Home › Azure AZ-900 › cloudcomputing › identitysecurity › Microsoft Defender for Cloud is best described as:
Microsoft Defender for Cloud is best described as:
AA free public CDN for security blog content
BA unified cloud security posture management (CSPM) and cloud workload protection (CWPP) service that continuously assesses Azure, AWS, GCP, and on-prem resources for misconfigurations and threats
CAn archive service for old security audit reports
DA firewall appliance shipped to customer datacenters in a metal box
Answer & Solution
Correct answer: B. A unified cloud security posture management (CSPM) and cloud workload protection (CWPP) service that continuously assesses Azure, AWS, GCP, and on-prem resources for misconfigurations and threats
Defender for Cloud assesses security posture (CSPM — finds risky configs), protects workloads (CWPP — runtime threat detection on VMs, containers, databases), and covers multi-cloud (Azure + AWS + GCP) plus on-prem. The other options aren't what Defender for Cloud does.
Related questions
An administrator wants to grant a contractor read-only access to ONE specific resource groWhich Microsoft Entra capability adds a second authentication factor like an AuthenticatorThe defense-in-depth model recommends:The Zero Trust security model is based on which guiding principle?Microsoft Entra Domain Services differs from Microsoft Entra ID in that Domain Services:Microsoft Entra B2B (external identities) is designed to let an organisation:Azure role-based access control (RBAC) grants permissions by combining three things. WhichPasswordless authentication on Microsoft Entra typically replaces the password with which