Answer-first summary for fast verification
Answer: adaptive application controls in Defender for Cloud
Adaptive application controls in Microsoft Defender for Cloud are an intelligent and automated solution for defining allowlists of known-safe applications for your virtual machines. Often, organizations have collections of machines that routinely run the same processes. Microsoft Defender for Cloud uses machine learning to analyze the applications running on your machines and create a list of the known-safe software. When you've enabled and configured adaptive application controls, you'll get security alerts if any application runs other than the ones you've defined as safe. This ensures that only authorized applications can run on the virtual machines, and any unauthorized application will be blocked automatically until an administrator authorizes the application.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
As an IT administrator managing a Microsoft 365 subscription alongside an Azure subscription, you have ensured that both Microsoft 365 Defender and Microsoft Defender for Cloud are enabled for enhanced security. Your Azure subscription includes 50 virtual machines, each operating on Windows Server 2019 and running a variety of different applications. To elevate security measures, you are tasked with recommending a solution that guarantees only authorized applications can execute on these virtual machines. In the scenario where an unauthorized application tries to run or get installed, the solution must automatically block the application until it receives approval from an administrator. Which security control would you recommend implementing to achieve this?
A
adaptive application controls in Defender for Cloud
B
app protection policies in Microsoft Endpoint Manager
C
app discovery anomaly detection policies in Microsoft Defender for Cloud Apps
D
Azure Security Benchmark compliance controls in Defender for Cloud
No comments yet.