Knowledge check

1.

A security engineer enables Defender for Servers Plan 2 on a subscription. Which capability is automatically enabled by default that isn't available in Plan 1?

Microsoft Defender for Endpoint integration and automatic agent provisioning

Agent-based vulnerability assessment using Defender Vulnerability Management

Agentless scanning for machines

2.

Agentless machine scanning in Defender for Servers Plan 2 runs on what schedule, and what happens to VMs that are powered off during a scan?

Continuously in real time; powered-off VMs are scanned using their last known disk state

Once every 24 hours; powered-off VMs aren't scanned during that cycle

Once per week; powered-off VMs are queued and scanned when they next start

3.

A VM has both the Defender for Endpoint agent (enabling agent-based vulnerability scanning) and agentless scanning enabled. Which vulnerability assessment results are displayed in Defender for Cloud?

Results from agentless scanning only, because it provides wider coverage across more disk types

Results from agent-based scanning only, because it provides better freshness

Results from both sources, merged and deduplicated into a single unified view

Check your knowledge

Feedback