Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Azure Arc Extends Azure Management Beyond Azure
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An enterprise runs virtual machines and server workloads across multiple environments, including on-premises datacenters, other cloud providers, and Microsoft Azure.
The IT administration team needs a solution to achieve the following goals:
- Manage and govern all servers across on-premises, multicloud, and edge environments from a single unified control plane
- Extend Azure management tools, governance policies, and monitoring services to non-Azure machines without migrating the physical workloads
Which Azure service should the enterprise implement?
Explanations
Azure Arc
Azure Arc
What Azure Arc is
Azure Arc is a bridge that extends the Azure Resource Manager (ARM) control plane to resources outside of Azure. It enables organizations to project physical servers, virtual machines, and Kubernetes clusters running on-premises, at the edge, or in third-party clouds into Azure as first-class resources.
How it meets the requirements
- Unified control plane: Azure Arc allows administrators to view and manage hybrid and multicloud infrastructure alongside native Azure resources within the Azure portal.
- Centralized governance and monitoring: It projects non-Azure servers into Azure, making them accessible to standard Azure management services such as Azure Policy, Azure Monitor, and update management.
- No workload migration needed: The servers remain running in their original locations (on-premises or other clouds) while being registered and managed through Azure.
Key advantages and capabilities
- Consistent governance: Apply Azure Policy to audit and enforce compliance settings on non-Azure Windows and Linux servers.
- Centralized visibility: Query and organize assets across environments using Azure Resource Graph and standard resource tagging.
- Integrated security and monitoring: Enable Azure Monitor agents and Microsoft Defender protection across heterogeneous environments.
- Role-based access control: Apply standard Azure RBAC roles to non-Azure infrastructure.
Why this is optimal
Azure Arc is specifically engineered to provide unified management, security, and governance across hybrid and multicloud environments without requiring workload migration or network redesign.
Azure ExpressRoute
Azure ExpressRoute
What Azure ExpressRoute is
Azure ExpressRoute is a dedicated hybrid networking service that creates a private, high-speed connection between an organization's on-premises infrastructure and Microsoft cloud datacenters without routing traffic over the public internet.
Why it doesn't meet the requirement
While ExpressRoute provides reliable and secure network transport between on-premises sites and Azure, it does not provide a management plane, governance tools, or policy enforcement for servers running across hybrid or third-party cloud environments.
Key characteristics and limitations
- Network layer only: Operates at the network infrastructure level to establish private layer 3 connectivity.
- No governance plane: Cannot apply Azure Policy, inventory tracking, or resource configuration across non-Azure servers.
- High setup overhead: Requires coordination with an authorized network service provider and dedicated circuit provisioning.
This answer would be correct if
The scenario required a private, low-latency, and high-bandwidth network connection to transfer large volumes of data between an on-premises datacenter and Azure services.
Azure Site Recovery
Azure Site Recovery
What Azure Site Recovery is
Azure Site Recovery (ASR) is a cloud-based disaster recovery as a service (DRaaS) that orchestrates replication, failover, and recovery of physical and virtual machines to maintain business continuity during outages.
Why it doesn't meet the requirement
ASR focuses on business continuity and disaster recovery by replicating workloads to a secondary site or to Azure. It does not provide continuous governance, unified policy enforcement, or a central operational control plane for day-to-day hybrid server management.
Key characteristics and limitations
- Disaster recovery purpose: Designed to orchestrate failover drills and disaster recovery transitions during unplanned outages.
- Replication focus: Continuously synchronizes disk changes rather than projecting server configurations into Azure Resource Manager for daily management.
- No governance capabilities: Does not extend Azure Policy or native Azure configuration baselines across non-Azure servers.
This answer would be correct if
The enterprise needed a mechanism to replicate on-premises virtual machines to Azure to support automated failover and business continuity during an unexpected infrastructure failure.
Azure Synapse Analytics
Azure Synapse Analytics
What Azure Synapse Analytics is
Azure Synapse Analytics is an enterprise analytics service that accelerates time to insight across data warehouses and big data systems by combining data integration, enterprise data warehousing, and big data processing into a single environment.
Why it doesn't meet the requirement
Azure Synapse Analytics is designed for large-scale data queries, business intelligence, and reporting. It is not an infrastructure management service and cannot govern, configure, or monitor virtual machines and hybrid server fleets.
Key characteristics and limitations
- Data warehousing focus: Uses a massively parallel processing (MPP) architecture tailored for analytical querying and data warehousing.
- No machine management: Has no capability to register or enforce configuration policies on external servers.
- Unrelated use case: Operates strictly on analytical datasets rather than operational cloud and on-premises server resources.
This answer would be correct if
The scenario focused on combining relational and non-relational datasets to build a centralized enterprise data warehouse for reporting and data analytics.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc Hybrid Multi-Cloud Management
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc Hybrid Server Management
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Arc-enabled servers
Describe the purpose of Azure Arc
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Blob Storage
Compare Azure Storage services
IntermediateAZ-400 Designing and Implementing Microsoft DevOps Solutions Exam
Managed Identity for Azure DevOps Service Connections
Implement and manage Azure DevOps service connections and personalaccess tokens
Last updated Validated