Microsoft Azure Fundamentals (AZ-900)Describe Azure architecture and servicesHard

A global manufacturing company uses various on-premises servers, edge devices, and virtual machines in other cloud providers. They want a single control plane to manage, govern, and secure all these distributed resources as if they were native Azure resources. Which Azure service should they utilize?

  1. AAzure Migrate
  2. BAzure Security Center
  3. CAzure Arc
  4. DAzure Resource Graph
Show answer & explanation

Correct answer: C. Azure Arc

Azure Arc extends Azure management capabilities to resources running anywhere – on-premises, at the edge, or in other clouds. It enables you to manage Windows and Linux servers, Kubernetes clusters, and Azure data services in hybrid and multi-cloud environments as if they were running in Azure, providing a single control plane.

Why the other options are wrong

  • A. Azure Migrate helps with the migration of on-premises workloads to Azure, not with ongoing management of resources outside Azure.
  • B. Azure Security Center provides unified security management and advanced threat protection but doesn't extend Azure's full management plane to external resources.
  • D. Azure Resource Graph provides efficient resource exploration for all resources in Azure, but it's an analytics service, not a management control plane for external resources.

Azure Arc

A bridge that extends the Azure management and governance capabilities to resources running anywhere – on-premises, at the edge, or in other cloud providers.

  • Extends Azure management to hybrid/multi-cloud
  • Single control plane for distributed resources
  • Manages servers, Kubernetes, data services
  • Apply Azure Policy, Monitor, Security Center to external resources

Memory trick: Azure Arc connects all your disparate resources under one Azure roof.

More Describe Azure architecture and services questions