SC-100 Certification Practice Question #187

Question

You have an Azure subscription. The subscription contains 200 virtual machines that run Windows Server 2022 and are protected by using Microsoft Defender for Servers Plan 1. You have an Amazon Web Services (AWS) subscription.

To the AWS subscription, you plan to deploy 100 virtual machines that run Windows Server 2022.

You need to recommend which agent to deploy to the virtual machines in the AWS subscription. The solution must meet the following requirements:

•	Provide consistent workload protection across all cloud platforms.
•	Minimize the number of agents deployed to each virtual machine.

What should you recommend?

Accepted Answer

The requirements are consistent cross-cloud workload protection while minimizing agents per VM. With Defender for Servers Plan 1, direct onboarding through the Microsoft Defender for Endpoint agent delivers all Plan 1 capabilities to AWS Windows Server VMs and unifies them with the Azure fleet in a single Defender for Cloud view — using just one agent. Azure Arc (the Connected Machine agent) would be required only for Plan 2 premium features and adds an extra agent, so it loses on the minimization criterion. The Log Analytics and Azure Monitor agents are deprecated for Defender for Servers and provide telemetry collection, not endpoint protection. Suggested Answer, unanimous Most Voted, two ~4 👍 comments, and MS Learn all converge on C.

More SC-100 practice questions