Exam SC-500 Topic 1 Question 163 Discussion

Configure the native cloud connector first. Defender for Cloud uses its native AWS connector to establish the integration between an AWS account and Microsoft Defender for Cloud. During onboarding, the connector can be configured for Defender for Servers and automatic provisioning of the components required to protect EC2 instances.
Microsoft documents that AWS EC2 instances protected by Defender for Servers use Azure Arc-enabled servers and that automatic provisioning is recommended. The AWS integration uses AWS Systems Manager (SSM) to install Azure Arc on eligible EC2 instances, after which Defender for Cloud can deploy required security extensions such as Microsoft Defender for Endpoint. Microsoft Learn Therefore, the Azure Connected Machine agent is ultimately involved, but manually configuring that agent is not the first step when the requirement is to protect newly created instances automatically. The multicloud
/native connector handles the Arc onboarding workflow.
The classic connector represents the older AWS integration architecture and isn ' t the appropriate current onboarding model. The Azure Monitor Agent is designed for monitoring and telemetry collection rather than establishing automatic Defender for Servers onboarding for AWS.
Correct answer: A. the native cloud connector