SC-200 Certification Practice Question #71

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have Linux virtual machines on Amazon Web Services (AWS).
You deploy Azure Defender and enable auto-provisioning.
You need to monitor the virtual machines by using Azure Defender.
Solution: You manually install the Log Analytics agent on the virtual machines.
Does this meet the goal?

Accepted Answer

This is part of the same "unique solution" series as Q28; the intended correct first action for non-Azure (AWS) machines is to onboard them via Azure Arc, which Q28 affirms. Manually installing only the Log Analytics agent (without the Azure Arc/Connected Machine onboarding) does not satisfy the documented path — MS Learn states you must first connect non-Azure machines to Azure (Arc recommended), and the Log Analytics agent itself retired in August 2024 with its functions moving to Defender for Endpoint and agentless scanning. Both the Suggested Answer and Most Voted are B, with the two top comments (13 and 9 👍) explicitly making this argument. Confidence is lowered to 76 because there is a genuine, heavily-upvoted dissent (ejml, 11 👍): in older guidance an Arc-enabled machine running the LA agent did show in Defender for Cloud, so the question is dated and the "correct" answer hinges on interpreting the series' single-step intent rather than on an absolute technical impossibility.

More SC-200 practice questions