Microsoft Microsoft Certifications AZ-600 Questions & Answers

• Question 91:

  You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Azure Active Directory (Azure AD) identity provider.

  You need to update the Azure App Service resource provider.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Download the App Service installer to a computer that can connect to the Azure Stack Hub endpoints

  B. Run appservice.exe as a local administrator

  C. From the Updates blade of the administrator portal, select the Resource providers section

  D. From the Updates blade of the administrator portal, select the infrastructure section

  E. From the administrator portal, select the update, download the update, and then install the update

  Correct Answer: AB

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service- update?view=azs-2008andpivots=state-connected

• Question 92:

  Which three components are required to configure an Azure Stack Hub infrastructure backup? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. an SMB file share in the trusted network perimeter

  B. credentials that have write access to storage

  C. an Azure Blob storage account

  D. an encryption certificate

  E. an SMB file share in Azure

  Correct Answer: ABD

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup- reference?view=azs-2008

• Question 93:

  You have a connected Azure Stack Hub integrated system.

  You deploy an Operator Access Workstation (OAW).

  You need to sign in to the OAW.

  Which account should you use?

  A. AdminUser

  B. AzureStackAdmin

  C. CloudAdmin

  D. GUser

  Correct Answer: A

  User account policy

  The following user account policy is applied to the OAW VM:

  Built-in Administrator username: AdminUser

  MinimumPasswordLength = 14

  PasswordComplexity is enabled

  MinimumPasswordAge = 1 (day)

  MaximumPasswordAge = 42 (days)

  NewGuestName = GUser (disabled by default)

  Reference:

  https://github.com/MicrosoftDocs/azure-stack-docs/blob/main/azure- stack/operator/operator-access-workstation.md

• Question 94:

  You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.

  You obtain certificates for the deployment.

  You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.

  Which PowerShell cmdlet should you run?

  A. Invoke-AzsHubDeploymentCertificateValidation

  B. Test-Certificate

  C. ConvertTo-AzsPFX

  D. Get-PfxCertificate

  E. New-AzsHubDeploymentCertificateSigningRequest

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki- certs?view=azs-2008 To validate certificates for other Azure Stack Hub services, change the value for - CertificateType. For example: # App Services Invoke-AzsHubAppServicesCertificateValidation -CertificatePath

  C:\Certificates\AppServices -pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com # DBAdapter Invoke-AzsHubDBAdapterCertificateValidation -CertificatePath C:\Certificates\DBAdapter - pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com # EventHubs Invoke-AzsHubEventHubsCertificateValidation -CertificatePath C:\Certificates https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki- certs?view=azs-2108#perform-core-services-certificate-validation

• Question 95:

  You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.

  You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.

  You need to ensure that Windows Server is licensed by using the bring-your-own-license model.

  Solution: You add licenseType: None to the Azure Resource Manager template.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-windows-server- faq?view=azs-2008andtabs=az1%2Caz2

• Question 96:

  You deploy a disconnected Azure Stack Hub integrated system.

  You need to identify the IP address of the privileged endpoint (PEP).

  Solution: From the administrator portal of Azure Stack Hub, you review the Region management blade.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead: Solution: You run the nslookup AzS-ERCS01.azurestack.local command.

  Note: nslookup is a network administration command-line tool for querying the Domain Name System to obtain the mapping between domain name and IP address, or other DNS records.

  ASDK architecture, Virtual machine roles

  The ASDK offers services using the following VMs hosted on the development kit host computer:

  * AzS-ERCS01 - Emergency Recovery Console VM.

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/asdk/asdk-architecture?view=azs-2008

• Question 97:

  You plan to publish a custom Azure Stack Hub Marketplace image.

  You need to define the name of the image, the name of the offer, and the name of the tenant that tenants will see when they deploy the image.

  Which JSON file should you modify?

  A. Manifest json

  B. Default Template json

  C. UIDefinitionjson

  D. Createduidefinition.json

  Correct Answer: A

  Note: Create a Marketplace item

  To create a custom marketplace item, do the following:

  1.

  Download the Azure Gallery Packager tool

  2.

  Create an Azure Resource Manager template or use our sample templates for Windows/Linux. These sample templates are provided in the packager tool .zip file you downloaded in step 1.

  3.

  Replace the following highlighted values (those with numbers) in the Manifest.json template with the value that you provided when uploading your custom image.

  4.

  Replace the following highlighted values (those with numbers) in the Manifest.json template with the value that you provided when uploading your custom image.

  5.

  Replace the following highlighted values (those with numbers) in the Manifest.json template with the value that you provided when uploading your custom image.

  The following template is a sample of the Manifest.json file:

  {

  "$schema": "https://gallery.azure.com/schemas/2015-10-01/manifest.json#", "name": "Test", (1)

  "publisher": "", (2)

  "version": "", (3)

  "displayName": "ms-resource:displayName", (4)

  "publisherDisplayName": "ms-resource:publisherDisplayName", (5) "publisherLegalName": "ms-resource:publisherDisplayName", (6) "summary": "ms-resource:summary", "longSummary": "ms-resource:longSummary",

  "description": "ms-resource:description",

  "longDescription": "ms-resource:description",

  "links": [

  { "displayName": "ms-resource:documentationLink", "uri":

  "http://go.microsoft.com/fwlink/?LinkId=532898" } ],

  "artifacts": [

  {

  "isDefault": true

  }

  ],

  "images": [{

  "context": "ibiza",

  "items": [{

  "id": "small",

  "path": "icons\\Small.png", (7)

  "type": "icon"

  },

  {

  "id": "medium",

  "path": "icons\\Medium.png",

  "type": "icon"

  },

  {

  "id": "large",

  "path": "icons\\Large.png",

  "type": "icon"

  },

  {

  "id": "wide",

  "path": "icons\\Wide.png",

  "type": "icon"

  }]

  }]

  }

  The following list explains the preceding numbered values in the example template:

  (1)

  - The name of the offer.

  (2)

  - The name of the publisher, without a space. (3) - The version of your template, without a space.

  (4)

  - The name that customers see.

  (5)

  - The publisher name that customers see.

  (6)

  - The publisher legal name.

  (7)

  - The path and name for each icon.

  Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and- publish-marketplace-item

• Question 98:

  You plan to install an update to an Azure Stack Hub integrated system.

  You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.

  Solution: From the administrator management endpoint, you run Test-AzureStack roup "UpdateReadiness".

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 99:

  You have a datacenter that hosts a Linux-based NTP server named ntp.contoso.com. The server has an IP address of 10.1.1.10.

  You plan to deploy an Azure Stack Hub integrated system.

  You need to configure the NTP server entry for the integrated system.

  What should you use?

  A. 10.1.1.10

  B. ntp.contoso.com

  C. 10.1.1.10.0x8

  D. ntp.contoso.com.0x4

  Correct Answer: B

• Question 100:

  You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.

  You deploy a new computer named Computer1 that runs Windows 11.

  You need to connect to the Azure Stack Hub Resource Manager (user) endpoint from Computer1 by using PowerShell.

  Which command should you run?

  A. Add-AzEnvironment-Name "AzureStackUser" -ArmEndpoint "https://adminmanagement.region1.fabrikam.com" Connect-AzAccount -EnvironmentName "AzureStackUser"

  B. Add-AzEnvironment -Name "AzureStackUser" -ArmEndpoint "https://management.region1.fabrikam.com" Connect-AzureRmAccount -EnvironmentName "AzureStackUser"

  C. Add-AzEnvironment -Name "AzureStackUser" -ArmEndpoint "https://portal.region1.fabrikam.com" Connect-AzAccount -EnvironmentName "AzureStackUser"

  D. Add-AzureEnvironment -Name "AzureStackUser" -ArmEndpoint "https://adminmanagement.region1.fabrikam.com"

  Connect-AzureRmAccount -EnvironmentName "AzureStackUser"

  Correct Answer: B

  A DNS entry is created for each endpoint in the external DNS zone that's specified at deployment time. For example, the user portal is assigned the DNS host entry of portal...

  * Azure Resource Manager (user)

  Management..

  Incorrect:

  Not C: Portal (user)

  Portal..

  Not A, Not D: Azure Resource Manager (administrator) Adminmanagement..

  Note: Portal (administrator)

  Adminportal..

  Reference:

  https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-endpoints