SC-100 Certification Practice Question #188

Question

You have an Azure subscription. The subscription contains 100 virtual machines that run Linux on Windows Server. The subscription uses Microsoft Defender for Servers Plan 1.

You need to recommend a solution to identify and remediate virtual machines that have the following characteristics:

•	Are NOT onboarded to Defender for Servers
•	Are missing critical updates
•	Have risky apps installed

The solution must minimize administrative effort.

What should you include in the recommendation?

Accepted Answer

The three required signals — detecting machines not onboarded to Defender for Servers, finding missing critical updates, and flagging risky apps — all map directly to Microsoft Defender Vulnerability Management's continuous asset discovery, software inventory, security recommendations, and built-in remediation workflow, which also minimizes admin effort. MS Learn lists vulnerability assessment, software inventory, and remediation tracking as supported under Defender for Servers Plan 1, so it fits this subscription. EASM is external-only, Defender TI is threat intelligence rather than asset hygiene, and Intune Advanced Analytics targets Intune-managed device telemetry rather than Defender onboarding gaps. Confidence is held at 86 rather than higher because the community sample is thin (only a single 2-vote comment), though Suggested Answer and MS Learn both reinforce B.

More SC-100 practice questions