What should you use?

You have Azure Resource Manager templates that you use to deploy Azure virtual machines. You need to disable unused Windows features automatically as instances of the virtual machines are provisioned.

What should you use?
A . device configuration policies in Microsoft Intune
B . an Azure Desired State Configuration (DSC) virtual machine extension
C . application security groups
D . Azure Logic Apps
E . security policies in Azure Security Center
F . Azure Advisor

View Answer

Answer: B

Explanation:

You can use Azure Automation State Configuration to manage Azure VMs (both Classic and Resource Manager), on-premises VMs, Linux machines, AWS VMs, and on-premises physical machines.

Note: Azure Automation State Configuration provides a DSC pull server similar to the Windows Feature DSC Service so that target nodes automatically receive configurations, conform to the desired state, and report back on their compliance. The built-in pull server in Azure Automation eliminates the need to set up and maintain your own pull server. Azure Automation can target virtual or physical Windows or Linux machines, in the cloud or on-premises.

Reference: https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started