Exam AZ-800 topic 8 question 1 discussion

Azure Arc enables organizations to manage servers, Kubernetes clusters, and applications anywhere, on-premises, multi-cloud, and edge, using the same management tooling as Azure resources in the cloud. To support configuration management policies, you need to deploy the Azure Connected Machine agent to all the servers. The agent will enable you to manage and enforce configuration policies on the servers from the Azure portal, ensuring that all servers comply with the desired state configuration defined in the policies.

https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview Azure Policy's machine configuration feature provides native capability to audit or configure operating system settings as code, both for machines running in Azure and hybrid Arc-enabled machines. The feature can be used directly per-machine, or at-scale orchestrated by Azure Policy. To manage settings inside a machine, a virtual machine extension is enabled and the machine must have a system-managed identity. The extension downloads applicable machine configuration assignment and the corresponding dependencies. The identity is used to authenticate the machine as it reads and writes to the machine configuration service. The extension isn't required for Arc-enabled servers because it's included in the Arc Connected Machine agent. C is correct

To connect hybrid machines to Azure, you install the Azure Connected Machine agent on each machine. This agent does not replace the Azure Log Analytics agent / Azure Monitor Agent. https://learn.microsoft.com/en-us/azure/azure-arc/servers/overview

since 22h2- the connected agent installs itself if you do the azure registration right with AZHCI- but if it does not install then you have to - here is some basic info #1 https://dp.stackhci.azure.com/health browse this with invoke-webrequest -url " https://dp.stackhci.azure.com/health" if you dont get a 200 then you will need to add this URL to their whitelist - this is proof for the cusotmer that MS changed - Please make a note of the Firewall Rule change for AZHCIOS here Firewall requirements for Azure Stack HCI - Azure Stack HCI | Microsoft Learn https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-overview