nerdexam
Microsoft

AZ-500 · Question #371

You have an Azure subscription that contains the resources shown in the following Table. You plan to enable Microsoft Defender for Cloud for the subscription. Which resources can be protected by…

The correct answer is C. VM1, VNET1, storage1, and Vault1. Microsoft Defender for Cloud can protect Azure Virtual Machines, Virtual Networks, Storage Accounts, and Key Vaults within an Azure subscription.

Submitted by parkjh· Mar 6, 2026Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel

Question

You have an Azure subscription that contains the resources shown in the following Table. You plan to enable Microsoft Defender for Cloud for the subscription. Which resources can be protected by using Microsoft Defender for Cloud?

Options

  • AVM1, VNET1, and storage1 only
  • BVM1, storage1, and Vault1 only
  • CVM1, VNET1, storage1, and Vault1
  • DVM1 and storage1 only
  • EVM1 and VNET only

How the community answered

(47 responses)
  • A
    11% (5)
  • B
    4% (2)
  • C
    81% (38)
  • D
    2% (1)
  • E
    2% (1)

Why each option

Microsoft Defender for Cloud can protect Azure Virtual Machines, Virtual Networks, Storage Accounts, and Key Vaults within an Azure subscription.

AVM1, VNET1, and storage1 only

This choice is incomplete as it omits Vault1, which Microsoft Defender for Cloud can protect.

BVM1, storage1, and Vault1 only

This choice is incomplete as it omits VNET1, for which Microsoft Defender for Cloud provides network-level security recommendations.

CVM1, VNET1, storage1, and Vault1Correct

Microsoft Defender for Cloud provides security posture management and threat protection across a wide range of Azure resources. This includes Azure virtual machines (VM1), virtual networks (VNET1) for network-level recommendations, storage accounts (Storage1) for data protection, and key vaults (Vault1) for secret management security.

DVM1 and storage1 only

This choice is incomplete as it omits VNET1 and Vault1, both of which are supported by Microsoft Defender for Cloud.

EVM1 and VNET only

This choice is incomplete as it omits Storage1 and Vault1, both of which are supported by Microsoft Defender for Cloud.

Concept tested: Microsoft Defender for Cloud protected resource types

Source: https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction

Topics

#Microsoft Defender for Cloud#resource protection#coverage#Azure resources

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice