Microsoft Cybersecurity Architect — Question 74

You have an Azure subscription.

You have a subscription to a third-party cloud provider. The subscription contains 100 virtual machines.

You manage cloud security for both subscriptions from the Azure subscription.

You need to recommend a solution to validate the security posture of the virtual machines.

Which two services should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

Answer options

• A. Microsoft Sentinel
• B. Azure Arc
• C. Microsoft Defender for Cloud
• D. Azure Lighthouse
• E. Microsoft Defender for Endpoint

Correct answer: B, C

Explanation

The correct answers are Azure Arc and Microsoft Defender for Cloud because they work together to extend Azure security management capabilities to resources outside of Azure, such as those on a third-party platform. Microsoft Sentinel focuses on security information and event management, while Azure Lighthouse is intended for managing multiple Azure tenants, neither of which directly validate security posture for virtual machines.