Microsoft Security Operations Analyst Associate SC-200 Practice Question

To have Microsoft Defender for Cloud automatically secure all current and newly deployed AKS clusters and ACR instances-including enabling image vulnerability scanning-you begin by turning on the Microsoft Defender for Containers plan at the subscription level. When this plan is enabled, Defender for Cloud automatically onboards supported Kubernetes clusters and container registries in that subscription and deploys the necessary monitoring components (such as the Defender agent extension) as new resources are created. Simply connecting clusters to Log Analytics, configuring adaptive application controls, or creating alert suppression rules does not activate the Defender for Containers protections and will not ensure that future resources are automatically covered.