AZ-800 Administering Windows Server Hybrid Core Infrastructure Exam

Configure and Validate VM Extensions for Hybrid Workloads

Azure VM Extensions are small applications that install on virtual machines to add or configure features. On non-Azure machines enrolled with Azure Arc, these extensions let on-premises or other-cloud VMs use cloud services. This includes tasks like monitoring, security, and automation. They help administrators bring consistent cloud-based management to servers outside Azure. This approach simplifies hybrid infrastructure by using the same tools across environments.

To deploy VM Extensions, you can use the Azure CLI or the Azure REST API. First, set up authentication with Microsoft Entra ID by creating a service principal or using a managed identity. Then run the az vm extension set command or call the REST endpoint to install the extension on the target VM. Important configuration values include the extension name, publisher, and the JSON settings. Make sure the VM meets operating system and agent requirements before deployment.

Network and security setup is critical for hybrid extensions. Key network requirements include:

• Port 443 open for outbound traffic.
• URLs such as *.azure-automation.net allowed through any firewall.
• Correct proxy settings on the target host.

Any misconfiguration can cause extensions to fail. Additionally, on Windows VMs ensure WinRM is enabled, and on Linux VMs confirm SSH access. Proper network rules guarantee the extension can download updates and send data to Azure.

After deployment, you must verify that extensions are provisioned and healthy. Use the Azure Portal or CLI commands like az vm extension show or Get-AzVMExtension to check status. Look for a ProvisioningState of Succeeded and review logs for any error messages. Monitoring tools in Azure can track extension health and alert on failures. Consistent verification ensures your hybrid workloads keep running smoothly.

Conclusion

In this section, you learned how to deploy and manage Azure VM Extensions on non-Azure machines to enable hybrid workloads. You saw how to use the Azure CLI or REST API to install extensions and configure Microsoft Entra ID authentication. You also covered the critical network and security prerequisites needed for successful communication. Finally, you reviewed verification steps to confirm extensions are functioning properly. Mastering these processes helps maintain a reliable hybrid infrastructure with consistent cloud services across all servers.