Microsoft Security, Compliance, and Identity Fundamentals — Question 166

Which solution performs security assessments and automatically generates alerts when a vulnerability is found?

Answer options

• A. cloud security posture management (CSPM)
• B. DevSecOps
• C. cloud workload protection platform (CWPP)
• D. security information and event management (SIEM)

Correct answer: A

Explanation

The correct answer is A, as cloud security posture management (CSPM) is specifically designed to assess security configurations and automatically generate alerts for vulnerabilities. Options B, C, and D serve different roles; DevSecOps focuses on integrating security into the development process, CWPP protects workloads from threats but doesn't specifically focus on assessments and alerting, and SIEM primarily collects and analyzes security data rather than conducting ongoing assessments.