Examkin

Question

Difficulty: HardAzure Arc

A telecommunications company deploys its containerized billing applications on Kubernetes clusters hosted across Amazon Web Services (AWS) and Google Cloud Platform (GCP). Additionally, they host their legacy customer databases on bare-metal physical Linux servers within a private on-premises datacenter. The IT governance team wants to enforce resource configuration standards using Azure Policy and monitor security compliance using Microsoft Defender for Cloud across all these external environments from a single dashboard. They must achieve this without migrating any of the workloads or databases to Azure. Which Azure service should the company implement to meet these requirements?

  1. A
    Azure Stack Hub
  2. Azure ArcAnswer
  3. C
    Azure Lighthouse
  4. D
    Azure Automation

Answer

Azure Arc
Azure Arc is designed to project external resources—such as virtual or physical servers, Kubernetes clusters, and SQL databases located on-premises or in other public clouds (AWS, GCP)—into the Azure Resource Manager (ARM) control plane. Once registered, these resources can be governed, secured, and monitored using standard Azure services like Azure Policy and Microsoft Defender for Cloud just as if they were native Azure resources, fulfilling the scenario's requirements without requiring any workload migration.

Step-by-Step Solution

1
Analyze the requirements for governance and security auditing across multi-cloud (AWS, GCP) and on-premises physical servers without workload migration.
Identify that the solution must extend Azure management tools (Azure Policy, Microsoft Defender for Cloud) to non-Azure resources.
This establishes the scope of the required technology as a control plane extension rather than a migration or hardware hosting solution.
2
Evaluate the capabilities of Azure Arc against the requirements.
Azure Arc registers and projects external servers and Kubernetes clusters into Azure Resource Manager (ARM), enabling the use of Azure governance tools natively.
This directly satisfies the requirement of managing multi-cloud Kubernetes and on-premises physical Linux servers under a single dashboard using Azure Policy.

Key Concept

Azure Arc acts as a bridge that extends the Azure Resource Manager (ARM) control plane to non-Azure resources, allowing centralized management and governance of external servers, Kubernetes clusters, and databases.
Estimated Time:1m 30s
Rate this question

Topics

Azure Arc

More questions from this topic