Free Microsoft SC-500 Exam Dumps November 2026

Microsoft Defender for Cloud provides native multicloud connectors for Amazon Web Services (AWS) and Google Cloud Platform (GCP). Therefore, both the AWS account and GCP environment can be connected to Defender for Cloud for cloud security posture management and supported workload-protection functionality. Microsoft's current multicloud support matrix explicitly covers Azure, AWS, and GCP and lists Defender CSPM, Defender for Servers, Defender for Containers, and several other capabilities across AWS and GCP. Microsoft Learn

For GCP, Defender for Cloud provides a dedicated onboarding workflow under Environment settings > Add environment > Google Cloud Platform, allowing projects or organizations to be connected and assessed. AWS has an equivalent native cloud connector mechanism. Microsoft Learn

Alibaba Cloud is not one of the native cloud environments that can be added through Defender for Cloud's multicloud connector model. Microsoft's documented supported multicloud environments are AWS and GCP in addition to Azure. Individual servers hosted elsewhere could potentially be onboarded through other mechanisms such as Azure Arc where supported, but that is different from connecting an Alibaba Cloud account as a cloud environment.

Therefore, the supported cloud accounts in the question are:

AWS and GCP only.

===============

Vulnerability assessment on virtual machines is the feature that scans machines for known security flaws and misconfigurations. Attack path analysis correlates risk paths after findings exist; it is not the scanner itself. Cloud Security Explorer is an investigation query experience, and MCSB is a security benchmark framework. JIT VM access limits management exposure, not vulnerability discovery. The VM vulnerability assessment capability satisfies the automated scanning requirement. The compute domain tests whether protection is applied before deployment, during runtime, or through posture assessment. The selected answer matches the phase described in the requirement. Detection-only tools are not acceptable when the requirement says prevent, and local installation methods are inferior when Defender for Cloud, Azure Policy, or Azure Machine Configuration can enforce the control centrally. The result is a direct exam-style implementation choice: it changes the required security behavior without relying on unrelated monitoring, manual cleanup, or excessive privilege. Official Microsoft source/topic: SC-500 Study Guide > Defender for Servers settings; Microsoft Learn > vulnerability assessment for machines.

==============================================================