Exam SC-100 topic 2 question 7 discussion

Good answer, bad references Defender for IoT https://docs.microsoft.com/en-us/azure/defender-for-iot/organizations/architecture EC2 instances need Defender for Cloud by way of Arc https://docs.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-aws?pivots=env-settings https://docs.microsoft.com/en-us/azure/azure-arc/servers/overview#supported-cloud-operations

On Exam 8 Apr 2024 scored 764 answered as solution.

AWS accounts should have Azure Arc auto provisioning enabled For full visibility of the security content from Microsoft Defender for servers, EC2 instances should be connected to Azure Arc. To ensure that all eligible EC2 instances automatically receive Azure Arc, enable auto-provisioning from Defender for Cloud at the AWS account level. https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-aws

For Question 1: Azure IoT Edge devices, the recommended security posture management solution is: e. Microsoft Defender for IoT: Microsoft Defender for IoT is designed specifically for securing IoT devices and provides advanced threat protection, vulnerability management, and continuous monitoring for IoT environments. It helps protect Azure IoT Edge devices by detecting and responding to security threats. For Question 2: AWS EC2 instances, the recommended security posture management solution is: f. Microsoft Defender for Endpoint only: Microsoft Defender for Endpoint (formerly known as Microsoft Defender ATP) is a comprehensive endpoint security solution that provides protection against various threats, including malware, advanced attacks, and vulnerabilities. While Azure Arc can be used to manage and monitor AWS resources, Microsoft Defender for Endpoint is the appropriate choice for securing the EC2 instances.

Any idea, why Microsoft XDR references don’t include Defender for IoT/OT. Below is what I see mostly The component services that are part of the Microsoft Defender XDR stack are: Microsoft Defender for Identity Microsoft Defender for Office 365 Microsoft Defender for Cloud Apps Microsoft Defender for Endpoint

1. Microsoft Defender for IoT 2. Microsoft Defender for Cloud and Azure Arc

1. Microsoft Defender for IoT 2. Microsoft Defender for Cloud and Azure Arc https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/overview Microsoft Defender for IoT is a unified security solution built specifically to identify IoT and OT devices, vulnerabilities, and threats. Use Defender for IoT to secure your entire IoT/OT environment, including existing devices that may not have built-in security agents. https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-aws?pivots=env-settings With cloud workloads commonly spanning multiple cloud platforms, cloud security services must do the same. Microsoft Defender for Cloud protects workloads in Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), GitHub and Azure DevOps (ADO). To enable the Defender for Servers plan, you'll need: - Azure Arc for servers installed on your EC2 instances.

You need to recommend a security posture management solution. with that for AWS EC2 MDC only. https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-aws?pivots=env-settings. --> Provide an agentless connection.

correct

was in 20Sep2020 exam

correct

correct

correct