Using malware scanning in Defender for Storage to detect threats in uploaded blobs

Design solutions for security posture management in hybrid and multicloud environments

Answer Correct answer: D — Defender for Storage malware scanning detects malware in files uploaded to Blob Storage.

You have an Azure subscription that contains multiple Azure Blob Storage accounts. You need to recommend a solution to detect threats in files after the files are uploaded to a blob container. What should you include in the recommendation?

sensitive data threat detection in Microsoft Defender for Storage
runtime threat protection in Microsoft Defender for Containers
vulnerability assessment in Microsoft Defender for Containers
malware scanning in Microsoft Defender for Storage Correct Answer

defender for storage malware scanning blob upload threat detection azure storage security

Community Votes

100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

Defender for Storage malware scanning targets files in Blob Storage and detects malware on upload; Defender for Containers is for container images/workloads, not blob files, and sensitive-data threat detection finds exposure, not malware.

To detect threats in files after they are uploaded to a blob container, use malware scanning in Microsoft Defender for Storage, which scans uploaded blobs for malware.

Choosing sensitive data threat detection (A) — it prioritizes alerts by data sensitivity but does not scan files for malware the way malware scanning does.

Community Discussion (4 comments)

424ede1 👍 2 Selected: D

Malware scanning improves the security of your Azure Storage accounts by detecting and mitigating malware threats. After uploading the blob --> on-demand malware scanning. https://learn.microsoft.com/en-us/azure/defender-for-cloud/introduction-malware-scanning

sweetykaur 👍 1 Selected: A

A. sensitive data threat detection in Microsoft Defender for Storage Sensitive data threat detection in Microsoft Defender for Storage helps identify and prioritize security alerts based on the sensitivity of the data at risk. It enhances the protection of sensitive data by detecting exposure events and suspicious activities on resources containing sensitive dat

Ali96 👍 3 Selected: D

D. Malware scanning in Microsoft Defender for Storage This feature specifically targets files in Blob Storage and helps with detecting and mitigating potential security risks related to malware.

676ae1a 👍 2 Selected: D

Respuesta correcta

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

Microsoft Defender for Storage includes malware scanning that detects and mitigates malware in files uploaded to Blob Storage, which is exactly the requirement to detect threats in files after upload.

Why the Other Options Are Wrong

Runtime threat protection (B) and vulnerability assessment (C) in Defender for Containers protect container images and workloads, not files in Blob Storage. Sensitive data threat detection (A) identifies exposure of sensitive data but does not scan for malware.

Community Comment Notes

The community favored D (88 votes). Comments cite the malware-scanning introduction page confirming on-demand scanning of uploaded blobs; a minority (A, 12 votes) suggested sensitive-data threat detection.

Official Reference

https://learn.microsoft.com/en-us/azure/defender-for-cloud/introduction-malware-scanning

Related Analysis

Practice All SC-100 Questions

Access 110 questions with complete answers and detailed explanations.

View Full SC-100 Practice Test →

← Back to SC-100 Study Guide