Correct Answer: Enable Microsoft Defender for Containers — it scans ACR images and integrates with AKS admission control to block vulnerable images
Microsoft Defender for Containers provides vulnerability assessment for images in ACR (scanning on push and on schedule) and integrates with AKS through Azure Policy for Kubernetes...
Correct Answer
Enable Microsoft Defender for Containers — it scans ACR images and integrates with AKS admission control to block vulnerable images
Why This Answer Is Correct
Microsoft Defender for Containers provides vulnerability assessment for images in ACR (scanning on push and on schedule) and integrates with AKS through Azure Policy for Kubernetes (Gatekeeper) to block the deployment of images with vulnerabilities above a specified severity. This provides end-to-end container security from registry to runtime.
This question evaluates your knowledge of Container Security — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Container Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.