Microsoft Cybersecurity Architect (SC-100)Design security for infrastructureHard
A global enterprise needs to secure its Azure environment, which hosts various applications and data across multiple subscriptions and management groups. They require a centralized security solution that can provide unified security management, advanced threat protection, and security posture management across hybrid cloud workloads, including on-premises servers. The solution must also offer regulatory compliance assistance. Which Azure service is designed to address these comprehensive security needs?
- AAzure Firewall
- BMicrosoft Defender for Cloud
- CAzure Network Watcher
- DAzure Sentinel
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Defender for Cloud
Microsoft Defender for Cloud (formerly Azure Security Center) provides unified security management and advanced threat protection across hybrid cloud workloads. It offers security posture management, vulnerability assessments, regulatory compliance assistance, and integrates with other Azure services to provide comprehensive security recommendations and protection.
Why the other options are wrong
- A. Azure Firewall is a network security service, not a comprehensive security posture management or threat protection solution for hybrid environments.
- C. Azure Network Watcher is a toolset for monitoring, diagnosing, and visualizing network performance, not a security posture management solution.
- D. Azure Sentinel is a cloud-native SIEM for security information and event management, focused on detection and response, not overall security posture management.
Microsoft Defender for Cloud
A unified infrastructure security management system that strengthens the security posture of cloud and on-premises workloads.
- Provides security posture management and recommendations.
- Offers advanced threat protection (ATP) for various Azure resources and hybrid servers.
- Assists with regulatory compliance assessments and reporting.
Memory trick: Defender for Cloud is your 'Security HQ' for everything.