SC-100 · Question #66
A customer is deploying Docker images to 10 Azure Kubernetes Service (AKS) resources across four Azure subscriptions. You are evaluating the security posture of the customer. You discover that the…
The correct answer is A. Configure auto provisioning. E. Enable Defender plans. The correct answers are A (Configure auto provisioning) and E (Enable Defender plans). AKS resources are excluded from secure score when the relevant Defender plan is not enabled-specifically Microsoft Defender for Containers-so enabling the appropriate Defender plan (E) is…
Question
A customer is deploying Docker images to 10 Azure Kubernetes Service (AKS) resources across four Azure subscriptions. You are evaluating the security posture of the customer. You discover that the AKS resources are excluded from the secure score recommendations. You need to produce accurate recommendations and update the secure score. Which two actions should you recommend in Microsoft Defender for Cloud? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- AConfigure auto provisioning.
- BAssign regulatory compliance policies.
- CReview the inventory.
- DAdd a workflow automation.
- EEnable Defender plans.
How the community answered
(48 responses)- A77% (37)
- B2% (1)
- C6% (3)
- D15% (7)
Explanation
The correct answers are A (Configure auto provisioning) and E (Enable Defender plans). AKS resources are excluded from secure score when the relevant Defender plan is not enabled-specifically Microsoft Defender for Containers-so enabling the appropriate Defender plan (E) is required to bring AKS workloads into scope. Auto provisioning (A) ensures that required agents and extensions (such as the Defender sensor/DaemonSet for AKS) are automatically deployed across all resources in the subscriptions, ensuring complete coverage without manual intervention. Without both steps, the resources either remain out of scope or lack the necessary monitoring components to generate accurate recommendations.
Topics
Community Discussion
No community discussion yet for this question.