Soru

Zorluk: OrtaAzure Arc

A game development studio runs its multiplayer matchmaking services on Kubernetes clusters located in an on-premises datacenter and on Amazon Web Services (AWS). The studio wants to use its existing Azure subscription to monitor compliance and enforce security policies across all of these Kubernetes clusters without migrating the underlying workloads to Azure. Which Azure service should the studio use to meet this requirement?

  1. A
    Azure Stack Hub
  2. B
    Azure Automation
  3. Azure ArcCevap
  4. D
    Azure Lighthouse

Cevap

Azure Arc
Azure Arc projects resources located outside of Azure (such as Kubernetes clusters running on-premises or on other clouds like AWS) into Azure Resource Manager (ARM). This enables administrators to apply Azure Policy, monitor health with Azure Monitor, and secure workloads using Microsoft Defender for Cloud from a single dashboard, meeting the studio's exact needs.

Adım Adım Çözüm

1
Analyze the requirements
The studio needs to apply security policies to Kubernetes clusters hosted outside of Azure (on-premises and AWS) without migration.
Understanding the constraint of managing external, non-Azure resources from a centralized control plane is key to selecting the correct governance service.
2
Evaluate the capabilities of Azure Arc
Azure Arc extends Azure Resource Manager (ARM) to manage resources outside Azure, including Kubernetes clusters.
This matches the requirement to use Azure Policy and monitoring for hybrid and multi-cloud environments.
3
Compare against distractors
Azure Stack Hub runs Azure services locally, Azure Automation handles process automation, and Azure Lighthouse manages multiple Azure tenants. None of these extend Azure governance to external multi-cloud clusters.
This rules out the incorrect options and confirms Azure Arc as the correct solution.

Anahtar Kavram

Extending Azure governance and management to hybrid and multi-cloud resources via Azure Arc
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular