Microsoft Defender for Cloud
SC-900 · Lesson 8 of 15 · 58:16
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: Microsoft Defender for Cloud as a cloud-native application protection platform (DevSecOps, posture management, workload protection, AI security), security policies, the Microsoft cloud security benchmark and regulatory standards, recommendations, the secure score, Foundational CSPM and the Defender CSPM plan (attack paths, cloud security explorer, governance), and Defender plans for servers, storage, databases, containers, APIs and AI services. From October 27, 2026, the Microsoft Defender portal is its recommended experience, and Foundational CSPM must be turned on for new Azure subscriptions. Includes three original practice questions.
Preview the topics
- A company must show auditors how its Azure resources measure up against PCI DSS, control by control. Where does it look in Defender for Cloud?
- A security team wants to see how an attacker could chain an internet-exposed VM with that machine’s access to a storage account full of customer data. What does it need?
- A company runs an app on Azure OpenAI, and wants alerts on prompt injection attempts, or attempts to pull sensitive data out through the model’s answers. Which Defender plan fits?