SC-100 Certification Practice Question #32

Question

You have 1,000 on-premises servers that run Windows Server 2022 and 500 on-premises servers that run Linux.

You have an Azure subscription that contains the following resources:

•	A Log Analytics workspace
•	A Microsoft Defender Cloud Security Posture Management (CSPM) plan

You need to deploy Update Management for the servers.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

This is a dated question whose answer options reflect the legacy Automation Update Management model, in which an Azure Automation account hosted the Update Management solution. Among the three Azure-resource options, only the Automation account ever delivered Update Management — Microsoft Sentinel and Defender for Servers Plan 2 do not (Gagi79's 3-👍 comment and zpack both explicitly reject Defender for Servers for this purpose). For the agent, the servers are on-premises (non-Azure), so they must be brought into Azure via Azure Arc, and Arc's agent is the Azure Connected Machine agent; MS Learn states Arc connectivity is a prerequisite for managing non-Azure machines and that Arc-enabled servers use the Connected Machine agent. The Azure Monitor Agent and the (deprecated) Log Analytics agent are telemetry agents, not the Arc onboarding agent. Confidence is held at 78% because there is a genuine community split: the single highest-voted comment paired the Automation account with the Log Analytics agent (the older pairing), while the modern/most-recent guidance (and MS Learn) favor the Connected Machine agent, and the underlying service has since migrated to Azure Update Manager + Azure Arc.

More SC-100 practice questions