SC-100 Certification Practice Question #150

Question

You are designing the security standards for containerized applications onboarded to Azure.
You are evaluating the use of Microsoft Defender for Containers.
In which two environments can you use Defender for Containers to scan for known vulnerabilities? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

Defender for Containers performs vulnerability assessment in two relevant places: images in supported registries (ACR) and images running on Kubernetes clusters (AKS). MS Learn confirms registry VA and AKS runtime VA are both GA for Linux, which maps cleanly to D (Linux/ACR) and E (Linux/AKS) — the 52-vote community majority and the historically accepted answer. The Suggested Answer (E only) is one half of a two-answer question; D supplies the registry half. Confidence is lowered to 78 because there is a genuine, doc-grounded CD split: container *registry* VA is GA for Windows images too, so "Windows containers in ACR" (C) is arguably valid, and the question's exact intent (registry vs. running-image, Linux vs. Windows) is ambiguous. DE wins on the unanimous Linux GA support across both ACR and AKS plus the dominant vote count, but the Windows-registry nuance keeps this below the high-confidence band.

More SC-100 practice questions