Question

A retail company uses Microsoft Defender for Cloud across 40 subscriptions. The CISO wants the security team to prioritize remediation work that will most efficiently raise the organization's overall Secure Score. An analyst notices that Defender for Cloud groups many individual recommendations together and assigns points at a higher level. The team wants to understand how Secure Score is calculated so they can target the highest-impact effort. Which statement correctly describes how Defender for Cloud Secure Score is computed and how the team should prioritize?

Accepted Answer

Points are awarded per security control (a group of related recommendations), and a control's points are earned only when all healthy resources satisfy every recommendation in that control, so partially completed controls yield proportional credit toward the control's maximum.

Answer

Each individual recommendation carries its own fixed point value, so the team should remediate the recommendation with the highest raw CVSS score first.

Answer

Secure Score is the simple percentage of total recommendations that are marked healthy, so remediating the largest number of individual recommendations regardless of grouping maximizes the score.

Answer

Secure Score is derived solely from the Microsoft Cloud Security Benchmark compliance percentage, so the team should focus only on regulatory compliance assignments rather than recommendations.