SC-100 Certification Practice Question #164

Question

You have an Azure subscription. The subscription contains 50 virtual machines that run Windows Server and 50 virtual machines that run Linux.

You need to perform vulnerability assessments on the virtual machines. The solution must meet the following requirements:

•	Identify missing updates and insecure configurations.
•	Use the Qualys engine.

What should you use?

Accepted Answer

The requirements — identify missing updates and insecure configurations using the Qualys engine — describe Microsoft Defender for Cloud's vulnerability assessment for machines, which is delivered through the Defender for Servers (Plan 2) workload. Historically that workload offered the "Microsoft Defender for Cloud integrated Qualys scanner" as one of two built-in vulnerability-assessment options, which is exactly the Qualys engine called out in the question. Both the Suggested Answer and the top community vote select A, and MS Learn confirms Defender for Servers Plan 2 assesses missing updates/patches and configuration weaknesses across Windows and Linux VMs. Defender TI, Defender for Endpoint, and Defender EASM each serve unrelated functions (threat intelligence, endpoint EDR, and external attack-surface management respectively) and none provide the Qualys-based VM vulnerability assessment. Confidence is 88 rather than higher because macka2005 (4 👍) correctly notes the integrated Qualys scanner was deprecated on May 1, 2024 — a real-world caveat — but for this exam item the keyed and community answer remains A.

More SC-100 practice questions