SC-200 Certification Practice Question #164

Question

You have an Azure subscription that contains 50 virtual machines.

You plan to deploy Microsoft Defender for Cloud.

You need to enable agentless scanning for 40 virtual machines. The solution must create disk snapshots of the virtual machines and perform out-of-band analysis of the snapshots.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Agentless scanning creates out-of-band disk snapshots and analyzes them without an agent; per MS Learn it is delivered by the Defender CSPM plan (and Defender for Servers P2), so the plan to enable is Defender CSPM. To exclude the 10 VMs (scan only 40 of 50), MS Learn's "Exclude machines from agentless scanning" article states you enter a tag name/value in the agentless scanning configuration — i.e., tagging. The two highest-voted comments (11 and 3 👍) cite the exact MS Learn pages and there is no dissent on either selection.

More SC-200 practice questions