Q3 RBAC Domain 4 · 20–25% of exam

Which Azure Defender plan protects Azure Container Registry images by scanning them for vulnerabilities?

  1. A Defender for Servers
  2. B Defender for Containers (correct answer)
  3. C Defender for Key Vault
  4. D Defender for App Service

Shortcut: Microsoft Defender for Containers scans ACR images on push and periodically re-scans stored images for known CVEs, providing vulnerability reports and recommendations in Defender for Cloud.