Question
You have an Azure subscription named Sub1 that contains a storage account named storage1. Sub1 has Microsoft Defender for Storage enabled. Defender for Storage has malware scanning enabled.
You need to configure a solution that automates the remediation of malware detected in storage1.
What should you include in the solution?
- A. Application Insights
- B. Azure Event Hubs
- C. Azure Event Grid Correct
- D. Azure Policy
Explanation
Defender for Storage can send malware scan results to Azure Event Grid in near real time, and an event subscription can trigger a Function App that deletes or quarantines the malicious blob. Event Hubs can only receive forwarded events for downstream consumers, so it does not by itself drive remediation. Application Insights monitors applications, and Azure Policy governs resource configuration rather than reacting to individual scan results.
