AZ-500 Question 227
Single answerYour organization has developed an internal compliance requirement not included in the default standards in Microsoft Defender for Cloud. You need to implement and track this custom compliance standard across multiple Azure subscriptions. Which of the following steps should you take to properly add and manage this custom standard in Microsoft Defender for Cloud?
- A
Create a custom Azure Policy definition, then directly enable it in the Default initiative within Microsoft Defender for Cloud.
- B
Create a new custom initiative containing the relevant Azure Policy definitions. Assign it to your subscriptions, and then add this initiative as a custom standard in Defender for Cloud.
- C
Use the built-in standards in Microsoft Defender for Cloud by renaming one of them to match your organization’s internal standard.
- D
Upload a JSON file with compliance rules to the Azure portal and wait for Defender for Cloud to automatically map controls.
Show answer and explanation
Correct answer: B
Explanation
To add a custom compliance standard in Microsoft Defender for Cloud, you must create a custom Azure Policy initiative that reflects your organization's controls, assign that initiative to the relevant subscriptions or management groups, and then link it as a custom standard in the Microsoft Defender for Cloud compliance dashboard. This approach ensures visibility and continuous assessment based on your internal compliance criteria. For more information, refer to the official Microsoft Defender for Cloud documentation on creating and assigning custom initiatives and standards.
- A. Incorrect.
Incorrect. Simply creating a policy definition and adding it to the Default initiative does not automatically translate into a custom compliance standard. You need a distinct custom initiative to define and track your custom standard separately.
- B. Correct.
Correct. Defining the relevant policies in a custom initiative, assigning it to your Azure subscriptions, and then adding it as a custom standard is the recommended approach. This process allows you to meaningfully track and report on compliance against your organization's unique requirements.
- C. Incorrect.
Incorrect. Renaming a built-in standard does not satisfy unique compliance needs, nor does it allow you to map the correct controls for your custom requirement.
- D. Incorrect.
Incorrect. Merely uploading a JSON file does not integrate it with Defender for Cloud’s compliance tracking. You must create a custom initiative and then add it as a custom standard for it to be recognized and measured by Defender for Cloud.