Microsoft Certified: Azure Solutions Architect ExpertDesign identity, governance, and monitoring solutionsMedium
A research institution uses Azure to host sensitive genomic data. They need to continuously monitor their Azure environment for misconfigurations that could lead to security vulnerabilities, such as unencrypted storage accounts or VMs exposed to the internet without NSGs. The solution must provide a security score and recommendations for remediation. Which Azure service should be used?
- AAzure Sentinel
- BAzure Advisor
- CAzure Monitor
- DAzure Security Center (Defender for Cloud)
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Security Center (Defender for Cloud)
Azure Security Center, now part of Microsoft Defender for Cloud, continuously assesses the security posture of your Azure environment. It identifies misconfigurations, provides a secure score, and offers prioritized security recommendations to improve the security of your resources, directly addressing the need for vulnerability monitoring and remediation guidance.
Why the other options are wrong
- A. Azure Sentinel is a cloud-native SIEM (Security Information and Event Management) for threat detection and response, not primarily for continuous security posture management and recommendations.
- B. Azure Advisor provides recommendations for cost, performance, reliability, operational excellence, and security, but Security Center is the dedicated and more comprehensive service for security posture management.
- C. Azure Monitor collects and analyzes telemetry for performance and availability, not specifically security posture and misconfigurations.
Defender for Cloud (Security Posture)
Microsoft Defender for Cloud (formerly Azure Security Center) provides unified security management and advanced threat protection across your hybrid cloud workloads, focusing on security posture management and vulnerability assessments.
- Continuously monitors security posture.
- Provides a secure score based on recommendations.
- Identifies and helps remediate misconfigurations and vulnerabilities.
Memory trick: Defender for Cloud: Your security report card and action plan.