Skip to Content

AZ-500: Ensuring Compliance with Azure Security Center: Listing Noncompliant Resources

Learn how to list noncompliant Azure resources in the Azure Security Center dashboard. Follow a step-by-step guide to achieve compliance and bolster your Azure security.

Question

You have an Azure subscription name Sub1 that contains an Azure Policy definition named Policy1. Policy1 has the following settings:

  • Definition location: Tenant Root Group
  • Category: Monitoring

You need to ensure that resources that are noncompliant with Policy1 are listed in the Azure Security Center dashboard.
What should you do first?

A. Change the Category of Policy1 to Security Center.
B. Add Policy1 to a custom initiative.
C. Change the Definition location of Policy1 to Sub1.
D. Assign Policy1 to Sub1.

Answer

D. Assign Policy1 to Sub1.

Explanation

The correct answer is D. Assign Policy1 to Sub1.

To ensure that resources that are noncompliant with Policy1 are listed in the Azure Security Center dashboard, you need to assign Policy1 to Sub1. A policy assignment is the application of a policy definition to a scope, such as a subscription or a resource group. A policy assignment determines how the policy definition affects the resources within the scope. When you assign a policy definition to a scope, Azure Policy evaluates the resources for compliance and generates compliance reports.

Azure Security Center is a service that provides unified security management and advanced threat protection for your cloud resources. Azure Security Center monitors the compliance state of your resources based on the policy definitions that are assigned to your subscriptions. Azure Security Center also provides recommendations and alerts for improving your security posture and mitigating potential threats.

By default, Azure Security Center assigns a built-in initiative named [ASC Default] (Subscription: {subscription name}) to each subscription that is registered with Security Center. This initiative contains several policy definitions that are related to security and compliance best practices, such as enabling encryption, auditing, and monitoring. You can view the compliance state of your resources based on this initiative in the Security Center dashboard.

However, if you want to monitor the compliance state of your resources based on a custom policy definition, such as Policy1, you need to assign it to your subscription. This way, Azure Security Center can evaluate your resources against Policy1 and list the noncompliant resources in the Security Center dashboard. You can also use the Compliance blade in Security Center to view the details of your policy assignments and compliance reports.

Therefore, to ensure that resources that are noncompliant with Policy1 are listed in the Azure Security Center dashboard, you should first assign Policy1 to Sub1.

Reference

The latest Microsoft AZ-500 Azure Security Technologies certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-500 Azure Security Technologies exam and earn Microsoft AZ-500 Azure Security Technologies certification.

AZ-500 Microsoft Azure Security Technologies Exam Questions and Answers

Alex Lim is a certified IT Technical Support Architect with over 15 years of experience in designing, implementing, and troubleshooting complex IT systems and networks. He has worked for leading IT companies, such as Microsoft, IBM, and Cisco, providing technical support and solutions to clients across various industries and sectors. Alex has a bachelor’s degree in computer science from the National University of Singapore and a master’s degree in information security from the Massachusetts Institute of Technology. He is also the author of several best-selling books on IT technical support, such as The IT Technical Support Handbook and Troubleshooting IT Systems and Networks. Alex lives in Bandar, Johore, Malaysia with his wife and two chilrdren. You can reach him at [email protected] or follow him on Website | Twitter | Facebook

    Ads Blocker Image Powered by Code Help Pro

    Your Support Matters...

    We run an independent site that is committed to delivering valuable content, but it comes with its challenges. Many of our readers use ad blockers, causing our advertising revenue to decline. Unlike some websites, we have not implemented paywalls to restrict access. Your support can make a significant difference. If you find this website useful and choose to support us, it would greatly secure our future. We appreciate your help. If you are currently using an ad blocker, please consider disabling it for our site. Thank you for your understanding and support.