AZ-802 Manage Windows Server in a Hybrid Environment Practice Question
Exhibit
Error: 0x80072ee7. The Connected Machine agent failed to register with Azure. Connectivity check indicates DNS resolution failure for hybridresource.azure.com.
Refer to the exhibit. You are troubleshooting an Azure Arc onboarding failure. The server has an internet connection, but the registration script returns the provided error. What should you verify first?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Check the local DNS server forwarding settings
Error 0x80072ee7 indicates a DNS resolution failure, meaning the client cannot resolve the Azure service FQDNs. In hybrid scenarios, on-premises servers often rely on internal DNS servers that may not have access to public records or lack proper forwarding rules. Verifying the DNS configuration ensures the server can locate the necessary Azure endpoints, which is a prerequisite for the registration process to establish a secure handshake.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Verify the Azure Subscription Quotas
Why it's wrong here
Subscription quotas limit the number of resources in a tenant but do not cause DNS resolution errors. If a quota was reached, the error would manifest as an authorization or resource limit failure rather than a connectivity-related DNS lookup issue during the initial registration attempt for the agent.
- ✓
Check the local DNS server forwarding settings
Why this is correct
Since the server cannot resolve the Azure FQDN, the local DNS forwarders are likely misconfigured or restricted. Updating the forwarders to point to public DNS providers or correctly configuring conditional forwarders for Azure domains allows the server to resolve the necessary endpoints to complete the agent registration process.
- ✗
Validate the Azure Service Principal credentials
Why it's wrong here
Service Principal issues typically result in 'Access Denied' or authentication errors, not DNS resolution failures. Validating credentials is a valid troubleshooting step for identity-related problems, but it does not address the fundamental networking layer issue where the client cannot translate the Azure hostname into an IP address.
- ✗
Restart the Azure Connected Machine service
Why it's wrong here
Restarting the service might trigger a retry, but it will not fix an underlying DNS configuration issue. If the local resolver is unable to reach the Azure infrastructure, restarting the agent will simply result in the same error message because the root cause of the connectivity failure remains present.
Visual reference
About these practice questions
This AZ-802 question is part of Courseiva's 116-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.