Exam SC-200 topic 4 question 8 discussion

Actual exam question from Microsoft's SC-200

Question #: 8
Topic #: 4

HOTSPOT
-

You have an Azure subscription that contains 50 virtual machines.

You plan to deploy Microsoft Defender for Cloud.

You need to enable agentless scanning for 40 virtual machines. The solution must create disk snapshots of the virtual machines and perform out-of-band analysis of the snapshots.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by DChilds at April 25, 2024, 11:02 p.m.

Comments

Submit Cancel

DChilds

Highly Voted 1 year, 2 months ago

Both correct options, reference: Defender CSPM: https://learn.microsoft.com/eN-us/azure/defender-for-cloud/concept-agentless-data-collection Tagging: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/resource-naming-and-tagging-decision-guide

upvoted 10 times

...

talosDevbot

Most Recent 9 months, 2 weeks ago

Answer is correct: - Agentless scanning is available through Defender CSPM plan (in Defender for Cloud) https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms - To exclude VMs from scanning, you have to use tagging https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms#exclude-machines-from-scanning

upvoted 3 times

...

Peachy7

1 year, 2 months ago

Agentless scanning assists you in the identification process of actionable posture issues without the need for installed agents, network connectivity, or any effect on machine performance. Agentless scanning is available through both the Defender Cloud Security Posture Management (CSPM) plan and Defender for Servers P2 plan.

upvoted 2 times

...

laddu001

1 year, 2 months ago

Defender CSPM and policy assignment

upvoted 1 times

...