Configuring Windows Server Hybrid Advanced Services — Question 6

You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You have 50 Azure virtual machines that run Windows Server.
You need to ensure that any security exploits detected on the virtual machines are forwarded to Defender for Cloud.
Which extension should you enable on the virtual machines?

Answer options

• A. Vulnerability assessment for machines
• B. Microsoft Dependency agent
• C. Log Analytics agent for Azure VMs
• D. Guest Configuration agent

Correct answer: A

Explanation

The correct answer is A, as the Vulnerability assessment for machines extension is specifically designed to identify security vulnerabilities and report them to Microsoft Defender for Cloud. The other options do not serve the same purpose; for example, the Microsoft Dependency agent is used for monitoring dependencies, while the Log Analytics agent is primarily for collecting logs, and the Guest Configuration agent focuses on compliance settings.