Get Special Discount Offer on AZ-600 Dumps PDF [UPDATED Aug-2023]
PDF Download Microsoft Test To Gain Brilliante Result!
The Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub certification exam comprises various topics, including deploying and configuring infrastructure, implementing Azure Stack Hub functionality, and managing and monitoring Azure Stack Hub resources. Candidates must have a strong understanding of Azure services, virtualization technologies, and networking concepts to succeed in AZ-600 exam. AZ-600 exam format consists of multiple-choice questions, case studies, and scenario-based questions. Passing the Microsoft AZ-600 certification exam is a great way to validate your expertise in hybrid cloud environments and enhance your career prospects in the IT industry.
NEW QUESTION # 67
You schedule a planned maintenance window.
You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-updates?view=azs-2008
NEW QUESTION # 68
You need to change the int1 region to use the capacity model. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: Notify all the users in the int1 region and schedule a maintenance window.
Step 2: Select the subscription that was used to perform the initial registration.
Note: You need to change the int1 region to use the capacity model.
Change the billing model and registration name of the int1 region.
The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images.
Change billing model, how features are offered, or re-register your instance This section applies if you want to change the billing model, how features are offered, or you want to re-register your instance. For all of these cases, you call the registration function to set the new values. You don't need to first remove the current registration.
# select the subscription used during the registration
Select-AzSubscription -Subscription '<Registration subscription ID from portal>'
# rerun registration with new BillingModel (or same billing model in case of re-registration) but using other parameters values from portal Set-AzsRegistration -PrivilegedEndpointCredential $YourCloudAdminCredential -PrivilegedEndpoint
$YourPrivilegedEndpoint -BillingModel '<New billing model>' -RegistrationName '<Registration name from portal>' -ResourceGroupName '<Registration resource group from portal>' Step 3: Run the Set-AzsRegistration cmdlet.
You can use Set-AzsRegistration to register Azure Stack Hub with Azure and enable or disable the offer of items in the marketplace and usage reporting.
To run the cmdlet, you need:
A global Azure subscription of any type.
To be signed in to Azure PowerShell with an account that's an owner or contributor to that subscription.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-registration
Topic 2, Litware Office
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the button to return to the question.
Overview
Existing Environment
Network Environment
The Litware offices and the Fabrikam office connect by using a private circuit. Each office connects directly to the Internet.
Identity Environment
The Litware network contains an Active Directory forest named litwareinc.com. The forest and an Azure Active Directory (Azure AD) tenant named litwareinc.com are integrated by using Active Directory Federation Services (AD FS). Litware has an enterprise certification authority (CA).
The Azure subscriptions of Litware are associated to the litwareic.com Azure AD tenant.
Fabrikam also has an Azure AD tenant.
Azure Stack Hub Environment
Litware has the following two Azure Stack Hub integrated systems:
A fully operational integrated system in Boston that connects to the Internet and has the following configurations:
- Is managed by using an administrator management endpoint of:
https://adminportal.eastus.litwareinc.com
- Has an Azure App Service deployment that has two dedicated, large web workers
- Currently uses version 2005 of Azure Stack Hub
A newly delivered integrated system in Chicago that is disconnected from the Internet and will be managed by using an administrator management endpoint of:
https://adminportal.northcentralus.litwareinc.com
Datacenter Environment
The Chicago datacenter of Litware contains the infrastructure shown in the following table.
Current Problems
During heavy usage, requests to App Service in Boston fail despite low utilization of the web workers.
Requirements
Planned Changes
Litware plans to implement the following changes:
Deploy an Event Hubs resource provider to the integrated system in Boston.
Make Azure Functions available to Azure Stack Hub users in Boston.
Prepare the integrated system in Chicago to be production-ready.
Technical Requirements
Litware identifies the following technical requirements:
Implement an infrastructure to support Azure Functions on the integrated system in Boston.
Provision the certificates required to deploy the Event Hubs resource provider to the integrated system in Boston.
Configure an identity provider for the integrated system in Chicago.
Locate the IP address of the privileged endpoint (PEP) of the integrated system in Chicago.
Ensure that only operators have control over the creation of subscriptions on the integrated system in Chicago.
Provision a certificate to provide access to the Azure Resource Manager endpoint of the integrated system in Chicago.
Identify which PowerShell setting on CLIENT1 and CLIENT2 must be modified to register the integrated system in Chicago.
Implement a management app that will use Azure Resource Manager to inventory the resources of the integrated system in Chicago.
Security and Compliance Requirements
Litware has the following security and compliance requirements:
All infrastructure software must run the latest version, including hotfixes.
Litware must have control over certificate revocations.
Business Requirements
Litware wants to ensure that the users at Fabrikam have secure access to the workloads on the integrated system in Boston.
Updates and Hotfixes
The current hotfixes and updates available for Azure Stack Hub are:
2005
2005 hotfix 1
2005 hotfix 2
2005 hotfix 3
2008
2008 hotfix 1
2008 hotfix 2
2011 (latest version)
NEW QUESTION # 69
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to collect diagnostic logs, but do not have access to an SMB share.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From the administrator portal, create an Azure Storage account and a container
2 - Create a shared access signature (SAS)
3 - Connect to the privilleged endpoint(PEP)
4 - Run the Get-AzureStackLog cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION # 70
You plan to deploy a disconnected Azure Stack Hub integrated system.
You need to identify which type of certificate to use for the deployment and the file format for the certificate.
The solution must meet the following requirements:
* Minimize administrative effort.
* Maximize security.
What should identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Azure Stack Hub public key infrastructure (PKI) certificate requirements Azure Stack Hub has a public infrastructure network using externally accessible public IP addresses assigned to a small set of Azure Stack Hub services and possibly tenant VMs. PKI certificates with the appropriate DNS names for these Azure Stack Hub public infrastructure endpoints are required during Azure Stack Hub deployment.
Box 1: A certificate from an internal certification authority (CA)
Your Azure Stack Hub infrastructure must have network access to the certificate authority's Certificate Revocation List (CRL) location published in the certificate. This CRL must be an http endpoint. Note: for disconnected deployments, certificates issued by a public certificate authority (CA) are not supported, if the CRL endpoint is not accessible.
Features that are impaired or unavailable in disconnected deployments
Azure Stack Hub was designed to work best when connected to Azure, so it's important to note that there are some features and functionality that are either impaired or completely unavailable in the disconnected mode.
Private/internal Certificate Authority (CA)
No impact - In cases where the deployment uses certificates issued by a private CA, such as an internal CA within an organization, only internal network access to the CRL endpoint is required. Internet connectivity is not required, but you should verify that your Azure Stack Hub infrastructure has the required network access to contact the CRL endpoint defined in the certificates CDP extension.
Box 2: PFX
The certificate format must be PFX, as both the public and private keys are required for Azure Stack Hub installation. The private key must have the local machine key attribute set.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs
NEW QUESTION # 71
You deploy an Azure Stack Hub integrated system that contains an Azure App Service deployment. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to provide users with the ability to deploy App Service web apps directly from their GitHub repositories.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-configure-deployment-sources?vi
NEW QUESTION # 72
You need to identify the authentication and authorization process for the integrated system in Chicago. The solution must meet the technical requirements.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-identity?view=azs-2008
NEW QUESTION # 73
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.
You have a group named AppGroup1.
You need to provide an application with the ability to access Azure Stack Hub resources by using AppGroup1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-create-service-principals?view=azs-2008&tab
NEW QUESTION # 74
You have an Azure Stack Hub integrated system.
You need to update the integrated system to use a non-Windows NTP service that has a host name of ntp1.contoso.com.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-configure-time?view=azs-2008
NEW QUESTION # 75
Which command should you run from a privileged endpoint (PEP) session to collect only the required logs?
- A. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByRole "EventHub" - B. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByNode "EventHub" - C. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByResourceProvider "EventHub" - D. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION # 76
You have an Azure Stack Hub integrated system that connects to the internet.
You need to deploy Azure Event Hubs to the integrated system and ensure that users can create Event Hubs resources. The solution must minimize administrative effort.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-install?view=azs-2008&pivots=state-conne
NEW QUESTION # 77
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com as an identity provider.
You need to ensure that users from an Azure AD tenant named fabrikam.onmicrosoft.com can authenticate to the integrated system.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Download AzureStack-Tools
2 - Import the Download module
3 - Configure the contoso.onmicrosoft.com Azure AD tenant to allow sign-ins from fabrikam.onmicrosoft.com
4 - From the fabrikam.onmicrosoft.com Azure AD tenant, register the Azure Stack Hub directory Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008
NEW QUESTION # 78
You have an Azure Stack Hub integrated system.
You plan to deploy an Event Hubs resource provider that has the following requirements:
* Provides a 1 CU Azure Event Hubs cluster that requires a duster of 5x D11_V2 virtual machines
* Scales linearly as additional CUs are deployed
At a minimum, which other management resources are required for the Event Hubs resource provider?
- A. a cluster of ix D2_V2 virtual machines for management that does not scale as Event Hubs clusters are added
- B. a cluster of 3x D2_V2 virtual machines for management that scales linearly to a maximum of 10 as Event Hubs clusters are added
- C. a 1x D2_V2 virtual machine for management that scales linearly to a maximum of 10 nodes as Event Hubs clusters are added
- D. a 1x D2_V2 virtual machine for management that does not scale as Event Hubs clusters are added
Answer: C
Explanation:
Explanation
Resource provider resource consumption
The resource consumption by the Event Hubs resource provider is constant, and independent of the number or sizes of clusters created by users. The following table shows the core utilization by the Event Hubs resource provider on Azure Stack Hub, and the approximate resource consumption by other resources. The Event Hubs resource provider uses a D2_V2 VM type for its deployment.
Note: Cluster resource consumption
Your users will need to create Event Hubs clusters with CUs that meet their business requirements. To inform your decision on quota configuration, the following table shows:
The total cores used by a 1 CU Event Hubs cluster.
The approximate capacity required for consumption of other resources, including VM storage, memory, and storage accounts.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-capacity-planning
NEW QUESTION # 79
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a disconnected Azure Stack Hub integrated system.
You need to identify the IP address of the privileged endpoint (PEP).
Solution: From the administrator portal of Azure Stack Hub, you review the Region management blade.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Explanation
Instead: Solution: You run the nslookup AzS-ERCS01.azurestack.local command.
Note: nslookup is a network administration command-line tool for querying the Domain Name System to obtain the mapping between domain name and IP address, or other DNS records.
ASDK architecture, Virtual machine roles
The ASDK offers services using the following VMs hosted on the development kit host computer:
* AzS-ERCS01 - Emergency Recovery Console VM.
Reference:
https://docs.microsoft.com/en-us/azure-stack/asdk/asdk-architecture?view=azs-2008
NEW QUESTION # 80
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to install an update to an Azure Stack Hub integrated system.
You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.
Solution: From the administrator management endpoint, you run Test-AzureStack -Group "Default".
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
Correct: Solution: From a privileged endpoint (PEP) session, you run
Test-AzureStack -Group "UpdateReadiness".
Use a privileged endpoint (PEP) session and Test-AzureStack with UpdateReadiness.
Note:
Running the validation tool and accessing results
You can use the PEP to run the validation tool. The tool can take a while to run. The length of the time depends on the number of virtual machines in your system. Each test returns a PASS/FAIL status in the PowerShell window.
Here's an outline of the end-to-end validation testing process:
1. Establish the trust. On an integrated system, run the following command from an elevated Windows PowerShell session to add the PEP as a trusted host on the hardened VM running on the hardware lifecycle host or the Privileged Access Workstation.
2. Access the PEP.
3. Once you're in the PEP, run:
Test-AzureStack
Groups
To improve the operator experience, a Group parameter has been enabled to run multiple test categories at the same time. Currently, there are three groups defined: Default, UpdateReadiness, and SecretRotationReadiness.
UpdateReadiness: A check to see if the Azure Stack Hub instance can be updated. When the UpdateReadiness group is run, warnings are displayed as errors in the console output, and they should be considered as blockers for the update.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic-test?view=azs-2008
NEW QUESTION # 81
You need to identify the authentication and authorization process for the integrated system in Chicago. The solution must meet the technical requirements.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-identity?view=azs-2008
NEW QUESTION # 82
......
AZ-600 Dumps are Available for Instant Access: https://exam-labs.itpassleader.com/Microsoft/AZ-600-dumps-pass-exam.html