Microsoft Defender for Cloud protects cloud resources in Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP) and on-premises servers. It does two different jobs, and the exam expects you to keep them apart. Cloud security posture management (CSPM) looks for weaknesses in how resources are configured, such as a storage account open to the internet or a virtual machine (VM) missing updates. Cloud workload protection (the Defender plans) detects active threats against running workloads and raises security alerts. Posture is prevention and hygiene; workload protection is detection.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.