You have an Azure subscription that contains a Microsoft Defender External Attack Surface Management (Defender EASM) resource named EASM1. You review the Attack Surface Summary dashboard. You need…

Question

Options

• ASecuring the Cloud
• BSensitive Services
• CAttack Surface Priorities
• DAttack surface composition

• A
  5% (2)
• B
  7% (3)
• C
  77% (34)
• D
  11% (5)

Explanation

Attack Surface Priorities (Option C) is the correct section because it is specifically designed to highlight urgent issues requiring attention, including deprecated technologies that are no longer supported and infrastructure nearing expiration (such as expiring SSL certificates or domains). This section acts as a prioritized action list, surfacing the most critical risks to your external attack surface.

Why the distractors are wrong:

• Option A (Securing the Cloud) focuses on cloud-specific security posture and misconfigurations, not deprecated technologies or expiring infrastructure broadly.
• Option B (Sensitive Services) highlights exposed services that could be sensitive (e.g., admin panels, login pages), not end-of-life or expiring assets.
• Option D (Attack Surface Composition) provides an inventory overview of what assets exist in your attack surface (counts, categories), rather than flagging priority risks like deprecation or expiration.

Memory Tip: Think of "Priorities" as your "To-Do List" - it tells you what needs urgent action, like replacing something that's expired or deprecated. If something is "running out of time" or "past its prime," it belongs in the Priorities section, not just the composition inventory.

No community discussion yet for this question.