Microsoft SC-500 Dumps Questions Answers

Virtual machine type

Plan

Windows Server

Microsoft Defender for Servers

Linux

Microsoft Defender for Servers

Microsoft Defender for Servers is the correct plan for both the Windows Server and Linux virtual machines because the requirement is to provide malware protection at the virtual-machine operating-system level. Defender for Servers protects both Windows and Linux VMs and integrates with Microsoft Defender for Endpoint to provide endpoint protection, including antimalware capabilities. Microsoft states that Defender for Servers supports Windows and Linux virtual machines across Azure and other supported environments.

For Linux systems, Defender for Servers deploys the Defender for Endpoint component that includes antimalware functionality. For Windows Server, Defender Antivirus is integrated with Defender for Endpoint and provides malware protection. In addition, Defender for Servers Plan 2 supports agentless malware scanning, which scans VM disks for malicious files without installing an additional scanning agent.

The fact that the Linux machines host databases does not make Microsoft Defender for Databases the correct answer. Defender for Databases protects supported database workloads against database-specific threats; it does not replace VM-level malware protection.

The SC-500 study guide places onboarding and configuring VMs with Defender for Servers under the Secure compute objective.

A Logic Apps Request trigger can be invoked through different authorization mechanisms. If all supported methods are enabled but only OAuth-based requests should be accepted, disabling shared access signature authentication removes the non-OAuth shared-secret URL model. Secure Inputs and Secure Outputs protect run-history data but do not control request authentication. API Management could enforce auth but adds cost and complexity, which the requirement says to minimize. The exam objective emphasizes practical identity enforcement rather than cosmetic configuration. A valid answer must identify who authenticates, what permission is granted, where the scope is applied, and whether the method continues to work without passwords or secrets. That is why the selected answer is preferred over broader administrative roles or unrelated access settings. The result is a direct exam-style implementation choice: it changes the required security behavior without relying on unrelated monitoring, manual cleanup, or excessive privilege. Official Microsoft source/topic: SC-500 Study Guide > Logic Apps security; Microsoft Learn > Request trigger SAS and OAuth authentication.

==============================================================

Microsoft Defender for Cloud provides native multicloud connectors for Amazon Web Services (AWS) and Google Cloud Platform (GCP). Therefore, both the AWS account and GCP environment can be connected to Defender for Cloud for cloud security posture management and supported workload-protection functionality. Microsoft ' s current multicloud support matrix explicitly covers Azure, AWS, and GCP and lists Defender CSPM, Defender for Servers, Defender for Containers, and several other capabilities across AWS and GCP. Microsoft Learn

For GCP, Defender for Cloud provides a dedicated onboarding workflow under Environment settings > Add environment > Google Cloud Platform, allowing projects or organizations to be connected and assessed. AWS has an equivalent native cloud connector mechanism. Microsoft Learn

Alibaba Cloud is not one of the native cloud environments that can be added through Defender for Cloud ' s multicloud connector model. Microsoft ' s documented supported multicloud environments are AWS and GCP in addition to Azure. Individual servers hosted elsewhere could potentially be onboarded through other mechanisms such as Azure Arc where supported, but that is different from connecting an Alibaba Cloud account as a cloud environment.

Therefore, the supported cloud accounts in the question are:

AWS and GCP only.

===============