A consultant wants every Microsoft Defender for Cloud plan enabled “just in case,” including products outside the January 22, 2026 AZ-500 skill list. Which plans should the Azure security engineer prioritize from the lock-lab workload mix?
Select an answer to reveal the explanation.
Short Explanation
Don’t flip every toggle in the catalog. Match the estate: Servers for the VMs, Databases for the SQL and Postgres boxes, Storage for the blob accounts—and leave the brochure extras on the shelf.
Full Explanation
AZ-500 expects security engineers to enable cloud workload protection plans that match running workloads, with Defender for Servers, Defender for Databases, and Defender for Storage as first-class named plans. Enabling unrelated or out-of-scope Defender products “just in case,” or substituting Security Copilot, does not satisfy plan selection by workload.