MSDEVBUILD / azure

Azure Arc

Public cloud shared by many, pay as you go Private cloud just for one organisation Hybrid cloud both, securely connected
Azure Arc is a universal remote: manage servers in your building and other clouds from Azure.

😟 THE PROBLEM

Servers in the datacenter, Azure and another cloud each have different tools and rules.

😊 THE SOLUTION

Connect them all with Azure Arc and manage them from Azure.

  • Different tools for each environment✓ One Azure control plane
  • Inconsistent policies✓ Azure Policy everywhere
  • Security gaps on-premises✓ Defender for Cloud via Arc
🛠️ Solved with: Azure Arc
Module 3: Management & Governance ⏱ 5 min read Updated 11 Nov 2026

Quick answer

Azure Arc extends Azure management and governance to resources outside Azure: on-premises servers, servers in other clouds, Kubernetes clusters and data services. Once connected, they appear in Azure Resource Manager, so you can organise them with resource groups and tags, govern them with Azure Policy, secure them with Defender for Cloud, monitor them with Azure Monitor and control access with RBAC.

Exam objective: 3.3.3 Describe the purpose of Azure Arc. (Skills measured as of July 20, 2026)

Start with a question

Half your servers are in Azure, a quarter are in your datacenter and the rest are in another cloud. Do you need three management tools?

Not with Azure Arc. It brings all of them into one place: Azure.

Explain it like I’m 10

The technical explanation

Install the Arc agent (or connect a cluster), and the resource gets an Azure resource ID. From then on you can apply Azure Policy, enable Defender for Cloud, collect logs with Azure Monitor, patch with Azure Update Manager and manage access with RBAC, just like a native Azure resource.

Real-world business scenario

Retail

A retailer with stores and two clouds

The problem
Servers in stores, the datacenter and another cloud had different security tools and no single inventory.
What they used
Connected all servers with Azure Arc, then applied Azure Policy baselines and Defender for Cloud.
Why that choice
One control plane for governance and security everywhere.
The result
A single inventory and compliance report across all environments.

When to use it and when not to

✓ Use it when…

  • Hybrid or multi-cloud estates that need consistent management.

✕ Think twice when…

  • All-Azure estates (native management already covers you).
Ready for more?The full lesson adds the technical explanation, when to use it, interview questions and revision notes.

Interview preparation

Say your answer out loud first, then open the model answer. Interviewers care more about your reasoning than the exact words.

Beginner What is Azure Arc?

Model answer

A way to manage servers and clusters that are not in Azure, like on-premises machines or servers in AWS, from the Azure portal using the same Azure tools.

Intermediate What can Azure Arc manage?

Model answer

Servers (Windows and Linux), Kubernetes clusters, Azure data services, SQL Server, and virtual machines in VMware vSphere or System Center VMM environments.

Experienced developer What are the business benefits of Azure Arc?

Model answer

One control plane and inventory across environments, consistent policy and security, Azure Update Manager and Defender coverage for on-premises servers, and in some cases licensing benefits such as pay-as-you-go Extended Security Updates, without migrating the workloads.

Test yourself with exercises

3 original practice questions in the AZ-900 style. Pick your answers, then check them. You will see why each option is right or wrong. Score 75% or more and this topic is marked complete.

Question 1

Question 1 of 3

Which service lets you manage on-premises servers and servers in other clouds with Azure tools?

Question 2

Question 2 of 3 · Select 2

Which TWO resource types can Azure Arc manage?

Question 3

Question 3 of 3

Does Azure Arc migrate workloads into Azure?

Quick revision

Key points

  • Azure Arc manages resources outside Azure.
  • Covers servers, Kubernetes, data services, SQL Server and VMs in VMware/SCVMM.
  • Use Azure Policy, Defender for Cloud, Monitor, tags and RBAC on them.
  • Enables consistent hybrid and multi-cloud management.

Important terminology

Azure Arc
Extends Azure management to resources running outside Azure.
Arc-enabled server
A non-Azure Windows or Linux machine connected to Azure through the Arc agent.
Arc-enabled Kubernetes
A Kubernetes cluster anywhere, managed and governed from Azure.

Common mistakes

  • Thinking Arc migrates workloads into Azure. It manages them where they are.

Exam tips

  • "Manage on-premises and multi-cloud servers from Azure" = Azure Arc.

Five quick revision questions

  1. 1.What does Azure Arc do?Show

    Extends Azure management to resources outside Azure.

  2. 2.Name three resource types Arc can manage.Show

    Servers, Kubernetes clusters and data services (also SQL Server).

  3. 3.Does Arc move workloads into Azure?Show

    No, it manages them where they run.

  4. 4.Which Azure governance tool can apply rules to Arc servers?Show

    Azure Policy.

  5. 5.Can Arc manage servers in another public cloud?Show

    Yes.

Official references

Make it stick: play a quick gameSort It, Match the Pairs, Lightning Round and Who Am I? Earn XP and badges. Play ❯

Finished this lesson? Tick it off. Your progress is saved in this browser.

Next up: Infrastructure as Code (IaC)