You manage MG1 with subscription Sub1 and the shown resources. From the Azure portal, on which two resources can you enable Microsoft Defender for Servers? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: Workspace1, Sub1.
Why this is the answer
Microsoft Defender for Servers is enabled at either the subscription level or the Log Analytics workspace level. Enabling it at the subscription level applies the protection to all supported resources within that subscription. Enabling it at the Log Analytics workspace level applies protection to all supported machines reporting to that specific workspace, regardless of their subscription. Therefore, Sub1 and Workspace1 are the correct choices. RG1 (resource group), MG1 (management group), VNet1 (virtual network), and VM1 (virtual machine) are not direct scopes for enabling Defender for Servers; protection for these resources is inherited from the subscription or workspace they belong to.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed