Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudEasy
A company has enabled Microsoft Defender for Cloud for their Azure environment. They are particularly concerned about potential misconfigurations of Azure Storage accounts that could lead to data exposure. They want to ensure that all storage accounts are continuously monitored for security best practices, such as encryption at rest, secure transfer required, and public access settings. Which specific Defender for Cloud plan directly addresses these concerns for Azure Storage accounts?
- ADefender for Servers
- BDefender for Storage
- CDefender for Key Vault
- DDefender for SQL
Show answer & explanationAnswer & explanation
Correct answer: B. Defender for Storage
Defender for Storage is the dedicated Microsoft Defender for Cloud plan that provides advanced threat protection and security posture management specifically for Azure Storage accounts, including monitoring for misconfigurations and suspicious activities.
Why the other options are wrong
- A. Defender for Servers protects virtual machines and physical servers.
- C. Defender for Key Vault protects Azure Key Vaults.
- D. Defender for SQL protects Azure SQL Databases and SQL Servers on machines.
Defender for Storage
A Microsoft Defender for Cloud plan that provides advanced threat protection for Azure Storage accounts, detecting suspicious activities like unauthorized access, unusual data exfiltration, and malware uploads.
- Monitors for suspicious activities in Azure Storage.
- Detects malware uploads and sensitive data access anomalies.
- Provides recommendations for storage account security posture.
- Supports Blob, File, Azure Data Lake Store Gen2, and Queue storage.
Memory trick: For storage security, Defender for Storage is the key.