Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Azure Arc Extends Azure Management to Any Infrastructure
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An enterprise operates virtual machines and Kubernetes clusters across its on-premises datacenter, Amazon Web Services (AWS), and Microsoft Azure.
The IT management team wants to establish a unified management plane that allows administrators to apply consistent Azure governance policies, role-based access control (RBAC), and security baselines across all environments from a single interface without migrating the underlying workloads.
Which Azure service should the enterprise implement?
Explanations
Azure ExpressRoute
Azure ExpressRoute
What Azure ExpressRoute Is
Azure ExpressRoute is a dedicated, private, high-speed physical network connectivity service that links an on-premises network directly to Microsoft cloud services without traversing the public internet.
Why It Doesn't Meet the Requirement
ExpressRoute provides network layer connectivity (Layer 3 transport), but it does not offer resource governance, policy enforcement, centralized compliance auditing, or management interfaces for virtual machines or Kubernetes clusters.
Key Characteristics and Limitations
- Dedicated Connectivity: Provides private, high-throughput, low-latency connections via connectivity providers.
- Network Infrastructure Only: Delivers data transport capabilities without providing resource management, tagging, or policy enforcement.
- No Governance Plane: Does not surface external servers as native manageable entities in the Azure portal.
This Answer Would Be Correct If
The enterprise required a secure, private, high-bandwidth connection between its on-premises datacenter and Azure Virtual Networks that avoids routing over the public internet.
Additional Context
Azure Arc communication can travel over public HTTPS connections or private routes like ExpressRoute, but ExpressRoute itself is purely the underlying network pipeline.
Azure Arc
Azure Arc
What Azure Arc Is
Azure Arc is a bridge that extends the Azure Resource Manager (ARM) control plane to resources located outside of native Azure, including on-premises datacenters, edge environments, and third-party cloud platforms like AWS and Google Cloud Platform (GCP).
How It Meets the Requirements
By installing the Azure Connected Machine agent or deploying Arc-enabled Kubernetes agents, non-Azure resources are projected into Azure as native ARM resources. This allows the enterprise to:
- View and manage hybrid and multi-cloud servers and clusters within the Azure portal.
- Apply Azure Policy definitions and guest configuration baselines uniformly regardless of resource location.
- Enforce standardized Azure Role-Based Access Control (Azure RBAC) and resource tagging across all environments.
Key Advantages and Capabilities
- Unified Visibility: Centralizes asset inventory and search across heterogeneous environments within a single management console.
- Consistent Governance: Applies compliance baselines and security standards across hybrid infrastructure at scale.
- Azure Service Deployment: Enables running Azure data services (such as Azure SQL Managed Instance) and application services on any Kubernetes cluster anywhere.
- At-Scale Automation: Facilitates GitOps-based configuration management and Azure extension management across distributed clusters.
Why This Is Optimal
Azure Arc directly addresses the requirement for centralized hybrid and multi-cloud governance without requiring workload migration or costly network redesigns, creating a consistent operational model.
Azure Lighthouse
Azure Lighthouse
What Azure Lighthouse Is
Azure Lighthouse is a multi-tenant management platform designed primarily for managed service providers (MSPs) and enterprise organizations with complex multi-tenant architectures.
Why It Doesn't Meet the Requirement
Azure Lighthouse enables delegated access and cross-tenant resource management within Azure subscriptions and tenants. However, it does not project external, non-Azure infrastructure (such as on-premises physical servers or AWS instances) into the Azure Resource Manager control plane.
Key Characteristics and Limitations
- Multi-Tenant Scoping: Focuses on cross-tenant delegated resource management rather than cross-cloud or hybrid infrastructure management.
- Tenant-Bound: Operates exclusively across Azure Active Directory (Microsoft Entra ID) tenant boundaries inside the Azure ecosystem.
- No Hybrid Projection: Cannot project on-premises physical or virtual machines into Azure Resource Manager on its own.
This Answer Would Be Correct If
A managed service provider needed to manage Azure resources across hundreds of distinct customer Azure tenants from a single centralized tenant without switching credentials.
Additional Context
While Azure Lighthouse can manage Azure Arc resources that have already been onboarded into customer subscriptions, Lighthouse itself cannot connect or manage external non-Azure hardware.
Azure Migrate
Azure Migrate
What Azure Migrate Is
Azure Migrate is a centralized hub for discovering, assessing, and migrating on-premises infrastructure, applications, and databases directly to Microsoft Azure.
Why It Doesn't Meet the Requirement
The enterprise explicitly requires managing and governing resources in place across hybrid and multi-cloud environments without migrating the underlying infrastructure. Azure Migrate is designed to move workloads into Azure rather than manage them externally.
Key Characteristics and Limitations
- Migration-Focused: Specializes in discovery, dependency mapping, sizing recommendations, and replication into native Azure IaaS or PaaS.
- Assessment Tooling: Evaluates readiness and estimated costs for running on-premises workloads inside Azure datacenters.
- Lifecycle Endpoint: Once migration is complete, the operational tracking in Azure Migrate ends as workloads become native Azure resources.
This Answer Would Be Correct If
The organization planned to decommission its on-premises datacenter and move all virtual machines and databases into Azure native services.
Additional Context
Azure Migrate helps move workloads into the cloud, whereas Azure Arc is intended to govern and manage workloads that permanently or temporarily remain outside Azure.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc Hybrid Server Management
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc-enabled servers
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Consumption-Based Model
Describe the consumption-based model
IntermediateAZ-400 Designing and Implementing Microsoft DevOps Solutions Exam
GitHub Branch Protection Rules and SAML SSO
Design and implement permissions and roles in GitHub
Last updated Validated