SC-100 Practice Question 3955

Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: medium
You are designing container security for an Azure Kubernetes Service (AKS) cluster. Which Defender plan provides runtime threat detection, admission control, and agentless vulnerability scanning for containers?

Answer Options

A
Microsoft Defender for Containers
B
Microsoft Defender for Office 365
C
Azure Front Door WAF
D
Microsoft Defender for Identity

Correct Answer

A: Microsoft Defender for Containers

Explanation

Microsoft Defender for Containers provides vulnerability assessments for container registries, admission control policy enforcement, and runtime threat detection on AKS clusters.