Microsoft Certified: Azure Solutions Architect ExpertDesign identity, governance, and monitoring solutionsHard
An international research institution uses Azure to store vast amounts of scientific data in Azure Storage accounts. They need a solution to continuously monitor these storage accounts for suspicious activities, such as unauthorized access attempts, unusual data deletion patterns, or changes to security configurations. The solution should provide alerts and recommendations for remediation. Which Azure service should be implemented?
- AAzure Monitor Activity Log
- BAzure Defender for Storage (part of Defender for Cloud)
- CAzure Storage Analytics (classic)
- DAzure Sentinel
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Defender for Storage (part of Defender for Cloud)
Azure Defender for Storage, an offering within Microsoft Defender for Cloud, provides advanced threat protection for Azure Storage accounts. It continuously monitors for suspicious activities, generates security alerts with details, and provides recommendations for remediation, directly addressing the requirements for proactive security monitoring of storage.
Why the other options are wrong
- A. Activity Log tracks management plane operations, but doesn't provide advanced threat detection or behavioral analysis for data plane activities within storage.
- C. Azure Storage Analytics (classic) primarily captures basic metrics and logging for storage but lacks advanced threat detection capabilities.
- D. Azure Sentinel is a SIEM solution that can ingest data from Defender for Cloud, but Defender for Storage is the specific service that performs the initial monitoring and threat detection for storage accounts.
Azure Defender for Storage
Azure Defender for Storage provides an additional layer of security intelligence that detects unusual and potentially harmful attempts to access or exploit your storage accounts.
- Monitors for suspicious activities like unauthorized access, unusual data deletion, malware uploads.
- Leverages Microsoft's threat intelligence and behavioral analytics.
- Generates security alerts and provides actionable recommendations for remediation.
Memory trick: Defender for Storage: Your 'Guard Dog' for valuable data in the cloud.