Finance wants Microsoft Defender for Storage only on production lock-photo accounts, not on every account in the subscription. How should the Azure security engineer configure that?
Select an answer to reveal the explanation.
Short Explanation
Finance wants production only—use the product’s plan settings and per-resource knobs, not a homemade delete script. Configure the named plan; don’t only slam the subscription default and walk away.
Full Explanation
Configuring Microsoft Defender for Storage includes using Defender for Cloud plan settings and per-resource configuration options documented for the plan so protection can target production accounts when that is the requirement. Unsupported custom scripts, Defender for Cloud Apps Conditional Access, or disabling the plan subscription-wide are not the correct configure-the-named-plan approach.