SC-100 Certification Practice Question #194

Question

You have an Azure subscription.

You have a subscription to a third-party cloud provider. The subscription contains 100 virtual machines.

You manage cloud security for both subscriptions from the Azure subscription.

You need to recommend a solution to validate the security posture of the virtual machines.

Which two services should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

Accepted Answer

The question asks for the two services needed to validate the security posture of VMs running in a third-party cloud, managed from Azure. Microsoft Defender for Cloud (C) is the service that performs Cloud Security Posture Management (CSPM) and validates posture, but non-Azure/third-party machines must first be projected into Azure as resources. Azure Arc (B) is the connectivity layer that onboards non-Azure machines so Defender for Cloud can see and assess them — MS Learn states non-Azure public-cloud machines connect via the Azure Arc service. The Suggested Answer lists only C, which is incomplete for a "choose two" item; the community Most Voted BC supplies the missing connectivity service. Sentinel (A) is a SIEM, not posture validation; Defender for Endpoint (E) is EDR, not the posture-management plane; Lighthouse (D) is delegated management, not posture validation. Confidence is 84 because the Suggested Answer is partial and only C is officially marked, but MS Learn plus the leading community vote clearly establish Arc + Defender for Cloud as the pair.

More SC-100 practice questions