You have an Azure subscription that uses Microsoft Defender for Cloud.

To enable Microsoft Defender for Servers on AWS virtual machines, you must first connect the AWS environment to Microsoft Defender for Cloud and then enable auto-provisioning of the required agents.

Configure the AWS connector – establishes the secure integration between your AWS account and Microsoft Defender for Cloud. It allows Defender for Cloud to discover AWS EC2 instances and workloads.

Configure auto-provisioning – automatically installs the required agents (Defender for Endpoint or Log Analytics agent / AMA, depending on the plan) on all discovered instances, enabling full Defender for Servers protection.

Other options:

A. Agentless scanning – optional for vulnerability assessment, not required for initial onboarding.

B. Azure VM agent – used only for Azure VMs, not AWS.

C. Onboard to Defender for Endpoint – happens automatically after Defender for Servers is enabled.

✅ Correct Answers: D and E