An auditor asks which framework the canal estate’s Defender for Cloud Secure Score primarily uses by default. What should the engineer answer?
Select an answer to reveal the explanation.
Short Explanation
When they ask “which rulebook is the score graded on,” the default answer is the Microsoft Cloud Security Benchmark—MCSB—not PCI-only, not Sentinel KQL, and not Azure Advisor’s cost tips.
Full Explanation
Microsoft Cloud Security Benchmark (MCSB) is the default standard in Defender for Cloud that underpins many recommendations and Secure Score. Regulatory standards such as PCI-DSS are assessed separately when enabled. Sentinel analytics and Azure Advisor cost recommendations are different products and do not define Secure Score’s default framework.