A team remediates several Defender for Cloud recommendations and the subscription Secure Score increases. A Defender endpoint alert on one host remains unresolved. What should the team do?

✓ Correct answer

• Verify the remediated resource states and continue investigating the active endpoint alert.

Secure Score measures applicable posture recommendations; it is not proof that active threats are absent. Verify remediation and continue endpoint investigation using functioning sensor telemetry. Option explanations: A. Close the endpoint alert because improved Secure Score proves that no threat remains.: Posture improvement does not resolve or disprove an active endpoint detection. B. Disable the sensor so the resource's recommendation status is easier to maintain.: Disabling telemetry weakens verification and investigation instead of resolving the issue. C. Verify the remediated resource states and continue investigating the active endpoint alert.: This preserves the distinction between configuration posture and threat detection. D. Replace endpoint investigation with the AVD application-group assignment report.: Application entitlement reports do not provide endpoint threat investigation. Sources: Security recommendations for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/security-recommendations; Defender for Endpoint / Vulnerability Management integration with Defender for Cloud — https://learn.microsoft.com/en-us/azure/defender-for-cloud/integration-defender-for-endpoint

Read the source reference