Exam SC-500 Topic 1 Question 29 Discussion
Actual exam question for Microsoft's SC-500 exam
Question #: 29
Topic #: 1
Question #: 29
Topic #: 1
Drag and Drop Question
You have an Azure subscription named Sub1. Sub1 contains 60 virtual machines that run either Window Server or Linux.
All the Windows Server virtual machines host line-of-business (LOB) applications and all the Linux virtual machines host backend databases.
You need to enable malware protection for the virtual machines.
Which Microsoft Defender for Cloud plan should you enable for each type of virtual machine? To answer, drag the appropriate plans to the correct virtual machine types. Each plan may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

You have an Azure subscription named Sub1. Sub1 contains 60 virtual machines that run either Window Server or Linux.
All the Windows Server virtual machines host line-of-business (LOB) applications and all the Linux virtual machines host backend databases.
You need to enable malware protection for the virtual machines.
Which Microsoft Defender for Cloud plan should you enable for each type of virtual machine? To answer, drag the appropriate plans to the correct virtual machine types. Each plan may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Suggested Answer:

Explanation:
Box 1: Microsoft Defender for Servers
Windows Server VMs (LOB Applications): Microsoft Defender for Servers (Plan 1 or Plan 2). This plan provides advanced malware protection, endpoint detection and response (EDR) via Microsoft Defender for Endpoint, and security posture management.
Box 2: Microsoft Defender for Servers
Linux VMs (Backend Databases): Microsoft Defender for Servers (Plan 1 or Plan 2) paired with Microsoft Defender for Azure Cosmos DB or Microsoft Defender for SQL (depending on your specific database type). While Defender for Servers secures the underlying Linux operating system against malware, a database-specific Defender plan is required to protect the database layer from SQL injections, data exfiltration, and anomalous access.
Incorrect:
Defender for Databases:
Protects PaaS, Not VMs: The Microsoft Defender for Databases plan (such as Defender for Azure SQL or Defender for Open-source Relational Databases) is designed specifically for Azure PaaS (Platform as a Service) database solutions.
Reference:
https://learn.microsoft.com/it-it/azure/defender-for-cloud/tutorial-enable-servers-plan
by Webster at Aug 26, 2026, 02:47 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).