nerdexam
Microsoft

AZ-400 · Question #287

Drag and Drop Question You have an Azure DevOps organization named Contoso. You have 10 Azure virtual machines that run Windows Server 2019. The virtual machines host an application that you build and

The correct answer is Create an Azure Automation account.; Complete the Desired State Configuration (DSC) configuration.; Onboard the virtual machines to the Azure Automation account.; Install the custom Desired State Configuration (DSC) extension on the virtual machines.. The correct sequence uses Azure Automation State Configuration (DSC) to centrally manage IIS configurations: first create an Azure Automation account as the management hub, then author/complete the DSC configuration script defining the desired IIS state, next onboard (register) t

Submitted by omar99· Mar 6, 2026Implement and manage infrastructure as code - specifically using Azure Automation State Configuration (DSC) to enforce and maintain consistent server configurations across virtual machines, aligning with the AZ-400 'Develop a security and compliance plan' and 'Implement a configuration management strategy' objectives.

Question

Drag and Drop Question You have an Azure DevOps organization named Contoso. You have 10 Azure virtual machines that run Windows Server 2019. The virtual machines host an application that you build and deploy by using Azure Pipelines. Each virtual machine has the Web Server (IIS) role installed and configured. You need to ensure that the web server configurations on the virtual machines is maintained automatically. The solution must provide centralized management of the configuration settings and minimize management overhead. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:

Exhibits

AZ-400 question #287 exhibit 1
AZ-400 question #287 exhibit 2

Answer Area

Drag items

Create an Azure Automation account.Install the custom Desired State Configuration (DSC) extension on the virtual machines.Create a .zip file and upload it to Azure Blob storage.Onboard the virtual machines to the Azure Automation account.Complete the Desired State Configuration (DSC) configuration.

Correct arrangement

  • Create an Azure Automation account.
  • Complete the Desired State Configuration (DSC) configuration.
  • Onboard the virtual machines to the Azure Automation account.
  • Install the custom Desired State Configuration (DSC) extension on the virtual machines.

Explanation

The correct sequence uses Azure Automation State Configuration (DSC) to centrally manage IIS configurations: first create an Azure Automation account as the management hub, then author/complete the DSC configuration script defining the desired IIS state, next onboard (register) the virtual machines to the Automation account so they pull configurations, and finally install the DSC extension on the VMs to enable the Local Configuration Manager (LCM) to enforce the desired state. This approach provides centralized management through Azure Automation's DSC pull server model, minimizing overhead by automatically remediating configuration drift without manual intervention.

Topics

#Azure Automation#Desired State Configuration (DSC)#Configuration Management#Azure Pipelines

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-400 Practice