SC-100 Certification Practice Question #157

Question

Your company has a hybrid cloud infrastructure.
Data and applications are moved regularly between cloud environments.
The company's on-premises network is managed as shown in the following exhibit.

You are designing security operations to support the hybrid cloud infrastructure. The solution must meet the following requirements:
✑ Govern virtual machines and servers across multiple environments.
✑ Enforce standards for all the resources across all the environments by using Azure Policy.
Which two components should you recommend for the on-premises network? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

The two requirements are (1) govern VMs/servers across multiple environments and (2) enforce standards with Azure Policy. Azure Arc (Connected Machine agent) is the component that projects on-premises and multicloud machines into Azure so they can be governed as `Microsoft.HybridCompute/machines`. Guest configuration in Azure Policy (now Azure Automanage Machine Configuration) is the feature that audits and enforces standards inside those machines as code. MS Learn explicitly pairs these two for hybrid governance. The official Suggested Answer "D" only captures Arc and is incomplete for a two-answer question; the community CD (18 votes, two Highly-Voted comments) plus MS Learn close that gap, so confidence stays high. The other three options serve connectivity or access, not governance, and are eliminated.

More SC-100 practice questions