Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudMedium
A security architect is designing a multi-cloud security strategy using Microsoft Defender for Cloud. The organization has virtual machines running on AWS and Google Cloud Platform (GCP) and needs to onboard them to Defender for Cloud for central security posture management, vulnerability assessment, and threat detection. Which service is essential for connecting these non-Azure VMs to Microsoft Defender for Cloud?
- AAzure Site Recovery
- BAzure Virtual Network Gateway
- CAzure Arc
- DAzure ExpressRoute
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Arc
Azure Arc is the foundational service that extends Azure management capabilities to resources running outside of Azure, including virtual machines on AWS, GCP, or on-premises. By onboarding non-Azure VMs via Azure Arc, they can then be managed and protected by Microsoft Defender for Cloud.
Why the other options are wrong
- A. Azure Site Recovery is for disaster recovery, not for onboarding multi-cloud VMs to Defender for Cloud.
- B. Azure Virtual Network Gateway is for connecting Azure virtual networks to on-premises networks or other cloud networks, not for onboarding VMs to Defender for Cloud.
- D. Azure ExpressRoute provides private connectivity to Azure, not for onboarding multi-cloud VMs to Defender for Cloud.
Azure Arc for Multi-Cloud Security
Azure Arc extends Azure management and security services, including Microsoft Defender for Cloud, to resources running across multi-cloud (AWS, GCP) and on-premises environments, providing a unified control plane.
- Connects servers, Kubernetes clusters, and data services to Azure.
- Enables Defender for Cloud features like vulnerability assessment and threat detection for non-Azure resources.
- Provides a single pane of glass for hybrid and multi-cloud security.
- Requires installing the Azure Connected Machine agent on the non-Azure VMs.
Memory trick: Arc's embrace: Unites all clouds under Azure's grace.