You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have a virtual machine named Server1 that runs Windows Server 2022 and is hosted in Amazon Web Services (AWS). You…

The correct answer is C. the Azure Arc agent. To manage a non-Azure resource (such as an AWS EC2 VM) with Microsoft Defender for Cloud, the machine must first be onboarded to Azure Arc. The Azure Arc agent (Azure Connected Machine agent) extends Azure's management plane to machines outside Azure, including those in AWS or…

Submitted by paula_co· Apr 18, 2026Manage threat mitigation using Microsoft Defender for Cloud

Question

You have an Azure subscription that has Microsoft Defender for Cloud enabled. You have a virtual machine named Server1 that runs Windows Server 2022 and is hosted in Amazon Web Services (AWS). You need to collect logs and resolve vulnerabilities for Server1 by using Defender for Cloud. What should you install first on Server1?

Options

Athe Microsoft Monitoring Agent
Bthe Azure Monitor agent
Cthe Azure Arc agent
Dthe Azure Pipelines agent

How the community answered

(22 responses)

A
14% (3)
B
5% (1)
C
73% (16)
D
9% (2)

Explanation

To manage a non-Azure resource (such as an AWS EC2 VM) with Microsoft Defender for Cloud, the machine must first be onboarded to Azure Arc. The Azure Arc agent (Azure Connected Machine agent) extends Azure's management plane to machines outside Azure, including those in AWS or on-premises. Without Azure Arc, Defender for Cloud has no visibility or control over the external VM. Once Arc is installed, you can then deploy the Azure Monitor Agent and enable Defender plans. The Azure Pipelines agent is for CI/CD, and the Microsoft Monitoring Agent (MMA), while used in some scenarios, is not the first required step for modern Arc-based onboarding.

Topics

#Azure Arc#Defender for Cloud#Hybrid cloud security#AWS integration

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice