Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Centralized Governance for Hybrid Servers with Azure Arc
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An organization operates a hybrid environment containing Windows and Linux physical servers and virtual machines across an on-premises datacenter and third-party cloud platforms. The IT administration team needs to bring these external servers under centralized Azure governance so they can apply Azure Policy guest configurations, manage security compliance, and view all servers in the Azure portal without migrating the workloads.
Which solution should the organization implement to meet these requirements?
Explanations
Azure Migrate
Azure Migrate
What Azure Migrate Is and Does
Azure Migrate is a centralized hub used to discover, assess, and migrate on-premises infrastructure, data, and applications into the Azure cloud. It provides dedicated tools and workflows for evaluating workload readiness, right-sizing target compute instances, estimating operational costs, and orchestrating bulk cloud migrations.
Why It Doesn't Meet the Requirement
- Designed for Migration, Not Governance: Azure Migrate is focused on moving workloads from source datacenters into native Azure virtual machines rather than continuously governing machines remaining outside of Azure.
- Lacks In-Place Management: It does not project external machines into Azure Resource Manager for day-to-day configuration and policy management.
- No Hybrid Policy Enforcement: Azure Migrate cannot apply continuous Azure Policy compliance rules to live servers running on-premises.
Key Characteristics and Limitations
- Evaluates hardware performance and dependencies to determine cloud readiness.
- Coordinates replication and cutover processes for datacenter consolidation.
- Operates as a project-based migration tool rather than a persistent operational governance plane.
This Answer Would Be Correct If
The organization wanted to discover on-premises servers, evaluate migration suitability, estimate monthly cloud costs, and replicate VMs directly into native Azure Virtual Machines.
Additional Context
While Azure Migrate helps move workloads into Azure, Azure Arc is designed for organizations that intend to keep their workloads on-premises or across clouds while managing them with Azure tools.
Azure Arc-enabled servers
Azure Arc-enabled servers
What Azure Arc-Enabled Servers Is
Azure Arc-enabled servers is a hybrid and multi-cloud management capability within Azure Arc that extends the reach of Azure Resource Manager (ARM) to physical and virtual machines hosted outside of Azure. By deploying the Azure Connected Machine agent onto target Windows and Linux servers located in on-premises datacenters or external clouds, each machine is projected as a first-class resource into an Azure subscription and resource group.
How It Meets the Requirements
- Hybrid and Multi-Cloud Coverage: It allows organizations to manage physical servers and virtual machines running on Windows and Linux regardless of where they reside, including corporate networks and other cloud hosting providers.
- Azure Governance and Policy: Once onboarded, administrators can apply Azure Policy guest configurations directly to external servers to enforce baseline configurations and ensure compliance across all environments.
- Centralized Visibility: Projected servers appear alongside native Azure resources in the Azure portal, providing a single pane of glass for monitoring, inventory tracking, and RBAC governance.
- No Migration Required: The workloads continue running on their existing local or third-party infrastructure without needing to be re-hosted into Azure virtual machines.
Key Advantages and Capabilities
- Unified Role-Based Access Control (RBAC): Manage server access permissions using standard Azure identity and access controls.
- Azure Monitoring and Log Analytics: Seamlessly integrate external servers with Azure Monitor to collect metrics and log data.
- Automated Extension Management: Deploy and manage extensions such as Defender for Cloud and Log Analytics agents across diverse platforms.
- Tagging and Inventory: Apply consistent resource tags to organize, track, and group infrastructure assets across different locations.
Why This Is Optimal
Azure Arc-enabled servers is specifically architected to provide consistent management and governance across distributed environments without requiring workload migration or dedicated private WAN circuits.
Azure ExpressRoute
Azure ExpressRoute
What Azure ExpressRoute Is and Does
Azure ExpressRoute is a dedicated networking service that establishes a private, high-speed, and secure connection between an enterprise's on-premises infrastructure and Microsoft cloud services. This dedicated connection bypasses the public internet to deliver predictable latency and enhanced network reliability.
Why It Doesn't Meet the Requirement
- Network Layer Only: ExpressRoute operates strictly at the network layer (OSI Layer 3) and provides private network connectivity, not server management or governance.
- No Policy Enforcement: It does not include management agents, Azure Policy integration, or compliance auditing for guest operating systems.
- Does Not Project Resources: Establishing a private network circuit does not register external Windows or Linux servers as managed resources inside the Azure portal.
Key Characteristics and Limitations
- Provides private bandwidth through a connectivity partner rather than public internet routing.
- Secures data transfer between local datacenters and Azure virtual networks.
- Requires physical telecommunications infrastructure and contractual agreements with network providers.
This Answer Would Be Correct If
The scenario required dedicated, low-latency, private network connectivity between an on-premises datacenter and Azure services without routing traffic over the public internet.
Additional Context
Azure Arc can communicate over ExpressRoute or the public internet via the Azure Connected Machine agent, but ExpressRoute itself is purely a connectivity mechanism.
Azure Resource Mover
Azure Resource Mover
What Azure Resource Mover Is and Does
Azure Resource Mover is a native service that helps organizations move existing Azure resources across different Azure regions. It simplifies regional migration workflows by identifying resource dependencies, validating prerequisites, and managing the replication and relocation of cloud resources.
Why It Doesn't Meet the Requirement
- Scoped to Azure-Native Resources: Azure Resource Mover only operates on resources that already exist inside Azure, such as Azure VMs, SQL databases, and virtual networks.
- No External Server Support: It cannot manage, discover, or project servers located in on-premises datacenters or external multi-cloud environments.
- Relocation Rather Than Management: It is an operational tool for moving resources across regions, not a control plane for applying governance and policies.
Key Characteristics and Limitations
- Manages dependency validation when moving infrastructure between Azure cloud regions.
- Coordinates staging, commit, and discard operations for regional migrations.
- Cannot enforce Azure Policy or monitor non-Azure infrastructure.
This Answer Would Be Correct If
A company needed to relocate a complex set of existing Azure Virtual Machines and dependent virtual networks from one Azure region to another to meet data residency or disaster recovery requirements.
Additional Context
To manage hybrid infrastructure outside of Azure without relocating it, organizations must rely on Azure Arc rather than regional migration tools.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc Hybrid Multi-Cloud Management
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc Hybrid Server Management
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure VPN Gateway vs ExpressRoute
Describe virtual networking, including the purpose of Azure virtual networks, subnets, peering, Azure DNS, Azure VPN Gateway, and ExpressRoute
ExpertAZ-500 Microsoft Azure Security Technologies Exam
Application Permissions vs Delegated Permissions
Configure app registration permission scopes
Last updated Validated