Your company has on-premises servers running Windows Server 2019 that are not connected to Azure. You want to monitor their security posture and include them in your Secure Score. What should you do?

Use Azure Migrate to replicate the servers to Azure.

Export the server inventory to Azure and import it into Defender for Cloud.

Create a site-to-site VPN and add the servers to an Azure VNet.

Install Azure Arc agents on the servers and enable Defender for Cloud on the Arc-enabled resources.

You need to generate a weekly report of all Azure VMs that have the recommendation 'Endpoint protection should be installed' showing as 'Unhealthy'. You want to include the VM's resource group and subscription. What is the most efficient way to get this data?

Use the Inventory page in Defender for Cloud and apply a filter for the recommendation.

Use the Secure Score page and click on the recommendation to see the affected resources.

Query Azure Resource Graph for all VMs and check their endpoint protection status manually.

Create a custom standard that includes endpoint protection.

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 2

Manage Security Posture by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 10)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

30–35%of the exam

Questions 46–47

46application · medium
Your company has on-premises servers running Windows Server 2019 that are not connected to Azure. You want to monitor their security posture and include them in your Secure Score. What should you do?
Select an answer first
47application · medium
You need to generate a weekly report of all Azure VMs that have the recommendation 'Endpoint protection should be installed' showing as 'Unhealthy'. You want to include the VM's resource group and subscription. What is the most efficient way to get this data?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Manage Security Posture by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 10)

Questions 46–47

Your company has on-premises servers running Windows Server 2019 that are not connected to Azure. You want to monitor their security posture and include them in your Secure Score. What should you do?

You need to generate a weekly report of all Azure VMs that have the recommendation 'Endpoint protection should be installed' showing as 'Unhealthy'. You want to include the VM's resource group and subscription. What is the most efficient way to get this data?

Keep studying — Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel