain how to add a package to monitor your compliance with one of the supported regulatory standards.

Add a standard to your Azure resources

1.

From Defender for Cloud's menu, select Regulatory compliance to open the regulatory compliance dashboard. Here you can see the compliance standards currently assigned to the currently selected subscriptions.

2.

From the top of the page, select Manage compliance policies. The Policy Management page appears.

3.

Select the subscription or management group for which you want to manage the regulatory compliance posture.

4.

To add the standards relevant to your organization, expand the Industry and regulatory standards section and select Add more standards.

5.

From the Add regulatory compliance standards page, you can search for any of the available standards:

6.

Select Add and enter all the necessary details for the specific initiative such as scope, parameters, and remediation.

7.

From Defender for Cloud's menu, select Regulatory compliance again to go back to the regulatory compliance dashboard.

Your new standard appears in your list of Industry and regulatory standards.

Note: Customize the set of standards in your regulatory compliance dashboard.

Microsoft Defender for Cloud continually compares the configuration of your resources with requirements in industry standards, regulations, and benchmarks. The regulatory compliance dashboard provides insights into your compliance posture based on how you're meeting specific compliance requirements. Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/update-regulatory-compliance-packages

Correct Answer: D

Microsoft Security Compliance Toolkit 1.0, Policy Analyzer.

The Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). Its main features include:

Highlight when a set of Group Policies has redundant settings or internal inconsistencies.

Highlight the differences between versions or sets of Group Policies.

Compare GPOs against current local policy and local registry settings

Export results to a Microsoft Excel spreadsheet

Policy Analyzer lets you treat a set of GPOs as a single unit. This treatment makes it easy to determine whether particular settings are duplicated across the GPOs or are set to conflicting values. Policy Analyzer also lets you capture a

baseline and then compare it to a snapshot taken at a later time to identify changes anywhere across the set.

Note: The Security Compliance Toolkit (SCT) is a set of tools that allows enterprise security administrators to download, analyze, test, edit, and store Microsoft-recommended security configuration baselines for Windows and other Microsoft

products.

The SCT enables administrators to effectively manage their enterprise's Group Policy Objects (GPOs). Using the toolkit, administrators can compare their current GPOs with Microsoft-recommended GPO baselines or other baselines, edit

them, store them in GPO backup file format, and apply them broadly through Active Directory or individually through local policy.

Security Compliance Toolkit Tools:

Policy Analyzer

Local Group Policy Object (LGPO)

Set Object Security

GPO to Policy Rules

Incorrect:

Not B: Local Group Policy Object (LGPO)

What is the Local Group Policy Object (LGPO) tool?

LGPO.exe is a command-line utility that is designed to help automate management of Local Group Policy. Using local policy gives administrators a simple way to verify the effects of Group Policy settings, and is also useful for managing non-

domain-joined systems. LGPO.exe can import and apply settings from Registry Policy (Registry.pol) files, security templates, Advanced Auditing backup files, as well as from formatted “LGPO text” files. It can export local policy to a GPO

backup. It can export the contents of a Registry Policy file to the “LGPO text” format that can then be edited, and can build a Registry Policy file from an LGPO text file.

Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-configuration-framework/security-compliance-toolkit-10

Correct Answer: B