nerdexam
Microsoft

AZ-500 · Question #387

Hotspot Question You have an Azure subscription that contains the storage accounts shown in the following table. You enable Azure Defender for Storage. Which storage services of storage5 are…

The correct answer is Monitored storage5 services include File service and Data Lake Storage only. = Yes; Protected storage accounts include storage3 and storage5 only. = Yes. Azure Defender for Storage monitors Blob Storage, Azure Files, and Azure Data Lake Storage Gen2 - but NOT Queue Storage or Table Storage. For storage5 (which appears to be a general-purpose v2 account), the monitored services would be File service and Data Lake Storage (since…

Submitted by javi_es· Mar 6, 2026Manage security operations / Configure and manage threat protection using Microsoft Defender for Cloud - specifically understanding which Azure Storage service types and account kinds are supported and monitored by Azure Defender for Storage when enabled at the subscription scope.

Question

Hotspot Question You have an Azure subscription that contains the storage accounts shown in the following table. You enable Azure Defender for Storage. Which storage services of storage5 are monitored by Azure Defender for Storage, and which storage accounts are protected by Azure Defender for Storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-500 question #387 exhibit 1
AZ-500 question #387 exhibit 2

Answer Area

  • Monitored storage5 services include File service and Data Lake Storage only.Yes
  • Protected storage accounts include storage3 and storage5 only.Yes

Explanation

Azure Defender for Storage monitors Blob Storage, Azure Files, and Azure Data Lake Storage Gen2 - but NOT Queue Storage or Table Storage. For storage5 (which appears to be a general-purpose v2 account), the monitored services would be File service and Data Lake Storage (since Blob/ADLS Gen2 and Files are covered, but based on the table context, Blob service monitoring is already implied separately). Regarding protected accounts, Azure Defender for Storage, when enabled at the subscription level, protects all storage accounts of supported types (general-purpose v2, Blob storage accounts, Azure Data Lake Storage Gen2); accounts using unsupported types like general-purpose v1 or premium file-only accounts may not be fully covered, meaning only storage accounts meeting the supported criteria (like storage3 and storage5) would be protected.

Topics

#Azure Defender for Storage#Microsoft Defender for Cloud#Storage Account Security#Azure Security Center

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice