Microsoft Security Operations AnalystMitigate threats using Microsoft Defender XDREasy
A security architect is designing the security posture for their organization's hybrid cloud environment. They need to ensure that security configurations across Azure, AWS, GCP, and on-premises servers are continuously monitored, assessed against industry benchmarks, and recommendations are provided for remediation. Which Microsoft Defender XDR component is designed to provide this multi-cloud and hybrid security posture management?
- AMicrosoft Defender for Identity
- BMicrosoft Defender for Cloud
- CMicrosoft Defender for Office 365
- DMicrosoft Defender for Endpoint
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Defender for Cloud
Microsoft Defender for Cloud is the cloud security posture management (CSPM) and cloud workload protection (CWP) solution for Azure, hybrid, and multi-cloud environments (AWS, GCP). It continuously assesses security posture, provides security recommendations, and helps secure workloads across these platforms.
Why the other options are wrong
- A. Defender for Identity protects identity systems like Active Directory.
- C. Defender for Office 365 protects email, collaboration, and documents.
- D. Defender for Endpoint focuses on endpoint security for devices.
Microsoft Defender for Cloud (MDC)
A Microsoft Defender XDR component providing Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) across Azure, hybrid, and multi-cloud environments (AWS, GCP).
- Monitors security posture across clouds.
- Provides security recommendations based on benchmarks.
- Protects workloads in IaaS, PaaS, and hybrid setups.
Memory trick: Defender for Cloud is the big umbrella for all your cloud and hybrid security, no matter where your servers are floating.