Microsoft Azure Security Engineer Associate AZ-500 Practice Question
You use Microsoft Defender for Cloud and have enabled Microsoft Defender for Servers Plan 2 on a subscription that contains dozens of Windows and Linux virtual machines. To simplify onboarding you want to use agentless vulnerability assessment so that no extensions or agents are installed on the VMs. Which action must you perform before Defender Vulnerability Management findings will be produced for these VMs?
Assign the built-in policy that deploys the integrated Qualys vulnerability assessment extension to the virtual machines.
Configure a security contact email and phone number in the subscription's security center settings.
Enable agentless scanning for virtual machines and scale sets at the subscription level in Defender for Cloud environment settings.
Install the Azure Monitor agent on each virtual machine to collect vulnerability data.
Agentless vulnerability assessment relies on a snapshot-based scanner that is activated at the subscription or environment level. In Defender for Cloud you must go to Environment settings for the subscription, open the Servers plan, and explicitly turn on Agentless scanning for VMs and VMSS. When this setting is enabled Defender for Cloud will automatically collect and analyze disk snapshots and surface Defender Vulnerability Management findings without deploying the Qualys extension, the Microsoft Defender for Endpoint agent, or the Azure Monitor agent. Installing agents or configuring security contacts is unnecessary for agentless scanning, and assigning the policy that deploys the integrated Qualys extension represents the older agent-based method rather than the desired agentless approach.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Agentless Scanning in Microsoft Defender for Cloud?
Open an interactive chat with Bash
How do you enable Agentless Scanning in Microsoft Defender for Cloud?
Open an interactive chat with Bash
What is the difference between Agentless and Agent-based Vulnerability Assessments?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .