You have Azure Resource Manager templates that you use to deploy Azure virtual machines.
You need to disable unused Windows features automatically as instances of the virtual machines are provisioned.
What should you use?
Click on the arrows to vote for the correct answer
A. B. C. D.B
The primary use case for the Azure Desired State Configuration (DSC) extension is to bootstrap a VM to the Azure Automation State Configuration (DSC) service.
The service provides benefits that include ongoing management of the VM configuration and integration with other operational tools, such as Azure Monitoring.
Using the extension to register VM's to the service provides a flexible solution that even works across Azure subscriptions.
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overviewThe correct answer is B, an Azure Desired State Configuration (DSC) virtual machine extension.
Azure Desired State Configuration (DSC) is a tool for configuring and managing Windows and Linux systems. It is used to manage configuration data for software services and deploy and manage software services across multiple machines. It ensures that your systems are in the desired state by checking and fixing configurations automatically. By using DSC with virtual machine extensions, you can automate the configuration of your Azure virtual machines as they are provisioned.
To disable unused Windows features automatically as instances of the virtual machines are provisioned, you can create a DSC configuration file that includes the necessary configuration settings. This configuration file can be uploaded to Azure and then applied to the virtual machines using the DSC extension. The DSC extension will run on the virtual machine and configure it according to the settings in the configuration file.
Option A, device configuration policies in Microsoft Intune, is not the best option in this scenario because it is primarily used for managing mobile devices and applications, not virtual machines.
Option C, security policies in Azure Security Center, is a good option for monitoring and securing your Azure resources, but it is not specifically designed to configure Windows features.
Option D, Azure Logic Apps, is a tool for creating automated workflows and integrating with various services, but it is not designed for configuring virtual machines or Windows features.