CCSP Cloud Security Operations Practice Question
A security analyst is configuring Azure Defender for Cloud to protect a hybrid environment. Which THREE resource types can be protected by enabling Azure Defender plans? (Choose three.)
⚠ Common exam trap
Candidates often confuse Azure Defender plans (which protect specific resource types like VMs, databases, and Key Vault) with other Azure security services (like Azure AD Identity Protection or Azure DNS security features), leading them to incorrectly select Azure AD identities or DNS zones as protected resources.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure SQL databases (Defender for Databases)
Azure Defender for Cloud provides integrated security protections for Azure resources. Enabling the 'Defender for Databases' plan specifically protects Azure SQL databases by detecting anomalous activities, SQL injection attempts, and potential vulnerabilities. This plan extends to other database types like Azure SQL Managed Instance and Azure Synapse SQL pools, ensuring comprehensive database security.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure SQL databases (Defender for Databases)
Why this is correct
Defender for Databases covers SQL and other database types.
- ✓
Azure Key Vault (Defender for Key Vault)
Why this is correct
Defender for Key Vault monitors access patterns.
- ✗
Azure AD identities
Why it's wrong here
Azure AD is protected by Azure AD Identity Protection, not Defender for Cloud.
- ✓
Virtual machines (Defender for Servers)
Why this is correct
Defender for Servers protects VMs.
- ✗
Azure DNS zones
Why it's wrong here
DNS zones are not covered by Defender plans.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 964-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.