Using malware scanning in Defender for Storage to detect threats in uploaded blobs

SC-100 By islever Editorial Last updated Sep 25, 2026

Design solutions for security posture management in hybrid and multicloud environments

Short answer

D Defender for Storage malware scanning detects malware in files uploaded to Blob Storage.

Question

You have an Azure subscription that contains multiple Azure Blob Storage accounts. You need to recommend a solution to detect threats in files after the files are uploaded to a blob container. What should you include in the recommendation?

sensitive data threat detection in Microsoft Defender for Storage
runtime threat protection in Microsoft Defender for Containers
vulnerability assessment in Microsoft Defender for Containers
malware scanning in Microsoft Defender for Storage Correct Answer

Key Takeaways

Defender for Storage malware scanning targets files in Blob Storage and detects malware on upload; Defender for Containers is for container images/workloads, not blob files, and sensitive-data threat detection finds exposure, not malware.

To detect threats in files after they are uploaded to a blob container, use malware scanning in Microsoft Defender for Storage, which scans uploaded blobs for malware.

Common mistake: Choosing sensitive data threat detection (A) — it prioritizes alerts by data sensitivity but does not scan files for malware the way malware scanning does.

Expert Analysis

Why the Answer Is Correct

Microsoft Defender for Storage includes malware scanning that detects and mitigates malware in files uploaded to Blob Storage, which is exactly the requirement to detect threats in files after upload.

Why the Other Options Are Wrong

Runtime threat protection (B) and vulnerability assessment (C) in Defender for Containers protect container images and workloads, not files in Blob Storage. Sensitive data threat detection (A) identifies exposure of sensitive data but does not scan for malware.

Community Comment Notes

The community favored D (88 votes). Comments cite the malware-scanning introduction page confirming on-demand scanning of uploaded blobs; a minority (A, 12 votes) suggested sensitive-data threat detection.

Official Reference

https://learn.microsoft.com/en-us/azure/defender-for-cloud/introduction-malware-scanning

This link opens the official vendor documentation in a new tab.

Community Votes

100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

Ali96 👍 3 Answered D

D. Malware scanning in Microsoft Defender for Storage This feature specifically targets files in Blob Storage and helps with detecting and mitigating potential security risks related to malware.
424ede1 👍 2 Answered D

Malware scanning improves the security of your Azure Storage accounts by detecting and mitigating malware threats. After uploading the blob --> on-demand malware scanning. https://learn.microsoft.com/en-us/azure/defender-for-cloud/introduction-malware-scanning
sweetykaur 👍 1 Answered A

A. sensitive data threat detection in Microsoft Defender for Storage Sensitive data threat detection in Microsoft Defender for Storage helps identify and prioritize security alerts based on the sensitivity of the data at risk. It enhances the protection of sensitive data by detecting exposure events and suspicious activities on resources containing sensitive dat
676ae1a 👍 2 Answered D

Respuesta correcta

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All SC-100 Questions

Access 110 questions with complete answers and detailed explanations.

View Full SC-100 Practice Test →

← Back to SC-100 Study Guide