SC-100 Question #181: Real Exam Question with Answer & Explanation

Question

You have an Azure subscription. The subscription contains 50 virtual machines that run Windows Server and 50 virtual machines that run Linux. You need to perform vulnerability assessments on the virtual machines. The solution must meet the following requirements: - Identify missing updates and insecure configurations. - Use the Qualys engine. What should you use?

Options

• AMicrosoft Defender for Servers
• BMicrosoft Defender Threat Intelligence (Defender TI)
• CMicrosoft Defender for Endpoint
• DMicrosoft Defender External Attack Surface Management (Defender EASM)

Explanation

{"question_number": 8, "correct_answer": "A", "explanation": "Microsoft Defender for Servers is the correct answer because it natively integrates the Qualys vulnerability assessment engine as a built-in option. When Defender for Servers is enabled, you can deploy the Qualys-powered scanner to both Windows Server and Linux VMs directly from the Azure portal at no additional Qualys licensing cost. It identifies missing OS and software updates, insecure configurations, and known CVEs. Defender Threat Intelligence (B) focuses on threat actor intelligence, not VM vulnerability scanning. Defender for Endpoint (C) provides EDR/antivirus capabilities and has some vulnerability management features but its primary engine is not Qualys. Defender EASM (D) scans externally visible internet assets, not internal VM configurations.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.