SC-200 practice question 17 of 35

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that…

Choose your answer, then check it against the explanation.

Domain Mitigate threats using Microsoft Defender for Cloud

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have Linux virtual machines on Amazon Web Services (AWS). You deploy Azure Defender and enable auto-provisioning. You need to monitor the virtual machines by using Azure Defender. Solution: You enable Azure Arc and onboard the virtual machines to Azure Arc. Does this meet the goal?

Answer options

Correct Answer:

Explanation

The proposed solution is correct. To monitor non-Azure machines, such as Linux virtual machines on Amazon Web Services (AWS), with Microsoft Defender for Cloud (formerly Azure Defender), they must first be connected to the Azure control plane. Azure Arc is the standard and recommended service for this purpose. By onboarding the AWS VMs to Azure Arc, they become hybrid resources visible and manageable within Azure. This allows Defender for Cloud to extend its security monitoring and threat protection capabilities to them. Since auto-provisioning is already enabled in the scenario, the necessary monitoring agents will be automatically deployed to the machines once they are connected via Azure Arc, thus meeting the goal.

Why Incorrect

B. No: This is incorrect. Onboarding non-Azure machines via Azure Arc is the standard and required procedure to enable monitoring and protection with Microsoft Defender for Cloud.

References

1. Microsoft Learn. (2024). Connect your non-Azure machines to Microsoft Defender for Cloud. "To protect your non-Azure machines

you should connect them to Azure by using Azure Arc-enabled servers." This is stated in the introductory paragraph of the document.

2. Microsoft Learn. (2024). Plan your Defender for Servers deployment. Under the "Deployment path" section

the guide explicitly states: "For machines in other clouds: Connect them to Azure Arc."

3. Microsoft Learn. (2024). What is Azure Arc-enabled servers?. Under the section "What does Azure Arc-enabled servers provide?"

it lists "Integration with other Azure services to provide monitoring

security

and update management..." and specifically mentions Microsoft Defender for Cloud as an example.

Question 17 of 35

Keep practicing

Take the free SC-200 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test