Examkin

Question

Difficulty: HardAzure Arc

A media broadcasting company operates containerized workloads on Kubernetes clusters running on Google Cloud Platform (GCP). The security team wants to enforce centralized compliance standards and configuration rules across these external workloads using the Azure control plane. Is it true that Azure Arc can be used to extend Azure resource governance tools to these external Kubernetes clusters?

Answer: Answer

Answer

True
The statement is correct because Azure Arc-enabled Kubernetes allows organizations to connect external clusters (such as those running on GCP) to Azure. This projection into the Azure control plane makes it possible to apply governance and compliance tools, such as Azure Policy, directly to those external workloads.

Step-by-Step Solution

1
Understand the capabilities of Azure Arc-enabled Kubernetes.
Azure Arc allows registration and projection of external Kubernetes clusters (including those on GCP, AWS, or on-premises) into the Azure Resource Manager (ARM).
To manage external resources, they must first be represented as resources in Azure's control plane.
2
Evaluate the applicability of Azure governance tools to Arc-enabled resources.
Once projected into ARM, external clusters can be governed using Azure Policy, Defender for Cloud, and Azure Monitor.
Azure Arc acts as a bridge that extends Azure's native governance and monitoring capabilities to non-Azure infrastructure.

Key Concept

Governance of hybrid and multi-cloud resources using Azure Arc
Estimated Time:1m 0s
Rate this question

Topics

Azure Arc

More questions from this topic