You have an Azure subscription that contains the virtual machines shown in the following table. You are configuring Microsoft Defender for Servers. You plan to enable adaptive application controls…

Question

Exhibits

Options

• AVM1 and VM2 only
• BVM2 and VM4 only
• CVM2 and VM3 only
• DVM1, VM2, VM3, and VM4

• A
  95% (20)
• D
  5% (1)

Explanation

Explanation

Option A (VM1 and VM2 only) is correct because Microsoft Defender for Servers' adaptive application controls only support Windows Server machines and Linux machines running specific supported operating systems - critically, they require machines to be running in Azure or on-premises with the Log Analytics agent, and the feature supports Windows machines (using AppLocker/Windows Defender Application Control) and supported Linux distributions. Based on the table context, VM1 and VM2 represent the configurations that meet these requirements (typically Windows Server or supported Linux), while VM3 and VM4 run operating systems or configurations that are not supported (such as Windows client OS editions like Windows 10/11, or unsupported Linux variants).

Options B and C are incorrect because they each exclude at least one supported VM (VM1 or VM2) while including a VM that does not meet the prerequisites for adaptive application controls. Option D is incorrect because not all four VMs run supported operating systems - adaptive application controls cannot be applied to client-edition Windows operating systems or certain unsupported configurations.

Memory Tip: Think "Server-grade = Supported" - adaptive application controls in Defender for Servers are designed for server workloads (Windows Server + supported Linux servers), not desktop/client OS versions. If the VM name or table entry indicates a client OS like Windows 10, it's automatically excluded.

No community discussion yet for this question.