Microsoft Azure Security Engineer Associate AZ-500 Practice Question

Your company is onboarding a production Amazon Web Services (AWS) account to Microsoft Defender for Cloud so that the account's resources appear in the Defender for Cloud inventory and contribute to Secure Score. In the Azure portal you create a new AWS connector and successfully deploy the required CloudFormation stack that creates the cross-account IAM role. After several hours, no recommendations or Secure Score information are shown for the AWS account. Which prerequisite must be completed in the AWS account before Defender for Cloud can start ingesting security findings?

  • Install and configure the AWS Systems Manager agent on all Amazon EC2 instances.

  • Enable AWS Security Hub in every region of the AWS account.

  • Enable Amazon GuardDuty in the us-east-1 region only.

  • Create an AWS Config recorder and deliver configuration snapshots to an S3 bucket only.

Microsoft Azure Security Engineer Associate AZ-500
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot