nerdexam
Microsoft

AZ-500 · Question #90

You have an Azure subscription that contains the virtual machines shown in the following table. From Azure Security Center, you turn on Auto Provisioning. You deploy the virtual machines shown in…

The correct answer is D. VM1, VM2, VM3, and VM4. Explanation When Auto Provisioning is enabled in Azure Security Center, it automatically installs the Log Analytics agent (formerly Microsoft Monitoring Agent) on all virtual machines in the subscription - both existing VMs (VM1 and VM2) and any newly deployed VMs (VM3 and VM4)…

Submitted by hassan_iq· Mar 6, 2026Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel

Question

You have an Azure subscription that contains the virtual machines shown in the following table. From Azure Security Center, you turn on Auto Provisioning. You deploy the virtual machines shown in the following table. On which virtual machines is the Log Analytics agent installed?

Options

  • AVM3 only
  • BVM1 and VM3 only
  • CVM3 and VM4 only
  • DVM1, VM2, VM3, and VM4

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    9% (3)
  • C
    3% (1)
  • D
    83% (29)

Explanation

Explanation

When Auto Provisioning is enabled in Azure Security Center, it automatically installs the Log Analytics agent (formerly Microsoft Monitoring Agent) on all virtual machines in the subscription - both existing VMs (VM1 and VM2) and any newly deployed VMs (VM3 and VM4) - regardless of their operating system (Windows or Linux). This is the core purpose of Auto Provisioning: to ensure consistent security monitoring across your entire environment without manual intervention.

Options A, B, and C are incorrect because they exclude one or more VMs that would receive the agent. Auto Provisioning applies retroactively to pre-existing VMs and proactively to new VMs, so no subset-only answer can be correct. There is no condition (such as OS type or deployment time) that would prevent any of the four VMs from receiving the agent once Auto Provisioning is enabled.

Memory Tip: Think of Auto Provisioning as a "blanket policy" - once switched ON, it covers all VMs in the subscription, past and future. If you remember "Auto = All," you'll avoid the trap of thinking it only applies to new or existing machines.

Topics

#Microsoft Defender for Cloud#Auto Provisioning#Log Analytics agent#Virtual Machine Security

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice