Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudMedium
A company uses Microsoft Defender for Cloud and has several Azure virtual machines running sensitive applications. They need to ensure that these VMs are hardened according to a specific organizational security baseline that includes custom security configurations not covered by default Defender for Cloud recommendations. Which feature in Microsoft Defender for Cloud should the security administrator use to enforce and monitor compliance with this custom baseline?
- ARegulatory compliance dashboard
- BSecurity alerts
- CJust-in-Time (JIT) VM access
- DCustom security policies (Azure Policy integration)
Show answer & explanationAnswer & explanation
Correct answer: D. Custom security policies (Azure Policy integration)
Custom security policies, integrated with Azure Policy, allow organizations to define and enforce their own security baselines and configurations within Microsoft Defender for Cloud, extending beyond the default recommendations.
Why the other options are wrong
- A. The regulatory compliance dashboard tracks compliance against built-in standards, not custom organizational baselines directly.
- B. Security alerts notify of active threats or suspicious activities, not for enforcing custom baselines.
- C. JIT VM access is for reducing the attack surface of VMs by limiting port access, not for enforcing general security baselines.
Custom Security Policies (Azure Policy)
Mechanisms within Microsoft Defender for Cloud, powered by Azure Policy, allowing organizations to define and enforce custom security configurations and compliance requirements across their Azure resources.
- Extends Defender for Cloud's capabilities beyond built-in recommendations.
- Enables enforcement of specific organizational security baselines.
- Allows for auditing compliance and auto-remediation.
- Uses Azure Policy definitions, assignments, and initiatives.
Memory trick: Custom rules need a policy tool, not just an alert or a dashboard cool.