nerdexam
Microsoft

SC-200 · Question #63

You have an Azure subscription that contains a Log Analytics workspace. You need to enable just-in-time (JIT) VM access and network detections for Azure resources. Where should you enable Azure…

The correct answer is A. at the subscription level. Enabling it at the workspace level doesn't enable just-in-time VM access, adaptive application controls, and network detections for Azure resources. In addition, the only Microsoft Defender plans available at the workspace level are Microsoft Defender for servers and Microsoft…

Submitted by kwame.gh· Apr 18, 2026Manage threat mitigation using Microsoft Defender for Cloud

Question

You have an Azure subscription that contains a Log Analytics workspace. You need to enable just-in-time (JIT) VM access and network detections for Azure resources. Where should you enable Azure Defender?

Options

  • Aat the subscription level
  • Bat the workspace level
  • Cat the resource level

How the community answered

(34 responses)
  • A
    91% (31)
  • B
    3% (1)
  • C
    6% (2)

Explanation

Enabling it at the workspace level doesn't enable just-in-time VM access, adaptive application controls, and network detections for Azure resources. In addition, the only Microsoft Defender plans available at the workspace level are Microsoft Defender for servers and Microsoft Defender for SQL servers on machines.

Topics

#Microsoft Defender for Cloud#Azure Defender#Just-in-Time (JIT) VM access#Subscription level

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice