Question
You have an Azure subscription that contains the following resources.
✑ An Azure Log Analytics workspace
✑ An Azure Automation account
✑ Azure Arc
You have an on-premises server named Server1 that is onboarded to Azure Arc.
You need to manage Microsoft updates on Server1 by using Azure Arc.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. From the Automation account, enable Update Management for Server1. Correct
- B. From the Virtual machines data source of the Log Analytics workspace, connect Server1.
- C. On Server1, install the Azure Monitor agent Correct
- D. Add Microsoft Sentinel to the Log Analytics workspace
Explanation
Update Management in Azure Automation (now retired and replaced by Azure Update Manager) supports Azure Arc-enabled servers. You enable Update Management for Server1 from the Automation account (option A), and Server1 must run the monitoring agent that reports update assessment data to the Log Analytics workspace linked to the Automation account (option C); on an Arc-enabled server this agent is deployed as a VM extension. Server1 is already managed by Azure Arc through its Connected Machine agent, so the monitoring agent is needed for update data, not for Arc itself. The Virtual machines data source of a Log Analytics workspace connects only Azure VMs, not on-premises Arc-enabled servers (option B), and Microsoft Sentinel is a security analytics service that plays no part in managing updates (option D).
