Question

A retail company runs workloads across Azure, AWS, and on-premises data centers. The security architect must build a unified view that not only inventories internet-facing assets discovered from the outside (including forgotten domains and shadow IT) but also correlates those findings with internally known assets and their relationships to model realistic attack paths an adversary could traverse toward critical assets. The team wants to prioritize remediation based on how exposed critical assets truly are, combining external discovery with internal context. Which combination of Microsoft capabilities best meets these requirements?

Accepted Answer

Use Microsoft Security Exposure Management to unify internal asset context and attack path analysis, and integrate Defender EASM discovery data as an external attack surface data source feeding the exposure graph.

Answer

Use Defender EASM alone, relying solely on its outside-in discovery to enumerate and rank all internet-facing and internal assets.

Answer

Use Defender for Cloud Secure Score exclusively, since its control recommendations already reflect external exposure and attack path prioritization.

Answer

Deploy Azure Arc on all servers and use Machine Configuration baselines to enumerate internet-facing assets and calculate attack paths.