Exam AZ-400 topic 7 question 41 discussion

I believe gicen answer is wrong, it should be: 1. Create a PowerShell configuration file 2. Load the file to Azure Blob storage 3. Configure the *DSC extension* on the virtual machines https://docs.microsoft.com/en-us/azure/automation/automation-dsc-onboarding

Question is asking you to use DSC, why would you use Custom Script Extension? I believe answer is: 1. Create a Powershell configuration file 2. Load the file to Azure Blob storage 3. Configure the DSC extension on the virtual machines

Create Powershell script Load to storahe Configure DSC

To ensure that the virtual machines always have the same Windows feature installed using the Desired State Configuration (DSC) extension in Azure, you should perform the following actions in sequence: Create a DSC configuration script: Write a DSC configuration script that includes the necessary steps to ensure the desired Windows feature is installed on the virtual machines. The configuration script defines the desired state of the system. Upload the DSC configuration script to an accessible location: Store the DSC configuration script in a location that the virtual machines can access, such as Azure Storage, a version control repository, or a shared network location. Configure the DSC extension on the virtual machines: Use the Azure portal, Azure PowerShell, Azure CLI, or Azure Resource Manager (ARM) templates to configure the DSC extension on the virtual machines. Specify the location of the DSC configuration script and any additional settings required for the extension.

Based on a discussion with GPT: 1. Create a YAML configuration file (B) that specifies the Windows feature to be installed. 2. Create a PowerShell configuration file (F) that references the YAML file and configures the DSC extension on the virtual machines. 3. Configure the DSC extension on the virtual machines (A) using the PowerShell configuration file.

https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview "The configuration data file is secured by an SAS token in blob storage" 1) Create a PowerShell configuration file 2) Load the file to Azure Blob storage 3) Configure the DSC extension on the virtual machines

Create PS Load to Blob Configure DSC

"always have the same Windows feature installed." Mean DSC extension that manage drift 1. Create a PowerShell configuration file 2. Load the file to Azure Blob storage 3. Configure the *DSC extension* on the virtual machines

Please note the question says 'Azure virtual machines' What if there are 1000 machine? To stop the configuration from drifting we need automation account also. In short Ans Should be 1. Create a PowerShell configuration file 2. Load the file to Azure Blob storage 3. Configure ARM Template -- to apply and configure DSC extensions + also create automation account

Got this January 2022.

I believe it should be Blob Storage, see: https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview#dsc-extension-powershell-cmdlets The following commands place the iisInstall.ps1 script on the specified VM. The commands also execute the configuration, and then report back on status. $resourceGroup = 'dscVmDemo' $vmName = 'myVM' $storageName = 'demostorage' #Publish the configuration script to user storage Publish-AzVMDscConfiguration -ConfigurationPath .\iisInstall.ps1 -ResourceGroupName $resourceGroup -StorageAccountName $storageName -force #Set the VM to run the DSC configuration Set-AzVMDscExtension -Version '2.76' -ResourceGroupName $resourceGroup -VMName $vmName -ArchiveStorageAccountName $storageName -ArchiveBlobName 'iisInstall.ps1.zip' -AutoUpdate -ConfigurationName 'IISInstall'

The questions are weird. We need to upload the DCS Config file to Azure Automation, compile it then add the Nodes that we need to configuration monitoring. I am not sure why we add it to Azure File or Blob

I answered: 1. Create a Powershell configuration file 2. Load the file to AZURE FILES (!!!) 3. Configure the DSC extension on the virtual machine I am not sure about the 2. There is a chance that both Blob and Files are correct. Got 870pts

Based on https://docs.microsoft.com/en-us/powershell/scripting/dsc/pull-server/pullserver?view=powershell-7.1 I think the answer may be to load the powershell config file onto a SMB share i.e. Azure Files not Blob storage and configure the DSC extension. I haven't seen any document suggesting a solution involving blob storage

True question is saying DSC. we shouldn't be using CSE here I feel right answer is 1. Create a Powershell configuration file 2. Load the file to Azure Blob storage 3. Configure the DSC extension on the virtual machine Sachin Kadam

correct answer