Microsoft Defender for Cloud Flashcards
7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft Defender for Cloud flashcards as text
What does Microsoft Defender for Servers provide?
Answer: Threat detection and advanced defenses for Windows and Linux virtual machines and on-premises servers
Microsoft Defender for Servers provides threat detection, vulnerability assessment, and advanced defenses for Windows and Linux machines in any environment.
What is the purpose of Just-in-Time (JIT) VM access in Microsoft Defender for Cloud?
Answer: To lock down inbound traffic to VMs and open management ports only when access is needed for a limited time
JIT VM access minimizes attack surface by keeping management ports closed and opening them only for approved requests during a defined time window.
What are Adaptive Application Controls in Microsoft Defender for Cloud?
Answer: An intelligent machine learning-based solution that defines allowlists of known-safe applications for machines
Adaptive Application Controls use machine learning to recommend and enforce allowlists of applications that should be permitted to run on specific groups of machines.
What does Microsoft Defender for SQL protect?
Answer: Azure SQL Database, SQL Managed Instance, Azure Synapse Analytics, and SQL Server on machines
Microsoft Defender for SQL covers multiple deployment models including Azure SQL Database, SQL Managed Instance, Synapse Analytics, and SQL Server on any machine.
What is the regulatory compliance dashboard in Microsoft Defender for Cloud used for?
Answer: Showing compliance status mapped against regulatory standards such as PCI DSS, ISO 27001, and SOC 2
The regulatory compliance dashboard maps your current security controls to specific compliance frameworks, showing your compliance posture at a glance.
What does Microsoft Defender for Containers provide?
Answer: Threat protection, vulnerability assessment, and misconfiguration detection for Kubernetes and container environments
Microsoft Defender for Containers provides runtime threat protection, image vulnerability scanning, and misconfiguration detection for Kubernetes environments.
What is Adaptive Network Hardening in Microsoft Defender for Cloud?
Answer: A feature that analyzes network traffic and recommends stricter NSG rules based on actual traffic patterns
Adaptive Network Hardening analyzes actual traffic and threat intelligence to recommend Network Security Group rules that go beyond the current permissive configuration.