AZ-500 Exam QuestionsBrowse all questions from this exam

AZ-500 Exam - Question 478


From Microsoft Defender for Cloud, you need to deploy SecPol1.

What should you do first?

Show Answer
Correct Answer: A

To deploy a security policy like SecPol1 from Microsoft Defender for Cloud, the first step is to enable Microsoft Defender for Cloud. Enabling it activates the necessary security features and capabilities required to manage and deploy security policies. Without enabling Microsoft Defender for Cloud, you cannot utilize its security functions or policies effectively.

Discussion

13 comments
Sign in to comment
JakeCallhamOption: A
Sep 18, 2022

It doesnt state Defender for cloud is enabled? So thats a first

Gesbie
Apr 12, 2023

In Exam April 11, 2023

Amit3Option: A
Sep 24, 2022

First enable Microsoft Defender for Cloud for your subscriptions, see URL https://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-management-group

koreshio
Oct 19, 2022

thanks for pointing this out. the linked page describes this which seems relevant: "When any Microsoft Defender plan is enabled, it's described in a policy definition as being on the 'Standard' setting. When it's disabled, it's 'Free'. "

cyberebycOption: C
Sep 7, 2023

Answer is: C It says "From DFC" so it's assumed to be enabled already. Hence, the answer is C

heatfan900
Sep 15, 2023

CORRECT

TheProfessor
Nov 4, 2023

There is a well saying - there is no assumption in security. Either it has or it has not. Unless questions says there is MDFC, only then it has MDFC.

ErikPJordanOption: C
Sep 24, 2023

Tricky one this To deploy SecPol1 from Microsoft Defender for Cloud, you should first enable Microsoft Defender for Cloud. So, the correct answer is: A. Enable Microsoft Defender for Cloud. Enabling Microsoft Defender for Cloud is the first step to start using its security features and policies, including deploying security policies like SecPol1. If you assume that Microsoft Defender for Cloud is already enabled, and you need to deploy SecPol1, then the logical next step would be to create an initiative. So, the correct step in this scenario would be: C. Create an initiative. An initiative in Azure Policy is a set of policies designed to help you achieve specific compliance goals for your resources. Deploying an initiative would allow you to apply SecPol1 and other related policies to your Azure resources.

TheProfessorOption: A
Oct 9, 2023

Since it is asking "What should you do first?", I will go with A. If MDC is already there, then the answer is C.

tweleve
Oct 14, 2023

in exam 13 Oct

danloOption: A
Dec 26, 2022

The only thing dealing with policies or initiatives in DfC is in the regulatory compliance section which requires enhanced features enabled. I would say A. https://learn.microsoft.com/en-us/azure/defender-for-cloud/enhanced-security-features-overview https://learn.microsoft.com/en-us/azure/defender-for-cloud/custom-security-policies?pivots=azure-portal

majstor86Option: A
Mar 4, 2023

A. Enable Microsoft Defender for Cloud.

Cock
May 20, 2023

in exam 20.05.2023

ESAJRROption: A
Sep 13, 2023

A. Enable Microsoft Defender for Cloud.

wardy1983Option: A
Nov 22, 2023

Answer: A Explanation: First enable Microsoft Defender for Cloud for your subscriptions, see URL https://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-management-group

Yuppers2024Option: A
Jul 14, 2024

I see majority of people selecting option A. Is Defender for Cloud a requirement for a custom policy definition?