Microsoft DevOps Engineer Expert AZ-400 Practice Question
You administer hundreds of Windows Server 2022 virtual machines that run in several Azure subscriptions. The security team mandates that the Web-Server (IIS) feature and a specific registry value must remain continuously enforced. The solution must detect any configuration drift within 15 minutes, remediate drift automatically without manual action, surface compliance results in the Azure Policy compliance view, and avoid maintaining your own pull servers or additional agents. Which approach should you implement to meet these requirements?
Custom Script Extension invoked by Azure VM Run Command on a 15-minute schedule
Azure Automation State Configuration in pull mode using an Azure Automation account
Azure Automanage Machine Configuration with an Azure Policy guest configuration assignment
Desired State Configuration applied via an Azure DevOps pipeline only at deployment time
Azure Automanage Machine Configuration delivers guest configuration through the built-in guest assignment extension. Policies are assigned from Azure Policy, so compliance appears in the Azure Policy blades. The extension evaluates every 15 minutes by default; when set to enforce, it automatically remediates drift. No pull servers are required and the necessary agent is installed automatically, meeting all stated requirements. Azure Automation State Configuration requires you to run and maintain an Automation account and pull server infrastructure, and it is being retired in favor of Machine Configuration. Custom Script Extension plus Run Command is a one-time execution and does not provide continuous assessment or Azure Policy integration. Running Desired State Configuration only during deployment ensures initial compliance but cannot detect or remediate drift after provisioning.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Automanage Machine Configuration?
Open an interactive chat with Bash
How does Azure Policy integrate with guest configuration in Azure Machine Configuration?
Open an interactive chat with Bash
Why is Azure Automation State Configuration not recommended in this scenario?
Open an interactive chat with Bash
Microsoft DevOps Engineer Expert AZ-400
Design and implement build and release pipelines
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .