Knowledge check

1.

Your organization wants to enable attack path analysis and AI security posture management for Azure OpenAI and Azure AI Foundry workloads. Which Defender for Cloud plan provides these capabilities?

Foundational CSPM

Defender CSPM

Microsoft Defender for Servers

Microsoft Defender for AI Services

2.

Two Azure storage accounts have the same misconfiguration. One stores patient health records and is internet-accessible; the other is a non-internet-accessible development storage account. How does the risk-based Cloud Secure Score model in the Defender portal treat these two findings?

Both findings receive the same risk level because the underlying misconfiguration is identical.

The internet-exposed storage account with sensitive data receives a higher risk level.

Both findings are rated the same because risk level is determined entirely by the MCSB control weight.

Only resources with confirmed sensitive data classifications appear in risk-prioritized recommendations.

3.

During attack path analysis in the Defender portal, you identify a storage account where five separate attack paths converge as they route from internet-exposed virtual machines toward Azure AI services. What term describes this storage account's role in the attack graph?

Entry point

Target asset

Choke point

Vulnerable node

4.

You want to use Cloud Security Explorer to build a custom query for virtual machines with high-severity vulnerabilities that also have network access to Azure AI services. In which portal do you access Cloud Security Explorer?

Microsoft Defender portal (security.microsoft.com)

Azure portal (portal.azure.com)

Microsoft Entra admin center (entra.microsoft.com)

Microsoft Azure Resource Manager

Check your knowledge

Feedback