SC-100 Question 36

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 5

  Real answer: Azure resource: Azure Update manager Agent on the servers: Azure Arc Best Fit Answer: Azure resource: An Azure Automation account Agent on the servers: The Azure Connected Machine agent

• 1

  1. https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan#review-plans Defender for Servers Plan 2 provides the same features as Plan 1, and more: Agentless scanning for machine posture scanning, vulnerability assessment, threat protection, malware scanning, and secrets scanning. Compliance assessment against various regulatory standards. Available with Defender for Servers Plan 2 or any other paid plan. Capabilities provided by premium Microsoft Defender Vulnerability Management. A free data ingestion benefit for specific data types. OS configuration assessment against compute security baselines in the Microsoft Cloud Security Benchmark. OS updates assessment with Azure Updates integrated into Defender for Servers. File integrity monitoring to examine files and registries for changes that might indicate an attack. Just-in-time machine access to lock down machine ports and reduce attack surfaces. Network map to get a geographical view of network recommendations.

• 3

  I don't see how Defender for Servers Plan 2 have anything with Azure Update Manager - https://learn.microsoft.com/en-us/azure/update-manager/prerequisites