Microsoft Security Operations Analyst Associate SC-200 Practice Question
You manage an Azure subscription that hosts several Linux and Windows virtual machines. Your security team wants Microsoft Defender for Cloud to identify software vulnerabilities on these VMs without installing any guest-based agents, and they also require malware scanning and threat detection for the machines. Which configuration should you apply to meet these requirements?
Enable Microsoft Defender for Servers Plan 2 and set Agentless scanning for machines to Enabled in Microsoft Defender for Cloud.
Integrate the subscription with Microsoft Defender for Endpoint and rely solely on Defender for Endpoint sensors for vulnerability data.
Enable Azure Policy guest configuration to audit the VMs and assign the built-in Vulnerability Assessment initiative.
Enable Microsoft Defender for Containers and turn on image scanning for Azure Container Registries linked to the subscription.
Agentless scanning for machines in Microsoft Defender for Cloud is available only when Microsoft Defender for Servers Plan 2 or the Defender Cloud Security Posture Management (CSPM) plan is enabled. Plan 2 also delivers real-time threat detection and malware protection through its integration with Microsoft Defender for Endpoint. After enabling Plan 2, ensure that the Agentless scanning for machines setting is set to Enabled in Environment settings so that Defender for Cloud can snapshot VM disks and perform vulnerability and malware assessments without deploying guest agents. Azure Policy guest configuration, Defender for Endpoint integration alone, or Defender for Containers image scanning will not provide the required agentless vulnerability and malware scanning for virtual machines.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is agentless scanning in Microsoft Defender for Cloud?
Open an interactive chat with Bash
What is Microsoft Defender for Servers Plan 2?
Open an interactive chat with Bash
Why is Azure Policy guest configuration not suitable for agentless vulnerability scanning?
Open an interactive chat with Bash
Microsoft Security Operations Analyst Associate SC-200
Configure protections and detections
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .