SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

By Microsoft · Question Mode

QuestionQ20

Manage and monitor security posture

You have an Azure subscription named Sub1 that contains multiple virtual machines.

You have a Microsoft 365 E5 subscription that includes devices onboarded to Microsoft Defender for Endpoint.

You have an on-premises datacenter containing multiple servers.

You plan to onboard all current and future on-premises servers to Azure Arc.

You need to ensure that the Azure Arc-enabled servers are protected by using the same security features as the Microsoft 365 devices immediately after the servers are onboarded. The solution must minimize administrative effort.

What should you do?

Explanation

Microsoft Defender for Servers provides Microsoft Defender for Endpoint protection for servers, including automatic deployment of the Defender for Endpoint extension to supported machines connected to Defender for Cloud. Enabling the plan for Sub1 allows Azure Arc-enabled servers to receive that protection automatically as they are onboarded, without managing individual Group Policy or script deployments.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!