Microsoft · SC-500
Governance and compliance
SC-500 · Lesson 4 of 15 · 17:11
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-500 exam (Microsoft Certified: Cloud and AI Security Engineer Associate). In this lesson: Azure Policy effects and assignments, regulatory compliance in Defender for Cloud, resource locks, built-in and custom roles, overprivileged identities, and backup protection with soft delete, multi-user authorization, and immutable vaults, plus infrastructure as code scanning. Includes three original practice questions.
Preview the topics
- Storage accounts must never be created with public network access, and any such request must fail. Which policy effect fits?
- Nobody, not even an Owner, should delete the production database by accident, but updates must still work. What should you apply?
- Attackers who stole an admin account tried to delete recovery points. The company wants a protection that even a backup admin cannot undo. What fits?