Microsoft Azure Security Engineer Associate AZ-500 Practice Question

For Azure Container Apps, runtime threat detection is provided by Microsoft Defender for Containers. Merely onboarding a subscription to Microsoft Defender for Cloud does not automatically enable any Defender plans. You must explicitly enable the Microsoft Defender for Containers plan at the subscription or resource-group level. Once the plan is enabled, Defender instruments the Container Apps environment and can raise security alerts for suspicious processes, reverse shells, crypto-mining, and other threats. Enabling diagnostic logs, deploying the apps to an App Service Environment, or configuring egress filtering can improve observability or network security but will not activate Defender's runtime analysis or generate the required alerts.