AZ-802 · Security · Security | Secure Windows Server operating system · Hybrid server management · Hybrid server management | Manage Windows Server instances and workloads by using Azure services in a hybrid environment

Practice question 499 of 506 · hard

A non-Azure server appears as an Arc resource. Defender for Servers is enabled for the intended scope, but the security team sees no expected endpoint-protection evidence. What is the most appropriate next verification?

Choose the single best answer.

A.Verify the applicable plan, Defender for Endpoint integration/onboarding, required extensions and service connectivity instead of treating Arc registration as protection proof
B.Review only the Azure resource Activity Log while omitting endpoint sensor and extension connectivity evidence
C.Check only the subscription-level plan switch and assume it proves the server Defender for Endpoint sensor is onboarded and reporting
D.Treat the Arc resource's Connected status alone as proof of complete Defender for Servers protection

Show the answer and explanation

✓ Correct answer

Verify the applicable plan, Defender for Endpoint integration/onboarding, required extensions and service connectivity instead of treating Arc registration as protection proof

Arc registration and a plan switch do not prove endpoint sensor onboarding or reporting. Verify the applicable plan integrations, required extensions and service connectivity. Connected status addresses Arc management; plan selection alone is incomplete; control-plane Activity Log alone does not establish endpoint-protection telemetry.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.