You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure…

The correct answer is C. Configure VM1 to use a system-assigned managed identity. Azure Policy guest configuration requires the VM to have a managed identity so the guest configuration agent can authenticate to Azure and report compliance data. A system-assigned managed identity is directly tied to the VM's lifecycle, is automatically created and deleted…

Manage virtual machines and containers

Question

You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

Options

AAdd the PowerShell Desired State Configuration (DSC) extension to VM1.
BConfigure VM1 to use a user-assigned managed identity.
CConfigure VM1 to use a system-assigned managed identity.
DAdd the Custom Script Extension to VM1.

How the community answered

(26 responses)

A
4% (1)
B
8% (2)
C
85% (22)
D
4% (1)

Explanation

Azure Policy guest configuration requires the VM to have a managed identity so the guest configuration agent can authenticate to Azure and report compliance data. A system-assigned managed identity is directly tied to the VM's lifecycle, is automatically created and deleted with the VM, and is the standard requirement for guest configuration to function. A user-assigned managed identity (B) is an alternative but not the standard requirement here. The PowerShell DSC extension (A) and Custom Script Extension (D) are unrelated to enabling the guest configuration feature itself.

Topics

#Azure Policy#Guest Configuration#Managed Identities#Virtual Machines

Community Discussion

No community discussion yet for this question.

Full AZ-800 Practice