StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Governance and compliance

Practice question 95 of 400 · medium

A security standard requires supported guest-OS settings to be audited on Azure VMs and external servers. Which solution best fits?

Choose the single best answer.

  1. A.Evaluate only Defender for Cloud's general recommendations without configuring the required guest package and assignments.
  2. B.Treat AMA's collection of selected guest logs as a complete guest-configuration enforcement mechanism.
  3. C.Check only ARM properties such as VM region and size to prove internal OS baseline compliance.
  4. D.Use Machine Configuration with required guest extension/identity or Arc setup.
Show the answer and explanation

✓ Correct answer

  • Use Machine Configuration with required guest extension/identity or Arc setup.

Machine Configuration evaluates or applies supported guest settings using its prerequisites and packages. ARM region/size does not prove OS configuration. General posture findings do not remove required guest-package/assignment planning, and log collection through AMA is a separate telemetry mechanism rather than universal guest-configuration enforcement. Source: AZ-305 Study Guide.pdf, PDF page(s) 20.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.