Question
You have an Azure virtual machine named VM1 that runs Windows Server.
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.
What should you do?
- A. Add the PowerShell Desired State Configuration (DSC) extension to VM1.
- B. Configure VM1 to use a user-assigned managed identity.
- C. Configure VM1 to use a system-assigned managed identity. Correct
- D. Add the Custom Script Extension to VM1.
Explanation
To use the Azure Policy guest configuration feature to manage VM1, VM1 must have a system-assigned managed identity for authentication purposes. This allows the virtual machine to communicate securely with the Guest Configuration service.
