You have an Azure subscription that uses Microsoft Defender for Cloud. The subscription contains a virtual machine named VM1. VM1 hosts a Docker container that hosts an app named App1. You need to ensure that the configuration of the Docker host meets best practices. The solution must ensure that you are alerted if vulnerabilities are detected. What should you use? Microsoft Defender for App Service Microsoft Defender for Cloud Apps Microsoft Defender for Containers Microsoft Defender for Servers

To ensure that the configuration of the Docker host meets best practices and to be alerted if vulnerabilities are detected, you should use Microsoft Defender for Containers [2] [5]. This solution is suitable for protecting Docker hosts and verifying their compliance with the CIS Docker benchmark [2]. Since VM1 in your Azure subscription hosts a Docker container running App1, using Microsoft Defender for Containers will help you monitor and secure the environment effectively [1].

References

Any other questions?

Azure Docker best practices

Defender for Containers setup

Monitoring Docker vulnerabilities

Alerting on container threats