Exam SC-100 topic 3 question 28 discussion

Actual exam question from Microsoft's SC-100

Question #: 28
Topic #: 3

Your company has a hybrid cloud infrastructure.
Data and applications are moved regularly between cloud environments.
The company's on-premises network is managed as shown in the following exhibit.

You are designing security operations to support the hybrid cloud infrastructure. The solution must meet the following requirements:
✑ Govern virtual machines and servers across multiple environments.
✑ Enforce standards for all the resources across all the environments by using Azure Policy.
Which two components should you recommend for the on-premises network? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. on-premises data gateway
B. Azure VPN Gateway
C. guest configuration in Azure Policy
D. Azure Arc
E. Azure Bastion

Show Suggested Answer

Suggested Answer: CD 🗳️

by PlumpyTumbler at Aug. 31, 2022, 1:45 a.m.

Comments

Submit Cancel

PlumpyTumbler

Highly Voted 1 year, 9 months ago

Selected Answer: CD

Simple process of elimination here, even if you're not sure. The other 3 options have nothing to do with governance. However, guest configuration policy is no longer called that. Answers could look different on the real test. Remember this is the Beta dump and SC-100 isn't in Beta anymore. https://docs.microsoft.com/en-us/azure/governance/machine-configuration/overview Not the answers: https://docs.microsoft.com/en-us/data-integration/gateway/service-gateway-onprem https://docs.microsoft.com/en-us/learn/modules/connect-on-premises-network-with-vpn-gateway/2-connect-on-premises-networks-to-azure-using-site-to-site-vpn-gateways

upvoted 15 times

zts

1 year, 9 months ago

its now called Guest configuration extension --> https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/guest-configuration

upvoted 7 times

...

Sec_Arch_Chn

Highly Voted 1 year, 6 months ago

Correct Answer. 'Azure Policy Guest Configuration is now called Azure Automanage Machine Configuration' Source: https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview

upvoted 8 times

...

cyber_sa

Most Recent 8 months, 3 weeks ago

Selected Answer: CD

got this in exam 6oct23. passed with 896 marks. I answered CD

upvoted 3 times

...

zellck

1 year, 1 month ago

Selected Answer: CD

CD is the answer. https://learn.microsoft.com/en-us/azure/azure-arc/overview Azure Arc simplifies governance and management by delivering a consistent multicloud and on-premises management platform. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/manage/azure-server-management/guest-configuration-policy You can use the Azure Policy guest configuration extension to audit the configuration settings in a virtual machine. Guest configuration supports Azure VMs natively and non-Azure physical and virtual servers through Azure Arc-enabled servers.

upvoted 3 times

...

KrishnaSK1

1 year, 4 months ago

Selected Answer: CD

https://learn.microsoft.com/en-us/azure/azure-arc/servers/learn/tutorial-assign-policy-portal Azure Policy supports auditing the state of your Azure Arc-enabled server with guest configuration policies. Azure Policy's guest configuration definitions can audit or apply settings inside the machine. ARC is mandate for governing virtual machines both on-premises and cloud through Azure Connected Machine agent https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-overview

upvoted 2 times

...

rdy4u

1 year, 9 months ago

Azure Policy Guest Configuration is now called Azure Automanage Machine Configuration Ref: https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview

upvoted 7 times

...