Exam AZ-500 topic 5 question 73 discussion

Answer = A (VM1 and VM2 only) -Adaptive application controls help in defining an allowlist of known-safe applications for virtual machines. -Windows Server Core installations, like VM3, are not supported by this feature. -VM4 is configured with an AppLocker policy, which may conflict with adaptive application controls as they perform similar functions for application whitelisting. Thus, the answer will focus on the virtual machines that are neither Server Core nor use AppLocker. That would be VM1 (Windows Server 2019) and VM2 (Windows Server 2022). The correct answer is A. VM1 and VM2 only.

Microsoft Defender for Servers–Adaptive Application Controls requires: - Full GUI installation of Windows Server 2012 R2 or later - AppLocker must not already be configured manually (Defender manages it) so A. VM1 and VM2 only

https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/security-control-apply-adaptive-application-control/1954144

VM1 and VM2 only. Microsoft Defender for Servers enables Adaptive Application Controls, which help create an allowlist of known and trusted applications on virtual machines. However, there are some restrictions: Machines must have a graphical user interface (GUI) – Server Core installations are not supported. Machines using AppLocker are incompatible – Virtual machines with an AppLocker policy configured cannot use Adaptive Application Controls.

AAC and Applocker can work in conjunction

The answer is D All the OS can be protected with Defender for servers. VM1 - Yes VM2 - Yes VM3 - Yes - Server core is a minimal installation, but it still supports adaptive application controls VM3 - Yes - Applocker policy can work in conjunction with Defender for servers.