You are a SOC Analyst for company XYZ that is deploying cloud workload protection with Azure Defender. Your work is to ensure Azure Defender automatically protects the Azure resources. Your organization has a small number of Azure virtual machines that are not part of the auto provisioning scheme. You must manually configure protection for these Azure resources. 
Which of the below is an extension of auto provisioning?

Answer options:

A.Windows Events
B.Policy for Azure Policy
C.Policy Add-on for Kubernetes
D.Policy for DNS

Correct Answer: C 

Reference: 

https://docs.microsoft.com/en-us/azure/security-center/azure-defender