Exam SC-100 topic 1 question 37 discussion

1.Azure automation account 2.Log analytics agent

1. https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan#review-plans Defender for Servers Plan 2 provides the same features as Plan 1, and more: Agentless scanning for machine posture scanning, vulnerability assessment, threat protection, malware scanning, and secrets scanning. Compliance assessment against various regulatory standards. Available with Defender for Servers Plan 2 or any other paid plan. Capabilities provided by premium Microsoft Defender Vulnerability Management. A free data ingestion benefit for specific data types. OS configuration assessment against compute security baselines in the Microsoft Cloud Security Benchmark. OS updates assessment with Azure Updates integrated into Defender for Servers. File integrity monitoring to examine files and registries for changes that might indicate an attack. Just-in-time machine access to lock down machine ports and reduce attack surfaces. Network map to get a geographical view of network recommendations.

I don't see how Defender for Servers Plan 2 have anything with Azure Update Manager - https://learn.microsoft.com/en-us/azure/update-manager/prerequisites

Connect hybrid machines to Azure from Automation Update Management Automation account - This method requires that you are a member of the Automation Job Operator role or higher so you can create runbook jobs in the Automation account. You can enable Azure Arc-enabled servers for one or more of your Windows or Linux virtual machines or physical servers hosted on-premises or other cloud environment that are managed with Azure Automation Update Management. This onboarding process automates the download and installation of the Connected Machine agent. https://learn.microsoft.com/en-us/azure/azure-arc/servers/onboard-update-management-machines

1. Defender for Servers Plan 2 2. Log Analytics agent https://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers#deployment-steps https://learn.microsoft.com/en-us/azure/defender-for-cloud/monitoring-components#log-analytics-agent

"Automation Update Management has retired on 31 August 2024 and we recommend that you use Azure Update Manager. Follow the guidelines for migration from Automation Update Management to Azure Update Manager."

DfS has nothing to do with update management. Needs automation account as pre-req for AUM and ARC to bring on-prem to azure.

2: Azure connected machine agent as per https://techcommunity.microsoft.com/blog/azuregovernanceandmanagementblog/generally-available-azure-update-manager/3928878

Defender for servers plan 2 Azure connected machine agent - azure arc

1. A Microsoft Sentinel Workspace 2, The Log Analytics agent