Using Azure Policy to maintain MCSB compliance for deployed App Services
Short answer
C Azure Policy defines and enforces MCSB compliance rules and reports status for deployed App Services.
Question
Key Takeaways
Azure Policy enforces and audits MCSB compliance across resources including App Services; Defender for App Service is workload protection, DevOps security focuses on code pipelines, and a branch policy governs source control, not runtime MCSB compliance.
To ensure Azure App Services deployed via Azure DevOps remain compliant with Microsoft Cloud Security Benchmark (MCSB) recommendations, use Azure Policy, which defines and enforces compliance rules across resources and reports status.
Common mistake: Choosing a branch policy in Azure DevOps (D) — it controls code/branch rules but does not enforce or report MCSB compliance of the deployed App Service resources.
Expert Analysis
Why the Answer Is Correct
Azure Policy lets you define and enforce compliance rules across your resources, including Azure App Services, and integrates with Microsoft Defender for Cloud to monitor adherence to Microsoft Cloud Security Benchmark (MCSB) recommendations, ensuring deployed apps stay compliant.
Why the Other Options Are Wrong
DevOps security in Defender for Cloud (A) focuses on code/pipeline risk, not resource compliance. Defender for App Service (B) provides workload threat protection, not MCSB policy enforcement. A branch policy in Azure DevOps (D) governs source control, not the compliance of deployed resources.
Community Comment Notes
The community favored C (100 votes). Comments cite the App Service security baseline and note that Azure Policy enforces MCSB recommendations across App Services and reports compliance status.
Official Reference
https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/app-service-security-baseline
This link opens the official vendor documentation in a new tab.
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 4 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 4
-
Ali96 👍 2 Answered CAzure Policy allows you to enforce rules and guidelines to ensure that deployed apps and resources maintain compliance with Microsoft Cloud Security Benchmark (MCSB) recommendations
-
424ede1 👍 2 Answered CAzure Policy https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/app-service-security-baseline
-
RoboCock 👍 1 Answered CTo ensure that deployed Azure App Services apps maintain compliance with Microsoft Cloud Security Benchmark (MCSB) recommendations, I recommend using Azure Policy. Azure Policy allows you to define and enforce compliance rules across your resources, including Azure App Services. It integrates with Microsoft Defender for Cloud to monitor compliance and provides detailed insights into security baselines.
-
676ae1a 👍 2 Answered CRespuesta correcta
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SC-100 Questions
Access 110 questions with complete answers and detailed explanations.
View Full SC-100 Practice Test →