nerdexam
Microsoft

AZ-500 · Question #239

You work for an organization that has above 100 Windows Server 2016 virtual machines (VMs). Those VMs are running in the Azure West Europe region. Azure Automation runbook is used by the machines to…

The correct answer is D. Use Update Management from the automation account. To report on Windows Server 2016 VMs missing a specific hotfix, leverage Azure Update Management, which is already configured for these machines, to generate a compliance report.

Submitted by helene.fr· Mar 6, 2026Secure compute, storage, and databases

Question

You work for an organization that has above 100 Windows Server 2016 virtual machines (VMs). Those VMs are running in the Azure West Europe region. Azure Automation runbook is used by the machines to automatically start and stop. Azure Update Management is used to manage updates. You get to know about a Microsoft security vulnerability which is affecting the Windows Server 2016 operating system (OS). When a hotfix is installed, the vulnerability gets fixed. You need to create a report of the systems that do not have the hotfix installed. What would be your step of action to generate the report?

Options

  • AUse WMI to connect remotely to each machine and search for the hotfix.
  • BUse the Get-Hotfix command to connect remotely to each machine and search for the hotfix.
  • CUse the Get-Childltem command to connect remotely to each machine and search for the hotfix.
  • DUse Update Management from the automation account.

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    3% (1)
  • D
    87% (34)

Why each option

To report on Windows Server 2016 VMs missing a specific hotfix, leverage Azure Update Management, which is already configured for these machines, to generate a compliance report.

AUse WMI to connect remotely to each machine and search for the hotfix.

WMI is a local management technology and connecting to each machine remotely for this purpose would be inefficient and complex for 100+ VMs compared to a centralized Azure service.

BUse the Get-Hotfix command to connect remotely to each machine and search for the hotfix.

While `Get-Hotfix` is a valid PowerShell cmdlet, connecting remotely to 100+ machines individually and aggregating results is less efficient and scalable than using Azure Update Management.

CUse the Get-Childltem command to connect remotely to each machine and search for the hotfix.

`Get-ChildItem` is used for listing items in a file system or registry and is not suitable for querying installed hotfixes.

DUse Update Management from the automation account.Correct

Azure Update Management provides a centralized solution to assess update compliance for Azure VMs, allowing administrators to easily identify machines missing specific hotfixes or updates. Since the VMs are already using Update Management, this feature can directly generate the required report without additional tools or remote connections.

Concept tested: Azure Update Management compliance reporting

Source: https://learn.microsoft.com/en-us/azure/automation/update-management/overview

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice