Microsoft DevOps Engineer Expert AZ-400 Practice Question
Your company manages hundreds of Azure and Arc-enabled Windows Server virtual machines. You must ensure that a specified registry key exists with a required value and that any drift from this desired state is detected and automatically remediated. You decide to use Azure Automanage Machine Configuration instead of Azure Automation State Configuration. Which approach should you implement to meet the requirements with the least operational overhead?
Compile a DSC configuration into a MOF file, upload it to an Azure Automation State Configuration account, and assign the node configuration to each virtual machine.
Build a Guest Configuration package, publish it to an Azure Automation account, and deploy it to virtual machines by using the Guest Configuration extension.
Author a Bicep file that adds the Microsoft.Compute/virtualMachines/extensions resource type for Puppet and points it to the desired configuration script.
Create a signed Machine Configuration package, store it in an Azure Storage account, reference the package in a custom Azure Policy definition with DeployIfNotExists remediation, and assign the policy to the required scopes.
Azure Automanage Machine Configuration uses signed configuration packages that are referenced by Azure Policy definitions. When the policy is assigned, the Machine Configuration agent downloads the package, audits for compliance, and, if a remediation task is configured, applies the configuration to bring the node back to the desired state. Creating a Machine Configuration package, storing it in Azure Storage, and referencing it from a custom Azure Policy definition is therefore the correct and most streamlined approach. Publishing a DSC MOF to Azure Automation (or using VM extensions such as Puppet) relies on legacy solutions and does not integrate with Machine Configuration's policy-based governance. Uploading the package to an Automation account does not enable policy-based assignment or automatic remediation at scale.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Automanage Machine Configuration?
Open an interactive chat with Bash
What is a Machine Configuration package?
Open an interactive chat with Bash
What is DeployIfNotExists remediation in Azure Policy?
Open an interactive chat with Bash
Microsoft DevOps Engineer Expert AZ-400
Design and implement build and release pipelines
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .