SC-100 Certification Practice Question #52

Question

You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You are evaluating the Azure Security Benchmark V3 report as shown in the following exhibit.

You need to verify whether Microsoft Defender for servers is installed on all the virtual machines that run Windows.
Which compliance control should you evaluate?

Accepted Answer

In the Microsoft Cloud Security Benchmark / Azure Security Benchmark v3 that the Regulatory Compliance dashboard renders, the control "ES-1: Use Endpoint Detection and Response (EDR)" under **Endpoint Security** maps directly to the built-in policy "Azure Defender for servers should be enabled." To verify whether Defender for servers is installed across the Windows VMs, you evaluate the Endpoint Security compliance control. The Suggested Answer, an effectively unanimous community vote (26), and the high-voted top comment all converge with the MS Learn policy mapping, with no credible dissent.

More SC-100 practice questions