Microsoft Microsoft Certifications AZ-600 Questions & Answers

• Question 131:

  You plan to deploy an Azure Stack Hub integrated system that will connect to the Internet.

  You need to define the public VIP pool.

  What is the smallest subnet mask that you can use for the public VIP pool?

  A. /22

  B. /25

  C. /26

  D. /27

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-network?view=azs-2008

• Question 132:

  You have an Azure Stack Hub integrated system.

  The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).

  You need to create the list.

  Solution: From a privileged endpoint (PEP) session, you run the Get-AzureStackStampInformation cmdlet.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure-stack/reference/pep-2002/get- cloudadminuserlist

• Question 133:

  You have an Azure Stack Hub integrated system.

  The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).

  You need to create the list.

  Solution: You connect to the administrator portal and view the users who are assigned the Owner role for the default provider subscription.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure-stack/reference/pep-2002/get-cloudadminuserlist

• Question 134:

  You plan to install an update to an Azure Stack Hub integrated system.

  You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.

  Solution: From the administrator management endpoint, you run Test-AzureStack-Group "Default".

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Correct: Solution: From a privileged endpoint (PEP) session, you run Test-AzureStack roup "UpdateReadiness".

  Use a privileged endpoint (PEP) session and Test-AzureStack with UpdateReadiness.

  Note:

  Running the validation tool and accessing results You can use the PEP to run the validation tool. The tool can take a while to run. The length of the time depends on the number of virtual machines in your system. Each test returns a PASS/

  FAIL status in the PowerShell window.

  Here's an outline of the end-to-end validation testing process:

  1.

  Establish the trust. On an integrated system, run the following command from an elevated Windows PowerShell session to add the PEP as a trusted host on the hardened VM running on the hardware lifecycle host or the Privileged Access Workstation.

  2.

  Access the PEP.

  3.

  Once you're in the PEP, run:

  Test-AzureStack

  Groups

  To improve the operator experience, a Group parameter has been enabled to run multiple test categories at the same time. Currently, there are three groups defined: Default, UpdateReadiness, and SecretRotationReadiness.

  UpdateReadiness: A check to see if the Azure Stack Hub instance can be updated. When the UpdateReadiness group is run, warnings are displayed as errors in the console output, and they should be considered as blockers for the update.

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic- test?view=azs-2008

• Question 135:

  You plan to install an update to an Azure Stack Hub integrated system.

  You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.

  Solution: From a privileged endpoint (PEP) session, you run

  Test-AzureStack-Group "UpdateReadiness".

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic- test?view=azs-2008

• Question 136:

  You have a multitenant Azure Stack Hub integrated system for a Cloud Solution Provider (CSP). The integrated system is used by several customers.

  You hire a new support technician to help manage the integrated system.

  You need to configure access for the support technician. The solution must meet the following requirements:

  The technician must be prevented from accessing customer resources. The technician must be able to monitor the status of infrastructure backups. The technician must be able to create and manage plans, offers, and quotas.

  Which built-in role should you assign to the support technician?

  A. Reader

  B. Owner

  C. Use Access Administrator

  D. Contributor

  E. Backup Operator

  Correct Answer: D

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage- permissions?view=azs-2008

• Question 137:

  You have an Azure Stack Hub integrated system.

  You plan to install the Event Hubs resource provider.

  You purchase a public wildcard certificate that has a subject name of *.eventhub.chicago.contoso.com. The path to the certificate is C:\Certificates\ssl.pfx.

  You need to validate whether the certificate meets the requirements of Azure Event Hubs.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Install the AzureStack.Identity PowerShell module

  B. Rename the certificate file as Eventhub.pfx

  C. Run the Invoke-AzsHubEventHubsCertificateValidation cmdlet

  D. Run the Invoke-AzsHubDeploymentCertificateValidation cmdlet

  E. Install the Microsoft.AzureStack.ReadinessChecker Powershell module

  F. Convert the Ssl.pfx file to a CER file

  Correct Answer: DE

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki- certs?view=azs-2008

• Question 138:

  You have an Azure Stack Hub integrated system.

  You need to add GPUs to the integrated system. The solution must minimize downtime of the existing Azure Stack Hub workloads.

  Which PowerShell cmdlet should you run first?

  A. Scop-AzureScack

  B. Resec-DacacencerlncegrationConfiguration

  C. Rescarc-AzsInfrascruccureRolelnscance

  D. Disable-AzsScaleUnitNode

  Correct Answer: A

  Note: Upgrade GPUs or add to an existing node

  The following section provides a high-level overview of the process to add a GPU.

  The entire scale unit must be shut down, as a rolling GPU upgrade isn't supported. Stop Azure Stack Hub using the steps documented in the Start and stop Azure Stack Hub article.

  Add or upgrade the memory on each physical computer using your hardware manufacturer's documentation.

  Start Azure Stack Hub using the steps in Start and stop Azure Stack Hub.

  Note: Stop Azure Stack Hub

  Stop or shut down Azure Stack Hub with the following steps:

  1.

  Prepare all workloads running on your Azure Stack Hub environment's tenant resources for the upcoming shutdown.

  2.

  Open a privileged endpoint session (PEP) from a machine with network access to the Azure Stack Hub ERCS VMs. For instructions, see Using the privileged endpoint in Azure Stack Hub.

  3.

  From the PEP, run:

  Stop-AzureStack

  Wait for all physical Azure Stack Hub nodes to power off.

  Note

  You can verify the power status of a physical node by following the instructions from the original equipment manufacturer (OEM) who supplied your Azure Stack Hub hardware.

  4.

  (Optional) If the stop operation times out, you can monitor its progress using the following PowerShell cmdlet: Get-ActionStatus Stop-AzureStack Reference: https://learn.microsoft.com/en-us/azure-stack/operator/manage-gpu-capacity https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-start-and-stop

• Question 139:

  You have an Azure Stack Hub integrated system linked to an Azure AD tenant.

  You need to back up virtual machines in user subscriptions. The solution must meet the following requirements:

  Back up running virtual machines.

  Maximize resiliency.

  What should you use?

  A. Azure Backup Server

  B. disk snapshots

  C. Infrastructure Backup Service

  D. Microsoft System Center Data Protection Manager (DPM)

  Correct Answer: A

  Backup-restore

  Backing up your applications and datasets enables you to quickly recover from downtime due to data corruption, accidental deletions, or disasters. For IaaS VM-based applications you can use an in-guest agent to protect application data,

  operating system configuration, and data stored on volumes.

  Note: Azure Backup provides independent and isolated backups to guard against unintended destruction of the data on your VMs. Backups are stored in a Recovery Services vault with built-in management of recovery points. Configuration and scaling are simple, backups are optimized, and you can easily restore as needed. Reference: https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-manage-vm-protect https://learn.microsoft.com/en-us/azure/backup/backup-azure-vms-introduction

• Question 140:

  You have a disconnected Azure Stack Hub integrated system.

  You deploy an Operator Access Workstation (OAW) virtual machine image.

  Which management tool should be installed manually on the image?

  A. AzureStack-Tools

  B. Azure Storage Explorer

  C. Windows Admin Center

  D. AzCopy

  Correct Answer: C

  Windows Admin Center is a new, locally-deployed, browser-based management tool set that lets you manage your Windows Servers with no Azure or cloud dependency. Windows Admin Center gives you full control over all aspects of your

  server infrastructure and is particularly useful for managing servers on private networks that are not connected to the Internet.

  Reference:

  https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation