SC-100 Certification Practice Question #256

Question

You have an Azure subscription.

You have an on-premises datacenter. The datacenter contains 20 servers that run Windows Server. Each server is onboarded to Azure Arc and is protected by using Microsoft Defender for Servers Plan 1.

You have a Microsoft 365 subscription.

You need to recommend a solution to identify which servers have outdated hardware drivers or firmware.

What should you include in the recommendation?

Accepted Answer

MS Learn lists "Hardware and firmware assessment" as a Defender Vulnerability Management *premium* capability that is **not** included in Defender for Servers Plan 1 (only Plan 2). For Plan 1 customers, that exact capability is unlocked by adding the Defender Vulnerability Management add-on, which surfaces outdated drivers, firmware, and BIOS organized by system models, processors, and BIOS. Option A (upgrade to Plan 2) would also technically enable it, but the question asks what to *include in the recommendation* to gain the specific firmware/driver assessment, and the targeted, lower-effort answer that matches the Suggested Answer and all three Most-Voted comments is the MDVM add-on. C (Azure Update Manager) handles OS patch scheduling/compliance, not hardware/driver/firmware vulnerability identification, so the lone dissent is discounted. Confidence is held at 90% because A is a plausible secondary path, but D is unambiguously the intended and grounded answer.

More SC-100 practice questions