Question

A retail company runs workloads across Azure, AWS, and GCP. The security architect must select a Defender for Cloud posture management capability that provides contextual risk analysis — combining vulnerabilities, internet exposure, sensitive data, and lateral movement into prioritized attack paths across all three clouds. The organization already receives the free Foundational CSPM features and multicloud connectors are configured. Which capability must be enabled to meet this requirement?

Accepted Answer

Enable the Defender CSPM (Defender Cloud Security Posture Management) plan to unlock attack path analysis and the cloud security graph

Answer

Rely on the free Foundational CSPM tier, which already includes attack path analysis for all connected clouds

Answer

Enable the Defender for Servers Plan 2 to gain agentless vulnerability scanning and contextual risk correlation

Answer

Assign additional regulatory compliance standards in Defender for Cloud to surface prioritized cross-cloud risks