You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have an Amazon Web Services (AWS) implementation. You plan to extend the Azure security strategy to the AWS…

Question

Options

• AAzure Active Directory (Azure AD) Privileged Identity Management (PIM)
• BAzure Active Directory (Azure AD) Conditional Access
• CMicrosoft Defender for servers
• DAzure Policy
• EMicrosoft Defender for Containers

• A
  63% (35)
• C
  21% (12)
• D
  16% (9)

Explanation

The correct answers are A (Azure AD PIM), B (Azure AD Conditional Access), and E (Microsoft Defender for Containers). When extending Azure security to AWS without Azure Arc: Azure AD PIM manages and monitors privileged identity access regardless of the underlying cloud platform, controlling who has elevated permissions. Azure AD Conditional Access enforces identity-based access policies (MFA, compliant devices) for users accessing AWS resources via federated SSO. Microsoft Defender for Containers has native AWS integration in Microsoft Defender for Cloud that can protect Amazon EKS clusters without requiring Azure Arc. Microsoft Defender for Servers (C) requires Azure Arc to onboard non-Azure machines (VMs) for server-level protection - Arc is explicitly excluded. Azure Policy (D) enforces compliance on Azure and Arc-enabled resources only; it cannot natively govern AWS resources without Arc.

No community discussion yet for this question.