nerdexam
Microsoft

AZ-500 · Question #255

You work for a company running five Windows Server 2012 R2 virtual machines (VMs). The VMs are located in the Azure West Europe region. The VMs were originally deployed from the Azure marketplace…

The correct answer is A. Add the Microsoft Antimalware extension on each VM using the Azure portal. To enable Microsoft Antimalware on multiple Azure Windows Server VMs with zero manual interaction, the Azure Microsoft Antimalware extension should be deployed.

Submitted by dimitri_ru· Mar 6, 2026Secure compute, storage, and databases

Question

You work for a company running five Windows Server 2012 R2 virtual machines (VMs). The VMs are located in the Azure West Europe region. The VMs were originally deployed from the Azure marketplace. There is presently a n antivirus solution installed and is expected to become end of life soon. The company wants to now replace the old antivirus solution with Microsoft Antimalware. You are required to enable Microsoft Antimalware on each VM and do it with zero manual interaction. What would be your next step of action?

Options

  • AAdd the Microsoft Antimalware extension on each VM using the Azure portal.
  • BDownload the Microsoft Antimalware MSI package and install it manually on each VM.
  • CUse the Install-WindowsFeature command on each VM to install the Microsoft Antimalware
  • DDownload the Microsoft Antimalware MSI package and install it on each VM by using the Desired

How the community answered

(34 responses)
  • A
    91% (31)
  • C
    3% (1)
  • D
    6% (2)

Why each option

To enable Microsoft Antimalware on multiple Azure Windows Server VMs with zero manual interaction, the Azure Microsoft Antimalware extension should be deployed.

AAdd the Microsoft Antimalware extension on each VM using the Azure portal.Correct

The Azure Microsoft Antimalware extension can be deployed to multiple VMs via Azure portal, PowerShell, Azure CLI, or ARM templates, enabling an automated and hands-off installation and configuration of Microsoft Antimalware without requiring manual intervention on each individual VM.

BDownload the Microsoft Antimalware MSI package and install it manually on each VM.

Downloading an MSI and installing it manually on each VM requires significant manual interaction, which contradicts the requirement for "zero manual interaction."

CUse the Install-WindowsFeature command on each VM to install the Microsoft Antimalware

`Install-WindowsFeature` is used for installing Windows Server roles and features, and Microsoft Antimalware is deployed as an extension on Azure VMs, not typically as a native Windows feature in this context.

DDownload the Microsoft Antimalware MSI package and install it on each VM by using the Desired

While Desired State Configuration (DSC) could automate the installation of an MSI package, the most direct and Azure-native method for Microsoft Antimalware with zero manual interaction is via the VM extension.

Concept tested: Automating Microsoft Antimalware deployment using Azure VM extensions

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/antimalware

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice