Microsoft Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub AZ-600 Exam Questions

Page: 1 / 14
Total 176 questions
Question 1

You have an Azure Stack Hub integrated system.

The retention period for storage accounts is set to 10 days.

In a user subscription, a user deletes a virtual machine that has four 500-GB unmanaged disks attached.

How will the storage be reclaimed?



Answer : A


https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts?view=azs-2008

Question 2

You need to configure name resolution to support the planned changes.

Which PowerShell cmdlet should you run?



Answer : B

Configure the integrated system to resolve external names by using a DNS Server that has an IP address of 10.100.100.100.

Resolving external DNS names from Azure Stack Hub

To resolve DNS names for endpoints outside Azure Stack Hub (for example: www.bing.com), you need to provide DNS servers that Azure Stack Hub can use to forward DNS requests for which Azure Stack Hub isn't authoritative. For deployment, DNS servers that Azure Stack Hub forwards requests to are required in the Deployment Worksheet (in the DNS Forwarder field). Provide at least two servers in this field for fault tolerance. Without these values, Azure Stack Hub deployment fails. You can edit the DNS Forwarder values with the Set-AzSDnsForwarder cmdlet after deployment.

Configure conditional DNS forwarding

Important

This only applies to an AD FS deployment.

To enable name resolution with your existing DNS infrastructure, configure conditional forwarding.

To add a conditional forwarder, you must use the privileged endpoint.

For this procedure, use a computer in your datacenter network that can communicate with the privileged endpoint in Azure Stack Hub.

1. Open an elevated Windows PowerShell session (run as administrator), and connect to the IP address of the privileged endpoint. Use the credentials for CloudAdmin authentication.

$cred=Get-Credential

Enter-PSSession -ComputerName <IP Address of ERCS> -ConfigurationName PrivilegedEndpoint -Credential $cred

2. After you connect to the privileged endpoint, run the following PowerShell command. Substitute the sample values provided with your domain name and IP addresses of the DNS servers you want to use.

Register-CustomDnsServer -CustomDomainName 'contoso.com' -Custom


https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-dns

Question 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system.

The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).

You need to create the list.

Solution: You connect to the administrator portal and view the users who are assigned the Owner role for the default provider subscription.

Does this meet the goal?



Answer : B


https://docs.microsoft.com/en-us/azure-stack/reference/pep-2002/get-cloudadminuserlist

Question 4

You have 20 computers that run Linux.

You deploy a disconnected Azure Stack Hub integrated system.

You need to ensure that users on the Linux computers can manage their Azure Stack Hub resources by using Azure Command-Line Interface (CLI).

What should you do first?



Answer : D

Add certificate

Export and then import Azure Stack Hub certificate for disconnected integrated systems and for the ASDK.

You need the CA root certificate for Azure Stack Hub to use Azure CLI on your development machine.

Export the Azure Stack Hub CA root certificate

Export the CA root certificate. To export the ASDK root certificate in PEM format:

Get the name of your Azure Stack Hub Root Cert:

1. Sign in to the Azure Stack Hub User or Azure Stack Hub Administrator portal.

Select the lock in the browser address bar.

In the pop-up window, select Connection is secure.

In the Certificate window, select the Certification Path tab.

Note down the name of your Azure Stack Hub Root Cert, for example, *.<locale>.<FQDN>

2. Sign in to the VM, open an elevated PowerShell prompt, and then run the following script:

$label = '*.<locale>.<FQDN> from step 1'

Write-Host 'Getting certificate from the current user trusted store with subject CN=$label'

$root = Get-ChildItem Cert:\CurrentUser\Root | Where-Object Subject -eq 'CN=$label' | select -First 1

if (-not $root)

{

Write-Error 'Certificate with subject CN=$label not found'

return

}

Write-Host 'Exporting certificate'

Export-Certificate -Type CERT -FilePath root.cer -Cert $root

Write-Host 'Converting certificate to PEM format'

certutil -encode root.cer root.pem


https://learn.microsoft.com/en-us/azure-stack/asdk/asdk-cli

https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-version-profiles-azurecli2

Question 5

You have an Azure Stack Hub integrated system that is not yet in production and has no workloads running.

You configure the Infrastructure Backup Service, and you complete a backup.

You need to recommend a method to verify the restore process once the integrated system is in production.

What should you recommend?



Answer : C


https://docs.microsoft.com/en-us/azure-stack/asdk/asdk-validate-backup?view=azs-2102

Question 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.

You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.

You need to ensure that Windows Server is licensed by using the bring-your-own-license model.

Solution: You add licenseType: None to the Azure Resource Manager template.

Does this meet the goal?



Answer : B


https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-windows-server-faq?view=azs-2008&tabs=az1%2Caz2

Question 7

You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Azure Active Directory (Azure AD) identity provider.

You need to update the Azure App Service resource provider.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.



Answer : A, B


https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-update?view=azs-2008&pivots=state-connected

Page:    1 / 14   
Total 176 questions