You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices.

Vendor: Microsoft
Product: SC-100
Update on: Jul 29, 2026
Questions: 296

Microsoft SC-100 Question Answer

You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices. All users are assigned Microsoft 365 £5 licenses and the Microsoft Defender Vulnerability Management add-on. The Windows 11 devices are managed by using Microsoft Intune and Microsoft Defender for Endpoint. The Windows 11 devices are configured during deployment to comply with Center for Internet Security (CIS) benchmarks for Windows 11.

You need to recommend a compliance solution for the Windows 11 devices. The solution must identify devices that were modified and no longer comply with the CIS benchmarks.

What should you include in the recommendation?

Authenticated scan for Windows in Microsoft Defender Vulnerability Management

Microsoft Secure Score for Devices in Defender for Endpoint

attack surface reduction (ASR) rules in Defender for Endpoint

security baselines assessments in Microsoft Defender Vulnerability Management