Exam SC-200 topic 1 question 47 discussion

Agentless malware scanning is only available if you have enabled Defender for Servers plan 2 so I assume you need to upgrade plan first

A. Create an exclusion tag. https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms

A) is the right answer https://learn.microsoft.com/en-us/azure/defender-for-cloud/exclude-machines-agentless-scanning

It says you need to manually enable for server plan 1, which is in the next sentence. Meaning he/she already enable the agentless scanning. No need to get plan 2. https://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-defender-vulnerability-management Ans is A

A answer

Since it already says "you enable agentless scanning" I take this as an upgrade to Plan 2 has already occured in the environment.

I guess just pick your answer and hope for the best? What a terribly written question. My guess is A because it doesn't answer the question of HOW to exclude. Just adding a P2 license doesn't exclude and it doesn't ask, "what do you do first". Still, is there some way of doing this without P2? For either the Defender Cloud Security Posture Management (CSPM) or Defender for Servers P2 plan, select Settings. For either the Defender Cloud Security Posture Management (CSPM) or Defender for Servers P2 plan, select Settings. From MS: For either the Defender Cloud Security Posture Management (CSPM) or Defender for Servers P2 plan, select Settings. Enter the tag name and value that applies to the machines that you want to exempt. You can enter multiple tag:value pairs. https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms#exclude-machines-from-scanning

correct -- A To prevent specific machines from being scanned, you can exclude machines from agentless scanning based on your pre-existing environment tags. https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms

I see some people voting foranswer is "B". But if agentless scanning requires a plan 2 licence, and the assignment reads "you enable agentless monitoring" doesn't that suggest said licence is already in play?

I am gonna go for B I checked it with co-pilot as well and it agrees with this by saying Upgrading to Defender for Servers Plan 2 provides more advanced security features and capabilities.

Agentless scanning requires plan 2 licenses

I think you need to upgrade to Plan 2 first.

Option A tag

A. Create an exclusion tag. https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms#exclude-machines-from-scanning

Why it is not D?

A. Create an exclusion tag.