Microsoft AZ-800 Exam - Topic 3 Question 72 Discussion

Actual exam question for Microsoft's AZ-800 exam

Question #: 72
Topic #: 3

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2.

A user named Admin1 is a member of the local Administrators group on Server1 and Server2.

You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1.

You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.

What should you do first?

AFrom the Azure portal, generate a new onboarding script.

BAssign Admin1 the Azure Connected Machine Onboarding role for RG1.

CHybrid Azure AD join Server1 and Server2.

DCreate an Azure cloud-only account for Admin1.

Show Suggested Answer

Suggested Answer: B

https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal

by Eliz at Jul 11, 2025, 07:05 AM

Limited Time Offer

25%

Off

Get Premium AZ-800 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Phyliss

2 months ago

I’m surprised this is even a question—shouldn't it be obvious?

upvoted 0 times

...

Goldie

3 months ago

I think generating the onboarding script is the way to go!

upvoted 0 times

...

Kimbery

3 months ago

Wait, why would you create a cloud-only account for Admin1? Seems unnecessary.

upvoted 0 times

...

Leota

3 months ago

Hybrid Azure AD join is crucial for this setup.

upvoted 0 times

...

Eleni

3 months ago

Definitely need to assign Admin1 the Azure Connected Machine Onboarding role first.

upvoted 0 times

...

Giovanna

3 months ago

Creating a cloud-only account for Admin1 seems like it could complicate things. I don't think that's the right approach.

upvoted 0 times

...

Melissa

4 months ago

I feel like hybrid Azure AD join is important, but I can't recall if it’s necessary before assigning roles.

upvoted 0 times

...

Annette

4 months ago

I remember a practice question where we had to generate an onboarding script from the Azure portal. Could that be the right answer here?

upvoted 0 times

...

Lynsey

4 months ago

I think we might need to assign the Azure Connected Machine Onboarding role to Admin1 first, but I'm not entirely sure if that's the first step.

upvoted 0 times

...

Kattie

4 months ago

I'm not entirely sure about the Hybrid Azure AD join option. I'll need to research that a bit more to understand if it's relevant in this scenario.

upvoted 0 times

...

Magnolia

4 months ago

Okay, the key here is ensuring Admin1 can configure the servers for Azure Arc management. I'm leaning towards option B - assigning the necessary role to Admin1 in the resource group.

upvoted 0 times

...

Cordie

5 months ago

Hmm, I'm a bit confused about the relationship between the on-premises Active Directory and Azure AD. I'll need to make sure I understand that properly before deciding on the best approach.

upvoted 0 times

...

Kimbery

5 months ago

This question seems straightforward. I think I'll start by reviewing the Azure Arc onboarding process and the required permissions.

upvoted 0 times

...

Elfrieda

7 months ago

Option C is the clear winner here. Hybrid Azure AD joining the servers is like putting the 'arc' in Azure Arc, am I right? *wink wink*

upvoted 0 times

Bulah

5 months ago

Definitely, hybrid Azure AD join is the way to go.

upvoted 0 times

...

Dalene

5 months ago

Option C is the clear winner here.

upvoted 0 times

...

Telma

7 months ago

I believe creating an Azure cloud-only account for Admin1 might also be a valid option to consider.

upvoted 0 times

...

Shenika

7 months ago

But what about hybrid Azure AD join for Server1 and Server2? Wouldn't that be necessary for Azure Arc management?

upvoted 0 times

...

Yuki

7 months ago

D is just a distraction. Creating a cloud-only account for Admin1 has nothing to do with managing the servers through Azure Arc. What were they thinking?

upvoted 0 times

Merilyn

5 months ago

Definitely, hybrid Azure AD join is the way to go for managing the servers through Azure Arc.

upvoted 0 times

...

Marjory

6 months ago

I agree, D is definitely a distraction. Assigning the role to Admin1 makes more sense.

upvoted 0 times

...

Dean

6 months ago

C) Hybrid Azure AD join Server1 and Server2.

upvoted 0 times

...

Kirby

6 months ago

B) Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

upvoted 0 times

...

Carey

7 months ago

This is a tricky one, but I think A is the way to go. Generating the onboarding script is the first step to get the servers connected to Azure Arc.

upvoted 0 times

...

Alpha

7 months ago

I agree, that sounds like the right first step to ensure Admin1 can configure Server1 and Server2.

upvoted 0 times

...

Louisa

7 months ago

I'm voting for B. Assigning the Azure Connected Machine Onboarding role to Admin1 is crucial for them to configure the servers in Azure Arc.

upvoted 0 times

Wynell

5 months ago

Agreed, assigning the role is the first step to ensure Admin1 can manage Server1 and Server2 with Azure Arc.

upvoted 0 times

...

Laquita

5 months ago

That sounds like the right choice. Admin1 needs that role to configure the servers in Azure Arc.

upvoted 0 times

...

Glenna

5 months ago

B) Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

upvoted 0 times

...

Nicolette

7 months ago

I think we should assign Admin1 the Azure Connected Machine Onboarding role for RG1.

upvoted 0 times

...

Iesha

7 months ago

Definitely go with option C. Hybrid Azure AD joining the servers is the key step to get them managed by Azure Arc. The other options don't seem relevant here.

upvoted 0 times

Leigha

6 months ago

That makes sense, it's the first step to get them managed by Azure Arc.

upvoted 0 times

...

Noble

7 months ago

I think we should go with option C and hybrid Azure AD join Server1 and Server2.

upvoted 0 times

...