Correct Answer: Enable Defender for Servers Plan 2 and configure auto-provisioning for the Microsoft Defender for Endpoint integration
Defender for Cloud's auto-provisioning feature, when Defender for Servers Plan 2 is enabled, automatically deploys Microsoft Defender for Endpoint (and other agents) to all new and...
Correct Answer
Enable Defender for Servers Plan 2 and configure auto-provisioning for the Microsoft Defender for Endpoint integration
Why This Answer Is Correct
Defender for Cloud's auto-provisioning feature, when Defender for Servers Plan 2 is enabled, automatically deploys Microsoft Defender for Endpoint (and other agents) to all new and existing VMs in the subscription without manual intervention. This ensures continuous, centrally managed coverage regardless of who creates VMs.
This question evaluates your knowledge of Microsoft Defender for Cloud — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Microsoft Defender for Cloud is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Microsoft Defender for Cloud shows several security recommendations but you are overwhelmed by the volume. You need to focus first on the recommendations that would have the greatest impact on your Secure Score. Which approach should you take?
Microsoft Defender for Cloud has detected a brute force RDP attack on one of your Azure VMs. The VM is a development machine and you cannot immediately patch it. Which Defender for Cloud feature can you enable to reduce the attack surface immediately without shutting down the VM?