Correct Answer: Sort recommendations by the 'Max score impact' column and address the highest-impact items first
Defender for Cloud shows the potential Secure Score increase (Max score impact) for each recommendation. Sorting and addressing the highest-impact recommendations first is the most...
Correct Answer
Sort recommendations by the 'Max score impact' column and address the highest-impact items first
Why This Answer Is Correct
Defender for Cloud shows the potential Secure Score increase (Max score impact) for each recommendation. Sorting and addressing the highest-impact recommendations first is the most efficient way to improve your Secure Score. Severity does not directly map to score impact — a 'Medium' recommendation may have more score impact than a 'High' severity one.
This question evaluates your knowledge of Microsoft Defender for Cloud — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Microsoft Defender for Cloud is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Microsoft Defender for Cloud has detected a brute force RDP attack on one of your Azure VMs. The VM is a development machine and you cannot immediately patch it. Which Defender for Cloud feature can you enable to reduce the attack surface immediately without shutting down the VM?
You need to ensure all Azure VMs in a subscription have Microsoft Defender for Endpoint automatically installed as they are provisioned, including VMs created by other teams. You manage security centrally. Which Defender for Cloud feature provides this?