SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

By Microsoft · Question Mode

QuestionQ10

Manage and monitor security posture

You have an Azure subscription containing these servers:

  • 200 virtual machines running either Windows Server or Ubuntu Server
  • 50 Azure Arc-enabled servers

You use Azure Policy to manage compliance for all servers.

You need to enforce an organization-specific security baseline. The solution must meet these requirements:

  • Customize a built-in security baseline.
  • Ensure server configuration changes are enforced automatically after the security baseline is deployed.
  • Minimize administrative effort.

What should you do?

Select
To customize the baseline:
Set enforcement mode to:
Explanation

Azure Machine Configuration uses Azure Policy to audit and configure operating-system settings at scale for both Azure VMs and hybrid Azure Arc-enabled servers. Its Apply and Autocorrect mode continuously corrects configuration drift at the next evaluation, which enforces the deployed baseline automatically with minimal ongoing administration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!