A global enterprise is designing a Zero Trust architecture for its cloud environment, which includes Azure and AWS. The security team wants to ensure that all cloud workloads, regardless of their hosting platform, are continuously monitored for misconfigurations, vulnerabilities, and threats, and that security posture management is unified. Which Microsoft security service is specifically designed to provide this multi-cloud security posture management and workload protection?
- AAzure Monitor
- BAzure Policy
- CMicrosoft Defender for Cloud
- DMicrosoft Purview
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Defender for Cloud
Microsoft Defender for Cloud (formerly Azure Security Center and Azure Defender) provides comprehensive security posture management, vulnerability assessments, and threat protection across Azure, on-premises, and multi-cloud (AWS, GCP) environments. It directly addresses the need for unified monitoring and protection of cloud workloads.
Why the other options are wrong
- A. Azure Monitor collects and analyzes telemetry from Azure resources but is not primarily a security posture management or threat protection service for multi-cloud.
- B. Azure Policy helps enforce organizational standards and assess compliance for Azure resources, but doesn't provide multi-cloud threat protection or vulnerability management.
- D. Microsoft Purview is a unified data governance solution that helps manage and govern data across hybrid and multi-cloud environments, not primarily for security posture and workload protection.
Microsoft Defender for Cloud
A cloud-native solution that provides Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) across multi-cloud (Azure, AWS, GCP) and hybrid environments. It helps organizations strengthen their security posture, protect against threats, and ensure compliance with regulatory standards.
- CSPM and CWP capabilities
- Supports multi-cloud (Azure, AWS, GCP)
- Strengthens security posture
- Protects against threats
Memory trick: Defender for Cloud watches over all your cloud castles.