SC-200 Certification Practice Question #77

Question

You have 50 on-premises servers.

You have an Azure subscription that uses Microsoft Defender for Cloud. The Defender for Cloud deployment has Microsoft Defender for Servers and automatic provisioning enabled.

You need to configure Defender for Cloud to support the on-premises servers. The solution must meet the following requirements:

•	Provide threat and vulnerability management.
•	Support data collection rules.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Accepted Answer

The requirements are threat/vulnerability management (needs the servers onboarded to Defender for Cloud) and support for data collection rules (DCRs). Per MS Learn, on-premises servers are brought into Azure by onboarding them as Azure Arc-enabled servers using a portal-generated installation script (Action 1), which deploys/relies on the Azure Connected Machine agent (Action 4). DCRs are only supported by the Azure Monitor Agent — the legacy Log Analytics/MMA agent (Action 3) is deprecated/retired and does not support DCRs — so AMA must be installed last (Action 5). The community is near-unanimous on 1-4-5 with the two highest-voted comments (herta 👍32, RodrigoLima 👍10) agreeing. Confidence is 88 (not higher) because no official Suggested Answer is recorded in the file and a couple of low-vote comments propose alternate orderings using the deprecated agent.

More SC-200 practice questions