Hardening AVD session hosts: Defender for Cloud, Credential Guard, and trusted launch

This sheet compares Defender for Cloud enhanced features, Defender for Servers / Endpoint, Windows Defender Credential Guard, Confidential compute encryption.

CriterionDefender for Cloud enhanced featuresDefender for Servers / EndpointWindows Defender Credential GuardConfidential compute encryption
PurposeVulnerability management, compliance, Secure ScoreEDR telemetry auto-deployed on serversIsolate credentials from Pass-the-HashBind OS disk keys to the VM vTPM

The verdict, the full comparison, 5 rules and 2 traps are part of AZ-140 access. Unlock AZ-140.