Exam AZ-500 topic 1 question 17 discussion

D is correct.

Reference: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects#deployifnotexists

Answer: D, DeployIfNotExists Reason: DeployIfNotExists effect is required to automatically deploy the antimalware extension to VMs that don't have it installed. AuditIfNotExists would only report non-compliance, while Disabled and Modify don't provide the required functionality. Reference: https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects#deployifnotexists

You should include the effect "DeployIfNotExists" in your code. The "DeployIfNotExists" effect ensures that the specified custom antimalware virtual machine extension is deployed if it doesn't already exist on the Azure virtual machine. "Disabled" is not suitable as it doesn't address the requirement of ensuring the presence of the antimalware extension. "Modify" is not directly related to deploying extensions and wouldn't ensure the presence of the antimalware extension. "AuditIfNotExists" is more focused on auditing the existence of resources rather than deploying them, which is not aligned with the task of installing the antimalware extension. https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-basics

The answer is: D

D. DeployIfNotExists

D is the answer. https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects#deployifnotexists Similar to AuditIfNotExists, a DeployIfNotExists policy definition executes a template deployment when the condition is met. Policy assignments with effect set as DeployIfNotExists require a managed identity to do remediation.

D. DeployIfNotExists

D is the correct answer

D is correct https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects

D is correct answer

correct

correct answer