AZ-007 Microsoft Azure

Microsoft Defender for Cloud is on the Standard/paid tier for key resource types.

Microsoft Defender for Cloud is on the Standard/paid tier for key resource types.

Domain
Microsoft Azure
Area
Logging
Automated / manual
Automated

Risk if it fails

Free tier lacks threat detection.

Defender raises alerts on real attacks (malware, suspicious logins). On the free tier those attacks happen silently and you only find out from the damage.

How Tess tests it

1 test — each concludes only on cited evidence.

Microsoft Defender for Cloud is on the Standard/paid tier for key resource types.

Automated
Procedure
Confirm Defender plans are 'Standard' for VMs, Storage, SQL, etc.

Read-only command 

az security pricing list --query 'value[].{Name:name,Tier:pricingTier}' -o table

More in Microsoft Azure

AZ-001 MFA is enforced for all users, especially privileged roles. AZ-002 Number of Global Administrators is limited (typically 2-4). AZ-003 Privileged Identity Management (PIM) provides just-in-time elevation. AZ-004 Legacy/basic authentication is blocked.

Want Tess to test AZ-007 against your evidence?

Book a demo