Exam AZ-400 topic 1 question 8 discussion

https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register-azurermautomationdscnode?view=azurermps-6.13.0 Specifies the DSC configuration mode. Valid values are: ApplyAndMonitor ApplyAndAutocorrect ApplyOnly Answer is No; use ApplyAndAutocorrect for "correctly configured, regardless of configuration drift"

The solution does **not** meet the goal. Setting the `-ConfigurationMode` parameter to `ApplyOnly` in the `Register-AzureRmAutomationDscNode` command only applies the configuration initially but does not ensure that the test servers remain correctly configured in the event of configuration drift. To ensure the servers stay correctly configured regardless of configuration drift, you should use the `-ConfigurationMode` parameter set to `ApplyAndAutoCorrect`. This mode applies the configuration and periodically checks and corrects any drift to ensure the servers remain compliant with the desired configuration. So the correct answer is **B.

https://learn.microsoft.com/en-us/powershell/dsc/managing-nodes/metaconfig?view=dsc-1.1 "ApplyOnly: DSC applies the configuration and does nothing further unless a new configuration is pushed to the target node or when a new configuration is pulled from a service. After initial application of a new configuration, DSC does not check for drift from a previously configured state. Note that DSC will attempt to apply the configuration until it is successful before ApplyOnly takes effect. "

B is the answer. https://learn.microsoft.com/en-us/powershell/dsc/managing-nodes/metaconfig?view=dsc-1.1#basic-settings ApplyOnly: DSC applies the configuration and does nothing further unless a new configuration is pushed to the target node or when a new configuration is pulled from a service. After initial application of a new configuration, DSC does not check for drift from a previously configured state.

1. ApplyOnly: Applies the configuration script once during registration. Does not monitor for future changes or drift. Not suitable for situations where continuous configuration management is required. 2. ApplyAndMonitor: Applies the configuration script initially. Continuously monitors the registered node for any configuration changes. If drift is detected, the script is automatically reapplied to bring the node back to the desired state. Suitable for situations where continuous configuration management is essential to prevent drift and ensure consistent configuration across nodes. 3. ApplyAndAutocorrect: Applies the configuration script initially. Continuously monitors the registered node for any configuration changes. If drift is detected, the script is automatically reapplied to correct the configuration immediately. Similar to ApplyAndMonitor, but with immediate correction of any drift.

The proposed solution sets the -ConfigurationMode parameter to ApplyOnly when running the Register-AzureRmAutomationDscNode command. This indicates that the configuration will only be applied, but will not be checked or corrected for any configuration deviation (drift). Since the goal is to ensure that the company's test servers remain correctly configured regardless of configuration drift, the solution falls short of the goal. The settings will only be applied once and will not be maintained if there are unauthorized changes. Therefore, the correct answer is B. No.

https://learn.microsoft.com/en-us/powershell/dsc/managing-nodes/metaconfig?view=dsc-1.1

It's B - No. With ApplyOnly: After the initial application of a new configuration, DSC does not check for drift from a previously configured state. It should be ApplyAndAutocorrect

Correct answer!

Answer B This link beautifully explained DSC configuration mode https://www.red-gate.com/simple-talk/sysadmin/powershell/powershell-desired-state-configuration-the-basics/

Answer B https://tkolber.medium.com/configuring-azure-dsc-automation-with-powershell-in-5-steps-454fbef9457b

No, ApplyAndAutocorrect is the right answer.

Right , the option is ApplyAndAutocorrect