Microsoft Microsoft Certifications AZ-600 Questions & Answers

• Question 141:

  Your company is a Cloud Solution Provider (CSP) that provides Azure Stack Hub services to multiple customers in a multitenant environment.

  User subscriptions are linked to Azure CSP subscriptions for billing reconciliation.

  You need to view the usage of all the customers for the current day and the last seven days.

  What should you do?

  A. Query the Azure Stack Hub usage API

  B. Query the Partner Center Usage API

  C. From Partner Center, download the daily-rated usage reconciliation CSV

  D. From Partner Center, view the usage associated to the Azure Partner Shared Services (APSS) subscription

  Correct Answer: B

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-provider-resource- api?view=azs-2008

• Question 142:

  You have an Azure Stack Hub integrated system that connects to the Internet.

  You need to update the Azure Event Hubs service.

  Solution: From the Updates blade of the administrator portal, you trigger the installation of the latest update listed in the Infrastructure section.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead: Solution: From a privileged endpoint (PEP) session, you run the Install-AzsUpdate cmdlet.

  You can use the Azure Stack Hub administrative endpoints to monitor and manage your updates. They're accessible with PowerShell. For instructions on getting set up with PowerShell on Azure Stack Hub.

  You can use the following PowerShell cmdlet to manage your updates:

  * Install-AzsUpdate

  Apply a specific update at an update location.

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-update- monitor?view=azs-2008

• Question 143:

  You have a connected Azure Stack Hub integrated system.

  You plan to deploy Azure Site Recovery to the integrated system.

  Which two scenarios will be supported? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. fallback to Azure

  B. fallback to Azure Stack Hub

  C. failover to Azure Stack HCI

  D. failover to Azure

  E. failover to Azure Stack Hub

  Correct Answer: AD

• Question 144:

  You have an Azure Stack Hub integrated system.

  The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).

  You need to create the list.

  Solution: From the Azure portal, you open the Azure Active Directory blade and view the users who are assigned the Global administrator role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure-stack/reference/pep-2002/get-cloudadminuserlist

• Question 145:

  You plan to install an update to an Azure Stack Hub integrated system.

  You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible. Solution: From a privileged endpoint (PEP) session, you run

  Test-AzureStack-Group "Default".

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic- test?view=azs-2008

• Question 146:

  You have a disconnected Azure Stack Hub integrated system.

  You have a registered app named App1 that has a client ID of 2bbe67d8-3fdb-4b62-87cf- cc41dd4344rf.

  You plan to assign a role-based access control (RBAC) role to Appl.

  You need to locate App1 in the Azure Stack Hub user portal by using the search feature.

  Which prefix should you use?

  A. AzureStackHub-app1

  B. AxuraStack-appl

  C. 2bbe67d8-3fdb-4b62-87cf-cc41dd4344ff

  D. app1

  Correct Answer: A

  Under Select, search for your app using a full or partial Application Name. During registration, the Application Name is generated as Azurestack-- . For example, if you used an application name of App2, and ClientId 2bbe67d8- 3fdb-4b62-87cf-cc41dd4344ff was assigned during creation, the full name would be Azurestack-App2-2bbe67d8-3fdb-4b62-87cf-cc41dd4344ff. You can search for either the exact string, or a portion, like Azurestack or Azurestack-App2.

  Note: An Application ID, sometimes referred to as a Client ID. A GUID that uniquely identifies the app's registration in your Active Directory tenant.

  Reference: https://learn.microsoft.com/en-us/azure-stack/operator/give-app-access-to- resources

• Question 147:

  HOTSPOT

  You have a connected Azure Stack Hub integrated system.

  You perform the following tasks:

  On a server named SERVER1. you create a file share named AzSHLogs.

  You create a PowerShell remoting session to the privileged endpoint (PEP) of the integrated system.

  In a variable named $Session, you store a reference to the session.

  In a variable named $AdHinCredentials. you store a reference to the credentials required to write to AzSHLogs.

  You need to collect the Hyper-V event logs for all the cluster hosts and copy the logs to the AzSHLogs share. How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

  Box 1: $using:AdminCredentials

  Box 2: Storage

  Send Azure Stack Hub diagnostic logs by using the privileged endpoint (PEP) To run Get-AzureStackLog on an integrated system, you need to have access to the privileged endpoint (PEP). Here's an example script you can run using the

  PEP to collect logs.

  $ipAddress = "" # You can also use the machine name instead of IP here.

  $password = ConvertTo-SecureString "" -AsPlainText - Force

  $cred = New-Object -TypeName System.Management.Automation.PSCredential ("\CloudAdmin", $password)

  $shareCred = Get-Credential

  $session = New-PSSession -ComputerName $ipAddress -ConfigurationName PrivilegedEndpoint -Credential $cred -SessionOption (New-PSSessionOption -Culture en- US -UICulture en-US)

  $fromDate = (Get-Date).AddHours(-8)

  $toDate = (Get-Date).AddHours(-2) # Provide the time that includes the period for your issue

  Invoke-Command -Session $session { Get-AzureStackLog -OutputSharePath "" -OutputShareCredential $using:shareCred - FilterByRole Storage -FromDate $using:fromDate -ToDate $using:toDate}

  if ($session) {

  Remove-PSSession -Session $session }

• Question 148:

  HOTSPOT

  You plan to deploy a disconnected Azure Stack Hub integrated system.

  You need to identify which type of certificate to use for the deployment and the file format for the certificate. The solution must meet the following requirements:

  Minimize administrative effort.

  Maximize security.

  What should identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Azure Stack Hub public key infrastructure (PKI) certificate requirements Azure Stack Hub has a public infrastructure network using externally accessible public IP addresses assigned to a small set of Azure Stack Hub services and possibly

  tenant VMs. PKI certificates with the appropriate DNS names for these Azure Stack Hub public infrastructure endpoints are required during Azure Stack Hub deployment.

  Box 1: A certificate from an internal certification authority (CA) Your Azure Stack Hub infrastructure must have network access to the certificate authority's Certificate Revocation List (CRL) location published in the certificate. This CRL must be

  an http endpoint. Note: for disconnected deployments, certificates issued by a public certificate authority (CA) are not supported, if the CRL endpoint is not accessible.

  Features that are impaired or unavailable in disconnected deployments Azure Stack Hub was designed to work best when connected to Azure, so it's important to note that there are some features and functionality that are either impaired or

  completely unavailable in the disconnected mode.

  Private/internal Certificate Authority (CA)

  No impact - In cases where the deployment uses certificates issued by a private CA, such as an internal CA within an organization, only internal network access to the CRL endpoint is required. Internet connectivity is not required, but you

  should verify that your Azure Stack Hub infrastructure has the required network access to contact the CRL endpoint defined in the certificates CDP extension.

  Box 2: PFX

  The certificate format must be PFX, as both the public and private keys are required for Azure Stack Hub installation. The private key must have the local machine key attribute set.

• Question 149:

  HOTSPOT

  You plan to deploy an Azure Stack Hub integrated system to a datacenter.

  You need to connect the top-of-rack (ToR) switches to the existing border devices. The solution must ensure that routes propagate dynamically between the ToR switches and the border devices.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 150:

  HOTSPOT

  You have an Azure Stack Hub Integrated system.

  Outbound traffic from the Azure Stack Hub integrated system is controlled by a third-party firewall.

  You need to implement the Infrastructure Backup Service.

  Which storage location should you use for the backup, and which network port is required to perform the backup? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: