Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudEasy
A security engineer is reviewing the security recommendations in Microsoft Defender for Cloud for an Azure subscription. They notice a recommendation stating "Vulnerabilities in your virtual machine images should be remediated". Upon investigation, they find several Linux virtual machines with known vulnerabilities reported by a vulnerability assessment solution. The engineer needs to quickly deploy a vulnerability assessment solution to these machines to get detailed reports and track remediation. Which of the following Microsoft Defender for Cloud capabilities should the engineer utilize first?
- AJust-in-Time (JIT) VM Access
- BAdaptive Application Controls
- CIntegrated vulnerability assessment solution
- DNetwork hardening recommendations
Show answer & explanationAnswer & explanation
Correct answer: C. Integrated vulnerability assessment solution
To get detailed vulnerability reports and track remediation for virtual machine images, the integrated vulnerability assessment solution in Microsoft Defender for Cloud is the most direct and appropriate capability to utilize.
Why the other options are wrong
- A. JIT VM Access is for securing management ports, not for scanning VM images for vulnerabilities.
- B. Adaptive Application Controls are used to control which applications can run on VMs, not for vulnerability scanning.
- D. Network hardening recommendations focus on network security, not on software vulnerabilities within VM images.
Integrated Vulnerability Assessment (Defender for Cloud)
Microsoft Defender for Cloud offers integrated vulnerability assessment solutions to scan virtual machines and containers for software vulnerabilities, providing actionable recommendations for remediation.
- Scans VMs and containers for known vulnerabilities.
- Provides detailed reports and remediation steps.
- Integrated with Defender for Servers Plan 2 and Defender for Containers.
Memory trick: Scan the VM, then patch the flaw, to keep the bad guys out of the law.