You deploy Azure virtual machines using Azure Resource Manager templates. You need a solution that automatically disables unused Windows features as each VM instance is provisioned. Which option should you use?
Choose an answer
Tap an option to check your answer.
Correct answer: an Azure Desired State Configuration (DSC) virtual machine extension.
Why this is the answer
Azure Desired State Configuration (DSC) virtual machine extensions are ideal for configuring the operating system of a VM during or after deployment. DSC allows you to define the desired state of your Windows features (e.g., disabling unused ones) and automatically enforces that state. This ensures consistency across all provisioned VMs. Device configuration policies in Microsoft Intune are primarily for managing mobile devices and endpoints, not for configuring Azure VMs at the time of provisioning. Security policies in Azure Security Center (now Microsoft Defender for Cloud) focus on security posture management and recommendations, not direct OS configuration. Azure Logic Apps are for workflow automation and integration, not for configuring VM operating systems.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed