Microsoft DevOps Engineer Expert AZ-400 Practice Question

Your company runs hundreds of Azure VMs and several on-premises servers onboarded with Azure Arc. You must enforce that IIS is installed and that specific registry keys are set, and you must continuously report and auto-remediate drift through Azure Policy compliance dashboards. Additionally, the solution should not rely on an Azure Automation account after policy assignment. Which configuration management technology should you recommend?

Azure Automanage Machine Configuration (Guest Configuration)
A Chef Infra Server hosted in Azure integrated with Azure Policy initiatives
Azure Automation State Configuration (Desired State Configuration)
An Azure DevOps pipeline that runs PowerShell Desired State Configuration scripts on a schedule

Report Issue

Answer Description

Azure Automanage Machine Configuration (Guest Configuration) delivers audit and auto-remediation of operating-system settings through Azure Policy assignments. Guest Configuration is supported on both native Azure VMs and Arc-enabled servers and stores its compliance data directly in Azure Policy, so no Azure Automation account is required once a policy is assigned. Azure Automation State Configuration can enforce Desired State Configuration but depends on an Automation account and is not natively surfaced in Azure Policy compliance dashboards. Chef-based or pipeline-driven approaches could achieve configuration drift correction but would not provide the integrated, policy-based compliance reporting the scenario demands.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.