Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Azure Connected Machine agent is the first step to onboard any non-azure device to azure. The ACM agent can be used to deploy LA agent & other extensions. Ref: https://learn.microsoft.com/en-us/training/modules/connect-non-azure-machines-to-azure-defender/3-connect-non-azure-machines Ref: https://learn.microsoft.com/en-us/training/modules/connect-non-azure-machines-to-azure-defender/4-connect-aws-accounts
Just to throw more confusion into this question you can also connect non-Azure machines to Defender for Cloud directly using the Defender for Endpoint Agent which offers a single unified solution. Sounds like answer C to anyone else? https://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-machines-with-defender-for-endpoint D is definitely not correct, but I think there is an argument for A, B and C. I agree B is probably the most obvious answer, but who knows what's in the head of the Microsoft Examiners!!
The question does not mention that you have the M365 Defender subscription/license. Don't assume stuff, this is an exam. C cannot be the answer to this question.