Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsMedium
A company is migrating its on-premises virtual machines to Azure. They need a basic level of security for these VMs, including vulnerability assessments, just-in-time VM access, and adaptive network hardening. Which foundational Azure security service provides these capabilities for their virtual machines?
- AAzure Firewall
- BAzure Key Vault
- CAzure DDoS Protection
- DAzure Security Center (Free Tier/Defender for Cloud foundational)
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Security Center (Free Tier/Defender for Cloud foundational)
The free tier of Azure Security Center (now foundational capabilities of Microsoft Defender for Cloud) provides basic security posture management, including security recommendations, vulnerability assessments, and features like just-in-time VM access and adaptive network hardening for Azure VMs.
Why the other options are wrong
- A. Azure Firewall provides network-level control, not VM-specific security posture capabilities like JIT or adaptive hardening.
- B. Azure Key Vault manages cryptographic keys and secrets, not VM security posture.
- C. Azure DDoS Protection defends against network attacks, not VM security posture.
Azure Security Center (Free Tier)
Now part of the foundational capabilities of Microsoft Defender for Cloud, this tier provides basic security posture management for Azure resources, including security recommendations, continuous security assessment, and some advanced protections like Just-in-Time VM access.
- Provides security recommendations.
- Includes continuous security assessment.
- Offers Just-in-Time (JIT) VM access.
- Adaptive network hardening.
Memory trick: Defender for Cloud's free tier secures the basics for VMs.