Question 880 A team uses Azure Arc for servers and assumes all Azure-native VM features work unchanged on every external machine. What should be validated? Any Arc server has an Azure host-level availability set by default Feature support and differences for the specific Arc-enabled resource type Arc creates unlimited virtual CPUs on the physical machine Every Arc agent includes a managed SQL database Explanation Correct Answer B:Not every native Azure VM capability automatically applies to hybrid resources. Incorrect Answers A:External servers retain their actual hosting environments. C:Management integration doesn't change hardware. D:Arc server onboarding isn't general app provisioning.
Question 881 A company has a Kubernetes cluster outside Azure but wants selected Azure governance and configuration tools. Which service family may be relevant? Create ordinary Azure VM Scale Set instances instead of connecting the external Kubernetes cluster Azure Virtual Desktop host pooling Azure Arc-enabled Kubernetes for supported clusters A Blob Archive lifecycle rule Explanation Correct Answer C:Arc can connect external Kubernetes clusters to eligible Azure management features. Incorrect Answers A:A VM fleet is not equivalent to onboarding an existing non-Azure Kubernetes cluster to Arc management. B:AVD isn't Kubernetes management. D:Storage tiering doesn't attach a cluster to Azure.
Question 882 An administrator believes Azure Arc is a dedicated private network circuit to on-premises servers. What distinction is correct? Arc is a public website hosting plan Arc is a management integration; private network transport requires separate networking choices Arc replaces all server authentication protocols automatically Arc is identical to a site-to-site VPN Gateway Explanation Correct Answer B:Arc onboarding and VPN/ExpressRoute solve different problems. Incorrect Answers A:Hybrid resource management isn't HTTP application hosting. C:Connected management doesn't eliminate local identity requirements. D:A connected agent doesn't terminate corporate IPsec tunnels.
Question 883 A finance team adds several hundred external servers to Azure Arc. What cost assumption should it avoid? Onboarding always turns each external server into a paid Azure VM Budget only for Arc onboarding and assume every connected service and extension is free Arc and enabled management/protection services can have different licensing or billing conditions Every Arc feature is included free without usage or plan limits Explanation Correct Answer C:Hybrid inventory presence doesn't make every connected capability universally free. Incorrect Answers A:Physical compute remains outside Azure. B:Some associated Azure management services can have billable capabilities and require a separate cost review. D:Eligible services may incur costs.
Question 884 An on-premises server appears in an Azure resource group after Arc onboarding. What should a developer infer about its location? A resource group's name rewires the server's network The resource group organizes management metadata, not the physical server's location An Arc resource cannot have Azure RBAC applied The resource group physically hosts the on-premises motherboard Explanation Correct Answer B:The external machine can remain in its datacenter. Incorrect Answers A:Names don't relocate network links. C:Supported Arc resources participate in Azure management permissions. D:ARM is a logical control plane.
Question 885 An Arc-enabled server fails a configuration assessment, and staff expect every policy setting to repair itself instantly. What should they validate? Whether the specific policy, extension and remediation mechanism supports that Arc resource Change only the Arc resource tag to Compliant without checking supported configuration Arc registration is equivalent to replacing its operating system Every Arc policy has an unconditional auto-fix effect Explanation Correct Answer A:Coverage and remediation behavior differ by policy and connected machine state. Incorrect Answers B:Metadata does not remediate missing host settings or guarantee the machine passes policy evaluation. C:Management onboarding isn't a guest reinstallation. D:Policy evaluations can audit without remediation.
Question 886 A cloud administrator can inventory an Arc-enabled SQL host but cannot query its databases. Which distinction applies? Azure management visibility doesn't automatically authorize database data queries A resource group cost tag is a SQL password Assume Arc inventory visibility gives every Azure user unrestricted access to the machine's data Arc resource Reader grants all data-reader roles by default Explanation Correct Answer A:Database authentication and network access remain separate. Incorrect Answers B:Tags aren't database credentials. C:Inventory connection is not an automatic grant of operating-system or application-data authorization. D:Management listing isn't arbitrary SQL access.
Question 887 An Arc-enabled machine is reported compromised, and security wants coordinated control. What is a defensible next step? Disable Arc monitoring and treat the absence of alerts as containment Assume the Arc resource can be deleted to guarantee hardware wipe Use supported Arc/security tools alongside existing host incident-response procedures Disable every audit log to improve response speed Explanation Correct Answer C:Management integrations help but don't replace containment decisions for the real machine. Incorrect Answers A:Suppressing telemetry does not isolate the compromised machine or complete host incident response. B:Removing representation may leave the host running. D:Logs are important investigation evidence.
Question 888 A development organization wants Azure infrastructure configurations stored as code and reviewed with applications. What practice is being adopted? Manual screenshot-based deployments only Use manually written portal notes as the sole infrastructure source A storage account access tier as the resource blueprint Infrastructure as code (IaC) Explanation Correct Answer D:IaC represents intended infrastructure in versioned, automated definitions. Incorrect Answers A:Images of settings aren't repeatable executable infrastructure. B:Human notes cannot be reliably executed as a declarative, versioned deployment definition. C:Tiering isn't a complete infrastructure definition.
Question 889 A team deploys the same test environment every week and wants to avoid different manual portal choices. What IaC benefit helps? A new billing account for every deployment One person's memory of portal clicks Randomly changing resource parameters each run Repeatable declarative infrastructure definitions with reviewed inputs Explanation Correct Answer D:Versioned templates reduce accidental configuration drift across rebuilds. Incorrect Answers A:Billing doesn't encode desired infrastructure. B:Manual recall is inconsistent. C:Uncontrolled changes defeat reproducibility.
Question 890 An audit requires a record of who approved infrastructure changes and what properties changed. Which IaC practice supports this? Store reviewed infrastructure definitions in version control with change history Keep only manually exported portal screenshots after each deployment Keep all instructions only in a developer's terminal history Delete earlier templates after each rollout Explanation Correct Answer A:Source commits and reviews create a useful intent audit trail. Incorrect Answers B:Screenshots do not provide the reviewable, version-controlled infrastructure definitions and approval history required. C:Local history isn't reliable shared change control. D:Removing history obscures changes.
