SC-200 Certification Practice Question #70

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have Linux virtual machines on Amazon Web Services (AWS).
You deploy Azure Defender and enable auto-provisioning.
You need to monitor the virtual machines by using Azure Defender.
Solution: You enable Azure Arc and onboard the virtual machines to Azure Arc.
Does this meet the goal?

Accepted Answer

Both the official Suggested Answer and the community Most Voted (24) are A, and the highest-voted comments cite the correct MS Learn onboarding path. To monitor a non-Azure (AWS) machine with Defender for Cloud, you must first connect it to Azure, and the recommended method is onboarding as an Azure Arc-enabled server. Because the scenario already states auto-provisioning is enabled, once the VM is Arc-onboarded Defender for Cloud automatically deploys its monitoring extensions and surfaces the Microsoft.HybridCompute resource for monitoring — so enabling Azure Arc and onboarding the VMs does meet the goal. Confidence is held at 83 rather than higher because a meaningful minority argues the solution is "incomplete" (no explicit agent step) and the question's series format admits more than one acceptable solution, creating genuine community split.

More SC-200 practice questions