Microsoft Defender for Cloud Flashcards

What is the primary function of Cloud Security Posture Management (CSPM) within Microsoft Defender for Cloud?

Answer: To identify and remediate security misconfigurations across cloud resources.

CSPM is designed to identify and remediate security misconfigurations and vulnerabilities in cloud environments. It provides visibility into the security state of resources and offers recommendations to improve the overall security posture, which is reflected in the secure score.

Which feature of Microsoft Defender for Cloud provides threat detection and protection for services like Azure App Service, Azure SQL, and Azure Storage?

Answer: Cloud Workload Protection (CWP)

Cloud Workload Protection (CWP) extends protection to specific cloud workloads. It provides advanced threat detection and protection capabilities tailored to different types of cloud services, beyond just virtual machines.

An administrator needs to grant a developer temporary access to a specific port on an Azure virtual machine. Which Microsoft Defender for Cloud feature should be used to achieve this securely?

Answer: Just-in-time (JIT) VM access

Just-in-time (JIT) VM access locks down inbound traffic to your Azure VMs, reducing exposure to attacks while providing easy access to connect to VMs when needed. When a user requests access, Defender for Cloud checks permissions and, if approved, configures the Network Security Groups (NSGs) to allow inbound traffic to the requested ports for a limited time.

Your organization needs to demonstrate compliance with the PCI DSS standard for your Azure environment. Which component of Microsoft Defender for Cloud provides a centralized view of your compliance status against this standard?

Answer: Regulatory Compliance Dashboard

The regulatory compliance dashboard in Microsoft Defender for Cloud provides insights into your compliance posture against a wide range of standards and regulations, such as ISO 27001, SOC TSP, and PCI DSS. It maps security recommendations to specific compliance controls.

What is the purpose of the secure score in Microsoft Defender for Cloud?

Answer: To measure and track the security posture of your cloud environment.

The secure score is a numerical representation of your security posture. It is calculated based on security recommendations, and implementing these recommendations improves the score, helping you to track and prioritize security hardening efforts.

Microsoft Defender for Cloud can protect resources in which of the following environments?

Answer: Azure, AWS, Google Cloud, and on-premises

Microsoft Defender for Cloud is a multi-cloud and hybrid-cloud solution. It can protect not only Azure resources but also resources running in other cloud providers like AWS and Google Cloud, as well as on-premises servers, by using Azure Arc.