AZ-500 Question 223
Single answerYour company has created a custom compliance framework and an associated Azure Policy initiative. A Security Engineer notices that this new custom compliance standard does not appear in the Microsoft Defender for Cloud Regulatory Compliance dashboard when viewing compliance across multiple subscriptions. Which action should the Security Engineer take to ensure the custom compliance standard is displayed?
- A
Assign the custom initiative to the relevant subscriptions or management groups in Azure Policy
- B
Enable Continuous Export in Microsoft Defender for Cloud
- C
Create a managed identity for the custom initiative within Microsoft Defender for Cloud
- D
Add the custom initiative to Azure Blueprints for deployment
Show answer and explanation
Correct answer: A
Explanation
To manage custom compliance standards in Microsoft Defender for Cloud, you must create an Azure Policy initiative that reflects your controls, and then assign that initiative to the scope (subscription or management group) you want to evaluate. Once assigned, Microsoft Defender for Cloud automatically includes the initiative in its Regulatory Compliance dashboard. Refer to Microsoft Defender for Cloud documentation (https://learn.microsoft.com/azure/defender-for-cloud) for detailed steps on creating and managing custom compliance standards.
- A. Correct.
Correct. Microsoft Defender for Cloud displays compliance for any initiative assigned at the subscription or management group level. You must explicitly assign the initiative to the target scope in Azure Policy for it to appear under the Regulatory Compliance dashboard.
- B. Incorrect.
Incorrect. Continuous Export is used to send Defender for Cloud data to external sources (e.g., a Log Analytics workspace). Enabling it does not determine whether a custom compliance standard appears in Defender for Cloud.
- C. Incorrect.
Incorrect. While a managed identity can allow an initiative to access resources securely, it is not a requirement for displaying custom compliance standards in the Regulatory Compliance blade.
- D. Incorrect.
Incorrect. Azure Blueprints can package artifacts like policies for deployment, but merely adding your custom initiative to a blueprint does not ensure it appears in Microsoft Defender for Cloud compliance reports.