nerdexam
Microsoft

AZ-500 · Question #67

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. Option B (No) is correct because Microsoft Antimalware for Azure is not a Windows feature that can be installed manually through Server Manager or PowerShell's Add-WindowsFeature command - it is an Azure VM Extension that must be deployed through the Azure platform itself. The…

Submitted by eva_at· Mar 6, 2026Secure compute, storage, and databases

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Subscription. The subscription contains 50 virtual machines that run Windows Server 2012 R2 or Windows Server 2016. You need to deploy Microsoft Antimalware to the virtual machines. Solution: You connect to each virtual machine and add a Windows feature. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    94% (29)

Explanation

Option B (No) is correct because Microsoft Antimalware for Azure is not a Windows feature that can be installed manually through Server Manager or PowerShell's Add-WindowsFeature command - it is an Azure VM Extension that must be deployed through the Azure platform itself.

The correct approach to deploy Microsoft Antimalware to 50 virtual machines at scale would be to use Azure PowerShell, Azure CLI, ARM templates, or Azure Security Center, which can push the IaaSAntimalware extension to multiple VMs simultaneously without requiring individual logins.

Option A (Yes) is wrong because manually connecting to each of 50 virtual machines to add a Windows feature is both the incorrect method and an inefficient, unscalable approach - Microsoft Antimalware is not even available as a native Windows feature in this context.

Memory Tip: Think of Microsoft Antimalware in Azure as an Extension, not a Feature. Features live inside the OS; Extensions are deployed from Azure onto the VM. Whenever a question asks about deploying something to many VMs at once, look for Azure-level tools (PowerShell, ARM templates, Policy) rather than manual, per-machine methods.

Topics

#Azure VM security#Microsoft Antimalware#VM extensions#Security deployment

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice