SC-200 Certification Practice Question #67

Question

You create an Azure subscription.
You enable Azure Defender for the subscription.
You need to use Azure Defender to protect on-premises computers.
What should you do on the on-premises computers?

Accepted Answer

Both the official Suggested Answer and the community Most Voted (26 votes) select D, and MS Learn states the recommended way to bring an on-premises computer under Defender for Cloud protection is to onboard it as an Azure Arc-enabled VM, which requires the Azure Connected Machine agent. The Connected Machine agent makes the on-prem machine a first-class Azure resource so Defender for Cloud plans (Azure Defender) apply to it. The high-vote dissent for A (Log Analytics agent) reflects the older MMA-based model: even then, on an on-prem box the LA agent is delivered via an Arc extension, so Arc/Connected Machine agent is the prerequisite. The Log Analytics/MMA agent was retired in November 2024, which further invalidates A. Confidence is held at 88 rather than higher because two heavily-upvoted comments back the outdated A answer, reflecting a genuine (but resolvable) community split.

More SC-200 practice questions