Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A development team uses Azure DevOps for its continuous integration/continuous deployment (CI/CD) pipelines. They need to ensure that container images are scanned for vulnerabilities before deployment to Azure Kubernetes Service (AKS). Which capability of Microsoft Defender for Cloud can provide this specific protection?
- AMicrosoft Defender for Containers
- BMicrosoft Defender for Storage
- CMicrosoft Defender for Key Vault
- DMicrosoft Defender for SQL
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Defender for Containers
Microsoft Defender for Containers provides vulnerability assessment and advanced threat protection for containerized environments, including scanning container images in registries for vulnerabilities before deployment, as required by the scenario.
Why the other options are wrong
- B. Microsoft Defender for Storage protects Azure Storage accounts, not container images.
- C. Microsoft Defender for Key Vault protects Azure Key Vaults, not container images.
- D. Microsoft Defender for SQL protects Azure SQL databases, not container images.
Microsoft Defender for Containers
A module within Microsoft Defender for Cloud that provides cloud-native security for containerized environments.
- Scans container images for vulnerabilities.
- Protects Kubernetes clusters at runtime.
- Integrates with CI/CD pipelines.
Memory trick: Defender for Containers: Docker Defenses Done.