SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

By Microsoft · Question Mode

QuestionQ29

Manage and monitor security posture

You have an Azure subscription.

You need to create and deploy an Azure Policy that meets these requirements:

  • When a new virtual machine is deployed, automatically install a custom security extension.
  • Trigger an autogenerated remediation task for noncompliant virtual machines to install the extension.

What should be included in the policy?

Select
Definition effect:
For remediation, define:
Explanation

DeployIfNotExists deploys a related resource when the policy condition is met and supports remediation tasks for existing noncompliant resources. A policy assignment with this effect uses a managed identity; Contributor at the required scope lets that identity deploy the virtual machine extension. User Access Administrator manages role assignments rather than deploying extension resources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!