Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A software development company uses Azure DevOps for its continuous integration/continuous deployment (CI/CD) pipelines. They want to ensure that their cloud-native applications are secure throughout their lifecycle, from code to production. They need a solution that can scan container images for vulnerabilities, protect Kubernetes clusters, and monitor serverless functions. Which Microsoft security solution provides these 'DevSecOps' capabilities for cloud-native applications?
- AMicrosoft Defender for Cloud
- BMicrosoft 365 Defender
- CAzure Active Directory
- DMicrosoft Intune
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Defender for Cloud
Microsoft Defender for Cloud extends its Cloud Workload Protection (CWP) capabilities to cloud-native applications, including vulnerability scanning for container images, protection for Kubernetes clusters, and threat detection for serverless functions, integrating security into the CI/CD pipeline (DevSecOps).
Why the other options are wrong
- B. Microsoft 365 Defender is an XDR for the Microsoft 365 ecosystem, not primarily cloud-native application security.
- C. Azure Active Directory is an identity and access management service.
- D. Microsoft Intune focuses on endpoint and mobile device management.
Microsoft Defender for Cloud (CWP)
The Cloud Workload Protection (CWP) part of Microsoft Defender for Cloud provides advanced threat protection for various workloads, including virtual machines, databases, storage, containers, Kubernetes, and serverless functions.
- Protects a broad range of cloud workloads.
- Integrates into CI/CD for DevSecOps.
- Offers vulnerability scanning and runtime protection.
Memory trick: Defender for Cloud protects apps from code to cloud.