mediumMultiple SelectObjective-mapped
SC-200 Practice Question: Resource types are supported by Microsoft…
Which of the following resource types are supported by Microsoft Defender for Cloud's workload protection plans? (Select all that apply.) (Choose 3.)
⚠ Common exam trap
Watch out — candidates often assume all Azure resource types are covered by the same workload protection plan, but Microsoft specifically scopes these plans to compute, data, and hybrid workloads, excluding serverless or integration services like Logic Apps which require separate Defender plans.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure virtual machines
Microsoft Defender for Cloud's workload protection plans support Azure virtual machines by providing integrated threat detection and advanced security features like just-in-time VM access, file integrity monitoring, and vulnerability assessments. These capabilities leverage the Microsoft Monitoring Agent or Azure Monitor Agent to analyze security events and detect suspicious activities within the VM's operating system and network traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure virtual machines
Why this is correct
Microsoft Defender for Cloud's Defender for Servers plan natively integrates with Azure virtual machines, offering a comprehensive suite of protections that include file integrity monitoring, just-in-time VM access, adaptive application controls, and integrated threat detection powered by Microsoft Defender for Endpoint. The plan also facilitates vulnerability assessment by continuously scanning VM operating systems for missing patches and misconfigurations, making Azure VMs a primary and fully supported workload type.
- ✓
Azure SQL databases
Why this is correct
Azure SQL databases are protected by the dedicated Defender for SQL plan within Defender for Cloud, which delivers advanced threat protection that surfaces anomalous activities such as SQL injection attempts, brute-force attacks, and unusual access patterns. This plan also includes vulnerability assessment that regularly scans database configurations and permissions, plus data discovery and classification to help track sensitive data. Consequently, Azure SQL databases are explicitly recognized as a supported resource type for workload protection.
- ✓
On-premises servers connected via Azure Arc
Why this is correct
On-premises servers connected to Azure are supported through Defender for Servers via Azure Arc-enabled servers, which require the Azure Arc agent to bridge the on-premises machine into Azure's management plane. Once onboarded, these hybrid servers receive the same supported workload protections as Azure VMs, including threat detection, vulnerability assessment, and just-in-time access, ensuring consistent security monitoring across on-premises and cloud environments. This capability makes Azure Arc-connected servers a first-class resource type for Defender for Cloud.
- ✗
Azure Logic Apps
Why it's wrong here
Azure Logic Apps is an integration platform-as-a-service for orchestrating workflows, not a compute workload like virtual machines or databases that require agent-based or database-level threat monitoring. While Defender for Cloud does offer workload protections for App Service environments, storage accounts, and SQL, it does not include Logic Apps in its supported workload protection plans; thus, Logic Apps is not a valid choice for this capability.
Go deeper
Related to this question
About these practice questions
This SC-200 question is part of Courseiva's 209-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-200 exam.