AZ-802 Manage Windows Server in a Hybrid Environment Practice Question
You are configuring Azure Arc-enabled servers for a fleet of Windows Servers. You need to ensure that the servers can be managed via Azure Policy. What is the mandatory prerequisite before installing the Azure Connected Machine agent?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Register the Microsoft.HybridCompute resource provider in the Azure subscription.
To enable Azure Arc management, the server must reach the internet to communicate with the Azure Resource Manager (ARM) endpoints. Registering the Microsoft.HybridCompute, Microsoft.GuestConfiguration, and Microsoft.HybridConnectivity resource providers in your subscription is required for the backend services to recognize and process the agent's heartbeat and policy compliance data, ensuring full integration with hybrid governance features.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable BitLocker drive encryption on the system drive.
Why it's wrong here
BitLocker is a security feature for data-at-rest protection and is unrelated to the agent registration process. Azure Arc functionality depends on identity and network connectivity rather than storage encryption settings, meaning this step provides no benefit for the onboarding of the server into the hybrid environment.
- ✗
Install the Azure CLI on the local Windows Server.
Why it's wrong here
The Azure Connected Machine agent does not require the Azure CLI to be present on the local machine. The agent uses its own built-in libraries to handle the secure connection to Azure, making the installation of the CLI redundant and an unnecessary overhead for the hybrid server.
- ✓
Register the Microsoft.HybridCompute resource provider in the Azure subscription.
Why this is correct
Azure Resource Providers must be registered at the subscription level for the specific services being used. Without the registration of Microsoft.HybridCompute, the Azure backend will reject the registration request from the agent, preventing the machine from appearing in the Azure portal as a managed resource.
- ✗
Configure a Site-to-Site VPN between the datacenter and Azure.
Why it's wrong here
The Azure Connected Machine agent communicates over HTTPS port 443 via standard outbound internet access. A Site-to-Site VPN is an architectural choice for private connectivity but is not a functional requirement for the agent to successfully register and report status to the Azure control plane.
About these practice questions
Courseiva writes every AZ-802 question from scratch — 116 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.