[Q89-Q112] LatestCram AZ-600 Real Exam Question Answers Updated [Jan 07, 2024]

[Q89-Q112] LatestCram AZ-600 Real Exam Question Answers Updated [Jan 07, 2024]

January 7, 2024 latestexam 0 Comments

Rate this post

LatestCram AZ-600 Real Exam Question Answers Updated [Jan 07, 2024]

Easily To Pass New Microsoft AZ-600 Dumps with 179 Questions

The Microsoft AZ-600 exam is intended for IT professionals who work with Azure Stack Hub and have experience with Azure services, virtualization, and networking. Candidates for AZ-600 exam should have a good understanding of Azure Stack Hub architecture, deployment models, and associated technologies. They should also be familiar with Azure Stack Hub administration, management, and troubleshooting.

Q89. You provision a new certificate to support the planned changes.
You need to validate the certificate.
Which PowerShell module should you install first?

Az.Websites

AzureRM.TemplateValidator

AzureStack

Microsoft.AzureStack.ReadinessChecker

Explanation
Use the Azure Stack Hub Readiness Checker tool to validate that generated public key infrastructure (PKI) certificates which are suitable for pre-deployment. Validate certificates by leaving enough time to test and reissue certificates if necessary.
The Readiness Checker tool performs the following certificate validations:
* Parse PFX
Checks for valid PFX file, correct password, and whether the public information is protected by the password.
* Expiry Date
Checks for minimum validity of seven days.
* Signature algorithm
Checks that the signature algorithm isn’t SHA1.
* Private Key
Checks that the private key is present and is exported with the local machine attribute.
* Etc.
Note: Perform core services certificate validation
Use these steps to validate the Azure Stack Hub PKI certificates for deployment and secret rotation:
1. Install AzsReadinessChecker from a PowerShell prompt (5.1 or above) by running the following cmdlet:
Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease
2. Create the certificate directory structure.
3. Etc.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs

Q90. You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com.
An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-rotate-secrets
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-monitor-health

Q91. You have an Azure Stack Hub integrated system that is enabled for multitenancy.
The Directories list for the integrated system is shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy

Q92. You have an Azure Stack Hub integrated system that has 10 user subscriptions. Each subscription contains approximately 50 virtual machines.
You are planning a backup and restore strategy for the integrated system.
You need to identify which type of backup to use to back up specific resources.
What should you identify for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-enable-backup-console?view=azs-200

Q93. You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-2008&tabs=az1%2Caz2&pivots=state-disconnected

Q94. You need to create a certificate for the Event Hubs resource provider. The solution must support the planned changes.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation
Box 1: Subject Alternative Name
Implement the App Service resource provider and the Event Hubs resource provider on the integrated system/ Only the Subject Alternative Name is used.

Box 2: DNS Name = =*.eventhub.east.azurestack.treyresearch.net
Event Hubs prerequisites
Procure public key infrastructure (PKI) SSL certificates for Event Hubs. The Subject Alternative Name (SAN) must adhere to the following naming pattern: CN=*.eventhub.<region>.<fqdn>. Subject Name may be specified, but it’s not used by Event Hubs when handling certificates. Only the Subject Alternative Name is used. See PKI certificate requirements for the full list of detailed requirements.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-prerequisites

Q95. You have an Azure Stack Hub integrated system that has 12 nodes. All the nodes run the latest firmware available from the OEM. The integrated system also has a hot spare node.
You receive an alert concerning the hardware on one of the nodes.
You need to replace the node as soon as possible. The solution must minimize disruptions to user workloads.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation
Graphical user interface, text, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-replace-node?view=azs-2008
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-node-actions?view=azs-2008&tabs=az1d5

Q96. You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to make a new image available in Azure Stack Hub Marketplace in the disconnected environment.
From a computer that has Internet access, you download all the required tools.
Which four actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Sign in to the Azure subscription used to register Azure Stack Hub
2 – Run the Install-Module -Name Azs.syndication.Admin command
3 – Run the Select-AzsMarketplaceItem cmdlet
4 – Run the Export-AzsMarketplaceItem cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-2008&tabs=az1%2Caz2&pivots=state-disconnected

Q97. You plan to deploy a disconnected Azure Stack Hub integrated system that has the following configurations:
* FQDN: contoso.local
* Region name: region1
* Internal domain name: contoso.com
You need to generate a certificate signing request (CSR) for the new deployment. The solution must prevent the common name (CN) value from being included in the certificate subject.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application, email Description automatically generated

Q98. You have two Azure subscriptions named sub1 and sub2. The subscriptions are linked to an Azure AD tenant named contoso.com.
You deploy on Azure Stack Hub integrated system and register the system with sub1.
You open a new PowerShell session and connect to sub1.
You need to register the Azure Stack Hub integrated system with sub2.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

1 – Select – AzSubscription
2 – Set – AzsRegistration
3 – Reset – datacenterIntegrationConfiguration

Q99. You open the Resource providers blade for a user subscription as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-services-resource-providers

Q100. You have an Azure Stack Hub Integrated system.
Outbound traffic from the Azure Stack Hub integrated system is controlled by a third-party firewall.
You need to implement the Infrastructure Backup Service.
Which storage location should you use for the backup, and which network port is required to perform the backup? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Q101. You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com.
An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Explanation
Box 1: 30 days
We cannot tell for sure without the exhibit. It would likely be either 30 or 90 days.
The Azure Stack Hub root certificate is provisioned during deployment with an expiration of five years.
Starting with 2108, internal secret rotation also rotates the root certificate. The standard secret expiration alert identifies the expiry of the root certificate and generates alerts at both 90 (warning) and 30 (critical) days.
Note: Manual remediation
If the Repair option is not supported, be sure to follow the complete set of remediation instructions provided in the alert. As an example, the internal certificate expiration remediation steps will guide you through the process of secret rotation:
Graphical user interface, text, application Description automatically generated

Box 2: running the Start-SecreatRotation -Internal PowerShell cmdlet from the priveged endpoint (PEP) session Start-SecretRotation cmdlet rotates the infrastructure secrets of an Azure Stack Hub system. This cmdlet can only be executed against the Azure Stack Hub privileged endpoint, by using an Invoke-Command script block passing the PEP session in the -Session parameter. By default, it rotates only the certificates of all external network infrastructure endpoints.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-rotate-secrets
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-monitor-health

Q102. You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table.

You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.
How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Explanation

Q103. You have an Azure Stack Hub integrated system that has the App Service resource provider. You have the App Service Environment (ASE) shown in the following table.

You need to ensure that web apps and function apps remain available during upgrades and maintenance events.
What is the minimum number of additional worker nodes you should deploy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation
D:\mudassar\Untitled.jpg

Q104. You have a connected Azure Stack Hub integrated system that uses Active Directory Federation Services (AD FS) as the identity provider.
You open a PowerShell session and store the GUID of an Azure subscription in a variable named
$SubscriptionlD.
You need to validate the AD FS integration.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Box 1: Connect-AzAccount
Steps to validate the Azure registration
1. Open an elevated PowerShell prompt, and then run the following command to install AzsReadinessChecker:
Install-Module -Name Az.BootStrapper -Force -AllowPrerelease
Install-AzProfile -Profile 2020-09-01-hybrid -Force
Install-Module -Name Microsoft.AzureStack.ReadinessChecker
2. From the PowerShell prompt, run the following command to set $subscriptionID as the Azure subscription to use. Replace xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx with your own subscription ID:
$subscriptionID = “xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx”
3. From the PowerShell prompt, run the following command:
Connect-AzAccount -subscription $subscriptionID
4. From the PowerShell prompt, run the following command to start validation of your subscription. Provide your Azure AD administrator and your Azure AD tenant name:
Invoke-AzsRegistrationValidation -RegistrationSubscriptionID $subscriptionID Box 2: Microsoft.AzureStack.ReadinessChecker Validate AD FS integration
1. On a computer that meets the prerequisites, open an administrative PowerShell prompt and then run the following command to install AzsReadinessChecker:
Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease
2. From the PowerShell prompt, run the following command to start validation. Specify the value for
-CustomADFSFederationMetadataEndpointUri as the URI for the federation metadata.
Invoke-AzsADFSValidation -CustomADFSFederationMetadataEndpointUri https://adfs.cont Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-registration
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-adfs

Q105. You have an Azure Stack Hub Integrated system.
Outbound traffic from the Azure Stack Hub integrated system is controlled by a third-party firewall.
You need to implement the Infrastructure Backup Service.
Which storage location should you use for the backup, and which network port is required to perform the backup? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Q106. In which three situations should you update the registration of an Azure Stack Hub integrated system? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

when you add or remove nodes for capacity-based billing

when you change the billing model

when you add or remove nodes for consumption-based billing

when you renew an annual capacity subscription

when you enable Azure Stack Hub for multitenancy

when you update the Azure Active Directory (Azure AD) home directory

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-registration?view=azs-2008&tabs=az1%2Caz

Q107. You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-

Q108. You have an Azure Stack Hub integrated system that uses an identity provider in Azure AD and contains a SQL resource provider.
You plan to implement the App Service resource provider.
You need to deploy a Microsoft SQL Server virtual machine that will be used by the App Service resource provider. The solution must minimize SQL Server licensing costs.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation

Q109. You have an Azure Stack Hub Integrated system that has the following configurations:
* Deployment virtual machine (DVM) IP address: 10.30.1.253
* First host IP address: 10.30.1.193
* Last host IP address: 10.30.1.254
* Subnet mask: 255.255.255.192
* BMC network: 10.30.1.192/26
* Default gateway: 10.30.1.193
* NTP: 10.31.1.2
* DNS: 8.8.8.8
You need to deploy an Operator Access Workstation (OAW) to the Hardware Lifecycle Host (HLH) and configure the network settings for the OAW.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q110. You have a connected Azure Stack Hub integrated system.
You perform the following tasks:
* On a server named SERVER1. you create a file share named AzSHLogs.
* You create a PowerShell remoting session to the privileged endpoint (PEP) of the integrated system.
* In a variable named $Session, you store a reference to the session.
* In a variable named $AdHinCredentials. you store a reference to the credentials required to write to AzSHLogs.
You need to collect the Hyper-V event logs for all the cluster hosts and copy the logs to the AzSHLogs share.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

Explanation

Box 1: $using:AdminCredentials
Box 2: Storage
Send Azure Stack Hub diagnostic logs by using the privileged endpoint (PEP) To run Get-AzureStackLog on an integrated system, you need to have access to the privileged endpoint (PEP).
Here’s an example script you can run using the PEP to collect logs.
$ipAddress = “<IP ADDRESS OF THE PEP VM>” # You can also use the machine name instead of IP here.
$password = ConvertTo-SecureString “<CLOUD ADMIN PASSWORD>” -AsPlainText -Force
$cred = New-Object -TypeName System.Management.Automation.PSCredential (“<DOMAIN NAME>\CloudAdmin”, $password)
$shareCred = Get-Credential
$session = New-PSSession -ComputerName $ipAddress -ConfigurationName PrivilegedEndpoint -Credential
$cred -SessionOption (New-PSSessionOption -Culture en-US -UICulture en-US)
$fromDate = (Get-Date).AddHours(-8)
$toDate = (Get-Date).AddHours(-2) # Provide the time that includes the period for your issue Invoke-Command -Session $session { Get-AzureStackLog -OutputSharePath “<EXTERNAL SHARE ADDRESS>” -OutputShareCredential $using:shareCred -FilterByRole Storage -FromDate $using:fromDate
-ToDate $using:toDate}
if ($session) {
Remove-PSSession -Session $session
}
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog

Q111. You plan to deploy an Azure Stack Hub integrated system that will connect to the internet.
You are planning the network design. You plan the address space for the public VIP network and the private network.
Which three additional networks are required for the Azure Stack Hub deployment? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

a switch infrastructure network

a DNS network

a storage network

a hypervisor network

a BMC network

an infrastructure network

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-network?view=azs-2008

Q112. You have a Windows Server-based certification authority (CA) and a disconnected Azure Stack Hub integrated system.
You need to issue a certificate that will be used to authenticate a service principal when the service principal accesses Azure Stack Hub resources.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation
Box 1: Microsoft legacy Cryptographic Service Provider (CSP) key provider Give an app access to Azure Stack Hub resources An application that deploys or configures resources through Azure Resource Manager must be represented by its own identity, known as a security principal. Just as a user is represented by a user principal, an app is represented by a service principal.
Create an app registration that uses a certificate credential
When creating a certificate credential, the following requirements must be met:
* The cryptographic provider must be specified as a Microsoft legacy Cryptographic Service Provider (CSP) key provider.
* The certificate format must be in PFX file, as both the public and private keys are required. Windows servers use .pfx files that contain the public key file (TLS/SSL certificate file) and the associated private key file.
* Etc.
Box 2: .pfx
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/give-app-access-to-resources

Loading …

Latest AZ-600 Study Guides 2024 – With Test Engine PDF: https://www.latestcram.com/AZ-600-exam-cram-questions.html

Free Cram & Latest Exams Dumps

[Q89-Q112] LatestCram AZ-600 Real Exam Question Answers Updated [Jan 07, 2024]

leave a comment Cancel reply

Recent Posts

Archives

Categories