What should you do?

You have 15 Azure virtual machines in a resource group named RG1.

All virtual machines run identical applications.

You need to prevent unauthorized applications and malware from running on the virtual machines.

What should you do?
A . Apply an Azure policy to RG1.
B . From Azure Security Center, configure adaptive application controls.
C . Configure Azure Active Directory (Azure AD) Identity Protection.
D . Apply a resource lock to RG1.

Answer: B

Explanation:

Adaptive application control is an intelligent, automated end-to-end application whitelisting solution from Azure Security Center. It helps you control which applications can run on your Azure and non-Azure VMs (Windows and Linux), which, among other benefits, helps harden your VMs against malware. Security Center uses machine learning to analyze the applications running on your VMs and helps you apply the specific whitelisting rules using this intelligence.

Reference: https://docs.microsoft.com/en-us/azure/security-center/security-center-adaptive-application