Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsMedium
A company is migrating various production workloads to Azure, including virtual machines, containers, and serverless functions. They need a unified security management system that provides continuous security posture management, vulnerability assessment, and threat protection across these diverse Azure workloads. The solution should also offer security recommendations based on industry benchmarks. Which Microsoft security service is designed for this comprehensive cloud security management?
- AMicrosoft Defender for Cloud
- BAzure Firewall
- CAzure Active Directory
- DAzure Sentinel
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Defender for Cloud
Microsoft Defender for Cloud (formerly Azure Security Center and Azure Defender) is a Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) that provides unified security management and advanced threat protection across hybrid and multi-cloud environments, including security recommendations and vulnerability assessments.
Why the other options are wrong
- B. Azure Firewall provides network-level traffic filtering, not comprehensive security posture management and threat protection for diverse workloads.
- C. Azure Active Directory is an identity and access management service, not a security management platform for infrastructure workloads.
- D. Azure Sentinel is a SIEM/SOAR for collecting and analyzing security logs, not primarily for security posture management or workload protection.
Microsoft Defender for Cloud
A unified security management and threat protection platform for hybrid and multi-cloud environments.
- Provides Cloud Security Posture Management (CSPM).
- Offers Cloud Workload Protection Platform (CWPP).
- Includes security recommendations, vulnerability assessment, and threat detection.
Memory trick: Defender for Cloud is the 'cloud architect' who builds and guards your Azure security.