A security engineer wants to use Microsoft Security Copilot to identify attack paths targeting Azure OpenAI resources in the organization's environment. The engineer uses the Security Exposure Management integration within Security Copilot. What does this integration provide?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because the Microsoft Security Exposure Management plugin in Security Copilot provides an AI-assisted, graph-based attack path analysis. It identifies how attackers could chain vulnerabilities, misconfigurations, and identity weaknesses to reach critical assets—including Azure AI resources—and highlights choke points where controls can be applied to break attack paths.
Full explanation below image
Full Explanation
B is correct because the Microsoft Security Exposure Management plugin in Security Copilot provides an AI-assisted, graph-based attack path analysis. It identifies how attackers could chain vulnerabilities, misconfigurations, and identity weaknesses to reach critical assets—including Azure AI resources—and highlights choke points where controls can be applied to break attack paths. A is wrong because real-time network traffic analysis is performed by tools like Azure Network Watcher or Microsoft Sentinel, not Security Exposure Management. C is wrong because Security Exposure Management does not perform active penetration testing; it performs posture-based attack path analysis from telemetry. D is wrong because Azure Policy compliance reporting is surfaced in Defender for Cloud's regulatory compliance dashboard, not through the Exposure Management integration in Security Copilot.