SC-200 Certification Practice Question #63

Question

You have an Azure subscription that contains a Log Analytics workspace.
You need to enable just-in-time (JIT) VM access and network detections for Azure resources.
Where should you enable Azure Defender?

Accepted Answer

MS Learn is explicit that enabling Defender for Servers only at the workspace level does not enable just-in-time VM access, adaptive application controls, or network detections for Azure resources — those capabilities require enablement at the subscription level (and JIT specifically needs Defender for Servers Plan 2 on the subscription). The Suggested Answer, an overwhelming 13-vote community consensus, the top comment quoting the docs verbatim, and multiple corroborating comments all point to A. Malik2165's minority "subscription or resource level" view is downweighted because the two features named in the question (JIT and network detections) are subscription-scoped, making the subscription level the correct single answer.

More SC-200 practice questions