AZ-500 Question #491: Real Exam Question with Answer & Explanation

Question

You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains an Azure SQL database named DB1. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should you do first?

Options

• AFrom Advanced Threat Protection types, select SQL injection vulnerability.
• BConfigure the Send scan report to setting.
• CSet Periodic recurring scans to ON.
• DEnable the Microsoft Defender for SQL plan.

Explanation

To perform a vulnerability assessment for an Azure SQL database using Microsoft Defender for Cloud, you must first enable the specific Microsoft Defender for SQL plan.

Common mistakes.

• A. Selecting SQL injection vulnerability as an Advanced Threat Protection type is a specific configuration for a different security feature within Defender for SQL, not the initial step for enabling vulnerability assessments.
• B. Configuring the 'Send scan report to' setting is a post-enablement configuration option for how vulnerability assessment reports are distributed, not the initial enabling step.
• C. Setting 'Periodic recurring scans' to ON is a configuration option for automating vulnerability assessments once the Defender for SQL plan is enabled, not the initial enabling step.

Concept tested. Enabling Microsoft Defender for SQL for vulnerability assessment

Reference. https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-introduction

No community discussion yet for this question.