Practice question 104 of 180 · medium
A session-host VM appears in Defender inventory as Can be onboarded. Azure Monitor Agent is installed, but the Defender portal has no sensor telemetry from it after the expected reporting window. What should be verified?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Whether Defender for Endpoint onboarding, sensor health, and required outbound connectivity are functioning.
Cloud inventory discovery and Azure Monitor Agent do not establish Defender for Endpoint onboarding. Verify the actual Defender sensor/extension and its reporting path. Option explanations: A. Whether Desktop Virtualization User is assigned at subscription scope.: AVD application entitlement is separate from endpoint sensor onboarding. B. Whether Azure Monitor diagnostic settings alone can be used as the Defender sensor.: Monitor diagnostics do not replace the Defender for Endpoint sensor. C. Whether an additional local administrator account removes the onboarding requirement.: Local administrative accounts neither eliminate onboarding nor demonstrate protection telemetry. D. Whether Defender for Endpoint onboarding, sensor health, and required outbound connectivity are functioning.: These checks address the missing endpoint reporting despite resource discovery. Sources: Defender for Endpoint / Vulnerability Management integration with Defender for Cloud — https://learn.microsoft.com/en-us/azure/defender-for-cloud/integration-defender-for-endpoint
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.