nerdexam
Microsoft

SC-200 · Question #41

You have an Azure subscription that contains the resources shown in the following table. You plan to enable Azure Defender for the subscription. Which resources can be protected by using Azure…

The correct answer is C. VM1, storage1, and Vault1 only. Azure Defender, now Microsoft Defender for Cloud, provides specific protection plans for Virtual Machines, Storage Accounts, and Key Vaults, but does not offer direct protection for Virtual Networks.

Submitted by paula_co· Apr 18, 2026Manage threat mitigation using Microsoft Defender for Cloud

Question

You have an Azure subscription that contains the resources shown in the following table. You plan to enable Azure Defender for the subscription. Which resources can be protected by using Azure Defender?

Exhibit

SC-200 question #41 exhibit

Options

  • AVM1, VNET1, storage1, and Vault1
  • BVM1, VNET1, and storage1 only
  • CVM1, storage1, and Vault1 only
  • DVM1 and VNET1 only
  • EVM1 and storage1 only

How the community answered

(64 responses)
  • A
    3% (2)
  • C
    94% (60)
  • D
    2% (1)
  • E
    2% (1)

Why each option

Azure Defender, now Microsoft Defender for Cloud, provides specific protection plans for Virtual Machines, Storage Accounts, and Key Vaults, but does not offer direct protection for Virtual Networks.

AVM1, VNET1, storage1, and Vault1

Azure Defender does not directly protect Virtual Networks (VNET1) as a distinct resource type with a dedicated Defender plan.

BVM1, VNET1, and storage1 only

Choice B is incorrect because Azure Defender also protects Key Vaults (Vault1) in addition to virtual machines and storage accounts.

CVM1, storage1, and Vault1 onlyCorrect

Microsoft Defender for Cloud offers dedicated protection plans such as Defender for Servers, Defender for Storage, and Defender for Key Vault, which provide advanced threat protection and security monitoring for Azure Virtual Machines (VM1), Storage accounts (storage1), and Key Vaults (Vault1), respectively.

DVM1 and VNET1 only

Choice D is incorrect because Azure Defender also provides protection for storage accounts (storage1) and Key Vaults (Vault1), not just virtual machines and virtual networks.

EVM1 and storage1 only

Choice E is incorrect because Azure Defender also protects Key Vaults (Vault1) in addition to virtual machines and storage accounts.

Concept tested: Microsoft Defender for Cloud protected resource types

Source: https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-cloud-introduction#what-can-defender-for-cloud-protect

Topics

#Microsoft Defender for Cloud#Azure Defender capabilities#Resource protection#Supported resources

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SC-200 Practice