Q10 RBAC Domain 4 · 20–25% of exam

A team configures Microsoft Defender for Cloud's Defender for DevOps. What does this protect?

  1. A Production Azure workloads
  2. B Source code repositories and CI/CD pipelines (GitHub, Azure DevOps) scanning for IaC misconfigurations and exposed secrets (correct answer)
  3. C Kubernetes cluster runtime
  4. D Azure Container Registry images

Shortcut: Defender for DevOps integrates with GitHub and Azure DevOps to scan IaC templates (Bicep, Terraform, ARM) for security misconfigurations and detect exposed secrets in repositories and pipelines.