Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudMedium
A security engineer is configuring Microsoft Defender for Cloud for an Azure Kubernetes Service (AKS) cluster. They need to ensure that container images are scanned for vulnerabilities at the time of deployment and that runtime protection is enabled for the cluster nodes. Additionally, they want to monitor for suspicious activities within the containers themselves. Which Microsoft Defender for Cloud plan should the engineer enable to achieve comprehensive security for the AKS cluster and its containers?
- AMicrosoft Defender for Containers
- BMicrosoft Defender for Storage
- CMicrosoft Defender for App Service
- DMicrosoft Defender for Servers
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Defender for Containers
Microsoft Defender for Containers provides comprehensive threat protection for AKS clusters, including vulnerability assessment of container images at deployment, runtime protection for cluster nodes and containers, and monitoring for suspicious activities within the containerized environment.
Why the other options are wrong
- B. Defender for Storage protects Azure storage accounts, not containerized environments.
- C. Defender for App Service protects Azure App Service plans, not AKS clusters.
- D. Defender for Servers protects virtual machines and physical servers, not specifically AKS clusters or container images.
Microsoft Defender for Containers
Microsoft Defender for Containers provides cloud-native threat protection for containerized environments, including vulnerability assessment of container images, runtime protection for Azure Kubernetes Service (AKS) clusters and their nodes, and monitoring for suspicious activities within containers.
- Scans container images for vulnerabilities.
- Provides runtime protection for AKS clusters and nodes.
- Monitors for suspicious activities within containers.
Memory trick: For your containers, big or small, Defender for Containers protects them all.