A security engineer is tasked with onboarding an on-premises Windows Server to Microsoft Defender for Cloud to extend its security monitoring capabilities to their hybrid environment. The server needs to be assessed for security vulnerabilities, comply with Azure policies, and receive threat protection. Which two Azure services are primarily required to enable Microsoft Defender for Cloud to manage and protect this on-premises server?
- AAzure Front Door and Azure Load Balancer
- BAzure Virtual Network and Network Security Groups
- CAzure Arc and Azure Monitor Agent
- DAzure DNS and Azure Traffic Manager
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Arc and Azure Monitor Agent
Azure Arc extends Azure management capabilities to on-premises and multi-cloud environments, allowing on-premises servers to be managed as Azure resources. The Azure Monitor Agent (AMA) collects security data from these servers and sends it to a Log Analytics workspace, enabling Defender for Cloud to assess and protect them.
Why the other options are wrong
- A. Azure Front Door and Azure Load Balancer are for global routing and traffic distribution, not for onboarding on-premises servers to Defender for Cloud.
- B. Azure Virtual Network and Network Security Groups are for networking within Azure, not for extending management to on-premises servers.
- D. Azure DNS and Azure Traffic Manager are for domain name resolution and traffic routing, unrelated to onboarding on-premises servers for security monitoring.
Azure Arc and Azure Monitor Agent (Hybrid Security)
Azure Arc extends Azure management to on-premises and multi-cloud environments, treating non-Azure machines as Azure resources. The Azure Monitor Agent (AMA) is then installed on these Arc-enabled servers to collect security logs and data for Microsoft Defender for Cloud and other Azure monitoring services.
- Azure Arc enables management of non-Azure machines as Azure resources.
- Azure Monitor Agent collects data for Defender for Cloud.
- Essential for extending Defender for Cloud to hybrid environments.
Memory trick: Arc bridges the gap, AMA gathers the data, for Defender's security, it's the right strata.