CSCP Exam - Question 55

Question

You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled.

The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications on Windows Server 2019.

You need to recommend a solution to ensure that only authorized applications can run on the virtual machines. If an unauthorized application attempts to run or be installed, the application must be blocked automatically until an administrator authorizes the application.

Which security control should you recommend?

Examice · Accepted Answer

To ensure that only authorized applications can run on the virtual machines and to automatically block any unauthorized application until an administrator authorizes it, the best security control to recommend is adaptive application controls in Defender for Cloud. This feature uses machine learning to analyze and allowlist known-safe applications, providing automatic blocking alerts for unauthorized applications.

El_m_o · Answer

https://learn.microsoft.com/en-us/azure/defender-for-cloud/adaptive-application-controls

zellck · Answer

C is the answer.

https://learn.microsoft.com/en-us/azure/defender-for-cloud/adaptive-application-controls
Adaptive application controls are an intelligent and automated solution for defining allowlists of known-safe applications for your machines.

Often, organizations have collections of machines that routinely run the same processes. Microsoft Defender for Cloud uses machine learning to analyze the applications running on your machines and create a list of the known-safe software. Allowlists are based on your specific Azure workloads, and you can further customize the recommendations using the following instructions.

When you've enabled and configured adaptive application controls, you'll get security alerts if any application runs other than the ones you've defined as safe.

zellck · Answer

Same as Question 19.
https://www.examtopics.com/discussions/microsoft/view/94349-exam-sc-100-topic-4-question-19-discussion

ServerBrain · Answer

Answer C is being confirmed

pdnb · Answer

correct -> https://learn.microsoft.com/en-us/azure/defender-for-cloud/adaptive-application-controls

CSCP Exam - Question 55

Discussion