Question

Difficulty: MediumAzure Arc

A biotechnology company operates a mix of physical Windows servers in their local laboratories and Linux virtual machines on Amazon Web Services (AWS). The company wants to enforce security compliance guidelines using Azure Policy and view the compliance status of all these servers in a single pane of glass within the Azure portal, without migrating the workloads. Which Azure service should the company use to meet these requirements?

  1. Azure ArcAnswer
  2. B
    Azure Stack Hub
  3. C
    Azure Automation
  4. D
    Azure Lighthouse

Answer

Azure Arc is the correct service because it projects non-Azure infrastructure into Azure Resource Manager (ARM), allowing governance tools like Azure Policy to be applied directly to on-premises servers and virtual machines running in other cloud providers.
The correct service is Azure Arc. It serves as a management bridge that projects resources outside Azure (such as on-premises virtual or physical servers and virtual machines in AWS) into Azure Resource Manager. Once projected, these resources can be governed, monitored, and secured using native Azure tools like Azure Policy and Microsoft Defender for Cloud.

Step-by-Step Solution

1
Identify the primary goal of the scenario.
The goal is to apply Azure Policy and view compliance for physical on-premises servers and virtual machines in Amazon Web Services (AWS) without migrating them.
This establishes that we need a management bridge between Azure and non-Azure environments.
2
Evaluate the capabilities of the proposed Azure management tools.
Azure Arc is designed specifically to extend Azure Resource Manager (ARM) capabilities to resources outside Azure (on-premises and multi-cloud).
This allows resources like Windows/Linux servers and Kubernetes clusters running outside of Azure to be managed as if they were native Azure resources.

Key Concept

Azure Arc enables hybrid and multi-cloud management by projecting external resources into Azure Resource Manager.
Rate this question

Topics