Microsoft Azure Security Technologies — Question 22

You make use of Azure Resource Manager templates to deploy Azure virtual machines.
You have been tasked with making sure that Windows features that are not in use, are automatically inactivated when instances of the virtual machines are provisioned.
Which of the following actions should you take?

Answer options

• A. You should make use of Azure DevOps.
• B. You should make use of Azure Automation State Configuration.
• C. You should make use of network security groups (NSG).
• D. You should make use of Azure Blueprints.

Correct answer: B

Explanation

The correct answer is B because Azure Automation State Configuration allows you to manage the configuration of your virtual machines and ensure that unwanted Windows features are disabled. Option A, Azure DevOps, is more focused on CI/CD processes and does not directly control VM configurations. Option C, network security groups (NSG), is used for managing network traffic and does not pertain to Windows features. Option D, Azure Blueprints, helps in managing and deploying resources but does not specifically handle the activation or deactivation of Windows features.