Question 870 A PowerShell script can retrieve a VM but fails to delete it. What should be examined first? Effective RBAC, applicable resource locks and policies for the delete action Only the PowerShell prompt color Only the region pair's naming convention Assume a syntactically valid PowerShell command bypasses Azure RBAC Explanation Correct Answer A:Read permissions can differ from delete permissions and additional governance may block writes. Incorrect Answers B:Visual appearance doesn't grant DELETE. C:Region labels don't authorize deletes. D:Permissions are evaluated by the management plane regardless of whether an operation is scripted.
Question 871 A company operates servers in its own datacenter but wants them represented and managed through Azure control-plane tooling. Which service is relevant? Azure VM Scale Sets only Azure Blob Archive Maintain only a local spreadsheet of server names as connected Arc inventory Azure Arc-enabled servers Explanation Correct Answer D:Arc can project supported non-Azure machines into Azure for consistent management. Incorrect Answers A:VMSS manages Azure VM fleets, not arbitrary on-premises servers. B:An access tier doesn't integrate hybrid servers. C:A manual list does not onboard and project hybrid machine resources into Azure management.
Question 872 An organization has VMs in another cloud and wants consistent Azure management and governance features for eligible machines. Which solution should it evaluate? Create an ordinary Azure VM resource representing the server without onboarding Arc Azure VPN Gateway only as the full management solution An Azure VM availability set around other-cloud instances Azure Arc-enabled servers and supported integrations Explanation Correct Answer D:Arc extends selected Azure management capabilities to connected external machines. Incorrect Answers A:An Azure VM entry is not a substitute for connecting and managing an existing external server. B:Connectivity doesn't create Arc representation by itself. C:Availability sets don't contain non-Azure VMs.
Question 873 An on-premises server was discovered but does not appear as connected in Azure Arc. Which prerequisite should operators investigate? Create a manually named Azure resource entry without completing Arc machine enrollment Granting Reader on the Azure resource group without configuring agent outbound connectivity Arc agent enrollment, identity, outbound connectivity and supported status Installing the Arc agent but never completing identity registration for the machine Explanation Correct Answer C:Connected Machine agent registration underlies Arc server management. Incorrect Answers A:A label in the resource inventory cannot replace the connected-machine agent registration and service connectivity. B:Viewing the Azure resources does not establish the actual machine's agent connection to Azure Arc. D:Installation alone is insufficient if the service has no authenticated enrollment for that server.
Question 874 A compliance team wants to assess supported configuration policies for both Azure and Arc-enabled servers. What is an Arc value proposition? Apply compatible Azure Policy/management capabilities to onboarded external servers Arc is only a data-transfer appliance Arc automatically moves every external server's hardware into Azure Arc gives all users full administrator rights on every server Explanation Correct Answer A:Arc can extend governance consistency beyond Azure-hosted machines. Incorrect Answers B:Hybrid resource management differs from Data Box. C:Arc onboarding doesn't physically migrate equipment. D:Onboarding doesn't replace access governance.
Question 875 An executive sees an on-premises server in Azure portal after Arc onboarding and assumes it now runs on Azure VMs. What should be explained? An Arc agent is just a VM disk snapshot Arc representation does not by itself migrate workload execution to Azure A resource group name determines physical placement Every Arc resource is automatically converted into an Azure VM billed for compute Explanation Correct Answer B:The original machine can remain in its existing location. Incorrect Answers A:Onboarding isn't full disk replication. C:Administrative grouping doesn't move hardware. D:Arc is a management plane, not an automatic lift-and-shift.
Question 876 An Arc-enabled server is managed in Azure alongside cloud VMs. Who still owns upkeep of the physical on-premises machine? Assume Arc onboarding automatically fixes failed physical host hardware An Azure resource lock performs onsite repairs Microsoft assumes physical maintenance of every connected customer rack The customer or existing infrastructure operator Explanation Correct Answer D:Arc adds management integration but doesn't transfer on-premises facility responsibility. Incorrect Answers A:Azure Arc extends cloud management; it cannot replace on-premises physical repair processes. B:Locks constrain ARM operations. C:Remote management doesn't transfer hardware ownership.
Question 877 An administrator can see Arc-enabled servers but cannot assign a supported policy extension to them. What should be checked? Only the subscription's invoice name Azure RBAC permissions and extension/policy prerequisites for the Arc resource Give the operator only local Linux sudo privileges on the machine Grant local Windows Administrator but not the required Azure resource permissions Explanation Correct Answer B:Connected visibility doesn't automatically grant management write actions. Incorrect Answers A:Billing labels don't confer management actions. C:Local administrator rights do not give Azure RBAC access to Arc resources and their extensions. D:Local host rights do not confer Azure RBAC permissions to install or manage Arc extensions and policy assignments.
Question 878 An Arc-enabled machine loses outbound connectivity to Azure while its local workload continues serving users. What distinction matters? The disconnected machine must be physically deleted by Azure immediately Azure Arc management synchronization may be affected even though local execution remains possible Every local process automatically moves to a new Azure VM Assume an offline Arc agent immediately destroys all existing workloads Explanation Correct Answer B:Arc's control-plane connectivity is separate from the server's app runtime. Incorrect Answers A:Arc cannot erase an offline rack. C:Arc doesn't provide implicit migration. D:Arc connectivity loss affects Azure management communication, not the underlying server's independent execution.
Question 879 A security team wants Arc to apply supported security assessment or management integrations to connected servers. What must it plan? Turn off all endpoint protection because Arc is installed Assume Arc registration itself enables every paid protection feature Supported extensions, Defender integration or policy settings and required permissions Store a Global Admin password inside every Arc agent Explanation Correct Answer C:Hybrid security coverage needs appropriate onboarding and enabled capabilities. Incorrect Answers A:Resource representation doesn't replace security controls. B:Service plans have distinct enablement and billing. D:Hardcoded privileged credentials are inappropriate.
Question 880 A team uses Azure Arc for servers and assumes all Azure-native VM features work unchanged on every external machine. What should be validated? Any Arc server has an Azure host-level availability set by default Feature support and differences for the specific Arc-enabled resource type Arc creates unlimited virtual CPUs on the physical machine Every Arc agent includes a managed SQL database Explanation Correct Answer B:Not every native Azure VM capability automatically applies to hybrid resources. Incorrect Answers A:External servers retain their actual hosting environments. C:Management integration doesn't change hardware. D:Arc server onboarding isn't general app provisioning.
