The correct options are Contoso Secure Score measures an enterprise security posture and is available in the Contoso Defender dashboard and The score is organized into categories like Authentication, Endpoints, Applications and Information and each category affects the total score.

The first statement is correct because Contoso Secure Score is designed to give an enterprise level view of security posture and it is surfaced in the Defender dashboard where you can review the overall score, trends, and prioritized recommendations to improve security.

The second statement is correct because the score is structured into distinct categories such as Authentication, Endpoints, Applications and Information and each category contains controls or recommendations that contribute to the aggregate score when they are implemented.

The "Potential score" indicates the value attainable only after buying capabilities that are not part of current subscriptions is incorrect because the potential score represents the maximum achievable score if you implement all recommended improvements. Some improvements are configuration changes and do not require purchasing new capabilities. The potential score is a target for controls rather than a statement about licensing costs.

Completed recommended actions immediately change the reported secure score is incorrect because score updates are not always instantaneous. The platform must validate and process telemetry and configuration changes and there can be delays before completed actions are reflected in the reported score.

Full AWS Practitioner Certification Question