Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudMedium

A financial services company uses Microsoft Defender for Cloud to monitor its Azure environment. They have a critical requirement to ensure that all sensitive data stored in Azure Storage accounts, including Blob storage and Azure Files, is continuously protected against malware, ransomware, and other advanced threats. They need a solution that integrates seamlessly with Defender for Cloud and provides agentless threat detection. Which Microsoft Defender for Cloud plan should be enabled for this purpose?

  1. AMicrosoft Defender for Servers
  2. BMicrosoft Defender for Key Vault
  3. CMicrosoft Defender for Storage
  4. DMicrosoft Defender for SQL
Show answer & explanation

Correct answer: C. Microsoft Defender for Storage

Microsoft Defender for Storage provides agentless threat detection for Azure Storage accounts, including Blob storage, Azure Files, and Azure Data Lake Storage. It detects malware, ransomware, and other suspicious activities by analyzing storage operations, making it the ideal solution for protecting sensitive data at rest.

Why the other options are wrong

  • A. Defender for Servers protects virtual machines and physical servers, not storage accounts.
  • B. Defender for Key Vault protects Azure Key Vaults, not storage accounts.
  • D. Defender for SQL protects Azure SQL databases and SQL Servers, not general storage accounts.

Microsoft Defender for Storage

Microsoft Defender for Storage provides agentless security intelligence that detects unusual and potentially harmful attempts to access or exploit Azure storage accounts. It protects Blob storage, Azure Files, and Azure Data Lake Storage from malware, ransomware, and other advanced threats.

  • Agentless threat detection for Azure Storage accounts.
  • Detects malware, ransomware, and suspicious access patterns.
  • Integrates with Defender for Cloud for alerts and recommendations.

Memory trick: For your data in the cloud, Defender for Storage speaks aloud.

More Mitigate threats using Microsoft Defender for Cloud questions