Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A software development team uses Azure DevOps to manage their containerized applications, which are deployed to Azure Kubernetes Service (AKS). They need a security solution that can scan container images for vulnerabilities, monitor running containers for suspicious activity, and provide runtime protection. Which Microsoft security solution is best suited for this?
- AMicrosoft Defender for Containers
- BAzure Policy
- CMicrosoft Defender for SQL
- DAzure Firewall
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Defender for Containers
Microsoft Defender for Containers is a specialized solution within Microsoft Defender for Cloud that provides enhanced security for Kubernetes environments. It offers vulnerability assessment for container images, runtime threat detection, and advanced protection for AKS clusters.
Why the other options are wrong
- B. Azure Policy enforces organizational standards and assesses compliance, but it doesn't provide runtime threat detection for containers.
- C. Microsoft Defender for SQL protects SQL databases, not container environments.
- D. Azure Firewall is a network security service that protects Azure virtual networks, not container images or runtime protection.
Microsoft Defender for Containers
A security solution that provides enhanced protection for containerized environments, including vulnerability management and runtime threat detection for Kubernetes and container registries.
- Scans container images for vulnerabilities during development
- Monitors running containers for suspicious activities
- Protects Azure Kubernetes Service (AKS) clusters
Memory trick: Defender for Containers keeps containers safe.