Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudMedium
A company is onboarding several Azure subscriptions to Microsoft Defender for Cloud. They want to ensure that all virtual machines within these subscriptions are continuously scanned for vulnerabilities and misconfigurations. They also need integrated vulnerability assessment tools. Which Defender for Cloud plan should be enabled to meet these requirements comprehensively for VMs?
- ADefender for Storage
- BDefender for Key Vault
- CDefender for Servers Plan 2
- DDefender for Servers Plan 1
Show answer & explanationAnswer & explanation
Correct answer: C. Defender for Servers Plan 2
Defender for Servers Plan 2 offers comprehensive protection, including integrated vulnerability assessment solutions (like Qualys or Microsoft Defender Vulnerability Management) and advanced threat detection capabilities for virtual machines, going beyond the basic features of Plan 1.
Why the other options are wrong
- A. Defender for Storage protects Azure Storage accounts, not virtual machines.
- B. Defender for Key Vault protects Azure Key Vaults, not virtual machines.
- D. Defender for Servers Plan 1 provides basic EDR and security recommendations but lacks integrated vulnerability assessment solutions.
Defender for Servers Plan 2
The advanced tier of Microsoft Defender for Servers that provides comprehensive threat protection, endpoint detection and response (EDR), and integrated vulnerability assessment solutions for virtual machines and physical servers.
- Includes Microsoft Defender for Endpoint integration.
- Offers integrated vulnerability assessment (Qualys/Defender Vulnerability Management).
- Provides JIT VM access and adaptive application controls.
- Delivers advanced threat detection for server workloads.
Memory trick: For VMs, if you need full VA, Plan 2 is the way.