You have 15 Azure virtual machines in a resource group named RG1. All virtual machines run identical applications. You need to prevent unauthorized applications and malware from running on the…

Question

Options

• AApply an Azure policy to RG1.
• BFrom Azure Security Center, configure adaptive application controls.
• CConfigure Azure Active Directory (Azure AD) Identity Protection.
• DApply a resource lock to RG1.

• B
  81% (21)
• C
  8% (2)
• D
  12% (3)

Explanation

Explanation

Adaptive Application Controls in Azure Security Center (now Microsoft Defender for Cloud) is specifically designed to prevent unauthorized applications and malware from running on virtual machines by using machine learning to create allowlists of approved applications - making Option B the correct choice for this scenario.

Why the distractors are wrong:

• Option A (Azure Policy): Azure Policy enforces governance rules and compliance standards (like allowed VM sizes or regions), but it does not control which applications run inside a virtual machine.
• Option C (Azure AD Identity Protection): This protects against identity-based threats like compromised user accounts and risky sign-ins - it has nothing to do with controlling application execution on VMs.
• Option D (Resource Lock): Resource locks prevent accidental deletion or modification of Azure resources, not the execution of malicious software within them.

Memory Tip

Think of Adaptive Application Controls = Application Allowlisting. If the question mentions blocking unauthorized apps or malware on VMs, your brain should immediately jump to "Security Center → Adaptive Application Controls." The word "adaptive" hints that it learns what's normal and adapts to allow only legitimate applications.

No community discussion yet for this question.