Exam AZ-500 topic 1 question 37 discussion

This question is no longer relevant as the pricing model has changed. It's now offered in two modes: defender on or defender off.

The Standard tier extends the capabilities of the free tier to workloads running in private and other public clouds, providing unified security management and threat protection across your hybrid cloud workloads. The standard tier also adds threat protection capabilities, which use built-in behavioral analytics and machine learning to identify attacks and zero-day exploits, access and application controls to reduce exposure to network attacks and malware, and more. In addition, standard tier adds vulnerability scanning for your virtual machines.

This is outdated question now. Microsoft is using MS Defender for cloud which much more advance solution than Azure Security Center. If you want OS-level security changes & enforcement, go for Microsoft Defender for Servers Plan 2.

--Question is out of date-- Azure Security Center has been rebranded to Microsoft Defender for Cloud, and the pricing tiers have changed. Answer: Defender plans must be turned ON Reason: Microsoft Defender for Cloud now operates in two modes: with Defender plans ON or OFF. To modify operating system security configurations, you need to have the relevant Defender plan turned ON for your resources. The "Defender OFF" mode (previously known as Free tier) provides basic security assessments but does not include advanced features like modifying OS security configurations. Reference: https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction

To support the answer: To modify the operating system security configurations via Azure Security Center, you need the Standard tier (now called Microsoft Defender for Servers Plan 2). This tier provides advanced security features and customization options, including the ability to modify operating system security configurations. The pricing for Microsoft Defender for Servers Plan 2 is typically around $0.02 per server per hour4. This tier includes: Advanced threat detection capabilities Customizable security policies Ability to modify operating system security configurations Continuous security assessment and recommendations Answer = C.

To modify operating system security configurations via Azure Security Center (now known as Microsoft Defender for Cloud), you need to be on the Microsoft Defender for Servers plan. This plan is part of the enhanced security features available in the Defender (formerly known as Standard) tier. The Free tier of Azure Security Center provides basic security capabilities, but to access advanced features like modifying operating system security configurations, you need the Microsoft Defender tier. This includes access to features such as vulnerability assessments, security baselines, and just-in-time (JIT) VM access, among others. So, the required pricing tier is the Defender for Servers (within the Microsoft Defender tier).

C. Standard

C. Standard

If the question is still relavent Premium Azure Security Center offers different pricing tiers: Free, Standard, and Premium. While the Free and Standard tiers provide basic security capabilities, the Premium tier offers advanced features, including the ability to modify operating system security configurations.

Modifying OS security configurations should be done by Azure Automation State Configuration instead. https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview

C. Standard - old question

now you have 'Defender for Cloud' --> 'Free' tier. and the 'Defender for Cloud' -> 'Enhanced Security Features' which would be the 'Paid' tier. therefore, this question is now obsolete.

No longer valid question. https://docs.microsoft.com/en-gb/azure/defender-for-cloud/defender-for-cloud-introduction

correct answer

I really hate this kind of questions, since you know that there's two tiers for security center one with defender on and other with defender off. I see no point remembering what it's actually called (they are standard and free) but in my mind standard and advanced sound more describing. Sorry I just wanted to rant how annoying some of there questions are.