Exam AZ-500 topic 3 question 43 discussion

Commenting again because I found this. Answer is A -- Follow this link for a good explanation. I think this question is missing a portion in it that the subscription uses Standard tiering: https://www.examtopics.com/discussions/microsoft/view/39932-exam-az-500-topic-2-question-48-discussion/

In exam today!

Support for answer 'A'. "The Basic tier of Azure Container Registry does not include vulnerability scanning. To enable vulnerability scanning for your container images, you need to be on the Standard tier or higher."

On exam Aug 6 2024

Microsoft Defender for Cloud in its standard version does not have Defender for Kubernetes enabled. If you want your container images to be scanned when the images are uploaded, you will need to enable it and add this new “tier” to your monthly cost. https://learn.microsoft.com/pt-br/azure/defender-for-cloud/defender-for-kubernetes-introduction

The answer is A because fee tier for Microsoft Defender expires after 30 days, hence the vulnerability scanning will stop working. You will need to get a paid tier (standard)

A. From the Azure portal, modify the Pricing tier settings.

A. From the Azure portal, modify the Pricing tier settings.

Answer is correct.

Defender for Cloud offers basic, and many enhanced security features that can help protect your organization against threats and attacks. When you enable the enhanced security features (paid), Defender for Cloud can provide unified security management and threat protection across your hybrid cloud workloads, including: Container security features Container security features - Benefit from vulnerability management and real-time threat protection on your containerized environments. Charges are based on the number of unique container images pushed to your connected registry. After an image has been scanned once, you won't be charged for it again unless it's modified and pushed once more. Reference Basic and enhanced security features https://learn.microsoft.com/en-us/azure/defender-for-cloud/enhanced-security-features-overview

Need to enable scanning for container registries from pricing tier.

## Exam Question - 17 Sept 2021 ##

Got this in the AZ-500 exam (Sept 2021)!

Not C because: Azure Defender will then scan all images when they’re pushed to the registry, imported into the registry, or pulled within the last 30 days. https://docs.microsoft.com/en-us/azure/security-center/defender-for-container-registries-introduction

Does anyone have proper insight as to why the answer is apparently "A"? I'm confused here.

Since in this case even with Azure Defender enabled, new images are not scanned, it could be that defender is currently setup with Container registry plan to "Off".

How is it not C?