Microsoft Defender for Cloud
😟 THE PROBLEM
300 resources across two clouds, and nobody knows which ones are misconfigured.
😊 THE SOLUTION
Use Microsoft Defender for Cloud for posture and threat protection.
- No view of security weaknesses✓ Secure score and recommendations
- Attacks go unnoticed✓ Threat detection alerts
- Several clouds to watch✓ Azure, AWS, GCP and on-premises
Quick answer
Microsoft Defender for Cloud is a monitoring tool for security posture management and threat protection. It assesses your resources against security best practices, shows a secure score with recommendations to fix issues, and detects and alerts on threats. It protects Azure, on-premises (through Azure Arc) and other clouds such as AWS and Google Cloud.
Exam objective: 2.4.8 Describe the purpose of Microsoft Defender for Cloud. (Skills measured as of July 20, 2026)
Start with a question
You have 300 cloud resources. Which ones have a security hole right now?
You’d never find them by hand. Defender for Cloud checks them continuously and tells you.
Explain it like I’m 10
The technical explanation
- Posture management: continuous assessment, secure score, recommendations, regulatory compliance dashboard.
- Workload protection: Defender plans for servers, containers, storage, databases, App Service, Key Vault and more, with threat alerts.
- Coverage: Azure, hybrid via Azure Arc, and multi-cloud via AWS and GCP connectors.
Real-world business scenario
A SaaS company on Azure and AWS
- The problem
- The security team had no single view of misconfigurations across two clouds.
- What they used
- Microsoft Defender for Cloud with AWS connectors and Defender plans for servers and containers.
- Why that choice
- One dashboard, one secure score, and alerts across both clouds.
- The result
- Secure score rose month by month as teams fixed recommendations.
When to use it and when not to
✓ Use it when…
- On every subscription to see and improve security posture.
- Across hybrid and multi-cloud estates.
✕ Think twice when…
- Ignoring the recommendations once enabled.
Interview preparation
Say your answer out loud first, then open the model answer. Interviewers care more about your reasoning than the exact words.
Beginner What is Microsoft Defender for Cloud?
Model answer
A security service that checks my cloud resources for weaknesses, gives me a secure score and recommendations to fix them, and alerts me to attacks.
Intermediate What environments can Defender for Cloud protect?
Model answer
Azure natively, on-premises and other datacenters through Azure Arc, and other public clouds such as Amazon Web Services and Google Cloud Platform through connectors.
Experienced developer How would you use Defender for Cloud in a security programme?
Model answer
Track secure score as a KPI, assign recommendations to owners, use the regulatory compliance dashboard for standards such as ISO 27001 or PCI DSS, enable Defender plans for critical workloads, and stream alerts to Microsoft Sentinel. Use Azure Policy to enforce the fixes so issues don't come back.
Test yourself with exercises
3 original practice questions in the AZ-900 style. Pick your answers, then check them. You will see why each option is right or wrong. Score 75% or more and this topic is marked complete.
Quick revision
Key points
- Defender for Cloud = posture management + threat protection.
- Secure score and recommendations show what to fix.
- Protects Azure, on-premises (Arc) and multi-cloud (AWS, GCP).
- Defender plans add workload threat protection.
Important terminology
- Secure score
- A measurement of your security posture; higher is better.
- Cloud security posture management (CSPM)
- Continuously assessing configuration against best practices.
- Cloud workload protection (CWP)
- Threat detection for workloads such as servers, containers, storage and databases (Defender plans).
Common mistakes
- Thinking it only works for Azure resources.
Exam tips
- "Secure score and security recommendations across hybrid and multi-cloud" = Defender for Cloud.
Five quick revision questions
-
1.What does secure score measure?Show
Your security posture.
-
2.Can Defender for Cloud protect AWS resources?Show
Yes.
-
3.How does it protect on-premises servers?Show
Through Azure Arc.
-
4.What are the two main capabilities?Show
Security posture management and threat protection.
-
5.What does it give you to improve security?Show
Recommendations.
Official references
Finished this lesson? Tick it off. Your progress is saved in this browser.
Next up: Factors That Affect Azure Costs