Microsoft Microsoft Certifications AZ-600 Questions & Answers

• Question 71:

  You plan to deploy a highly available Azure App Service resource provider to an Azure Stack Hub integrated system.

  You need to ensure that the App Service resource meets the prerequisites. The solution must minimize costs.

  Which two resources should you deploy? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a highly available Microsoft SQL Server 2019 instance in the default provider subscription

  B. a highly available file server in a dedicated user subscription

  C. a highly available file server in the default provider subscription

  D. a highly available Microsoft SQL Server 2019 instance in a dedicated user subscription

  E. a single file server in the default provider subscription

  F. a single Microsoft SQL Server 2019 instance in the default provider subscription

  Correct Answer: AC

  Reference:

  https://blog.apps.id.au/adventures-cloud-operator-highly-available-app-service-1-4-azure- stack-step-2-deployment/

• Question 72:

  You have an Azure Stack Hub integrated system that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The Azure Stack Hub portals are configured as shown in the following table.

  

  You register a guest Azure AD tenant named adatum.onmicrosoft.com that contains a user named [email protected]. User1 needs to subscribe to art Azure Stack Hub integrated system offer. Which URL should User1 use?

  A. https://portal.eastus.contoso.com/

  B. https://portal.eastus.contoso.com/fabrikam.com

  C. https://adminportal.eastus.contoso.com/fabnkam.com

  D. https //portal eastus.contoso.com/adatum.onmicrosoft.com

  Correct Answer: D

  For multinode systems, the user portal URL is formatted as https://portal... For an ASDK deployment, the URL is https://portal.local.azurestack.external.

  In our case we must also direct any foreign principals (users in the Adatum directory without the suffix of adatum.onmicrosoft.com) to sign in using https:///adatum.onmicrosoft.com. If they don't specify the /

  adatum.onmicrosoft.com directory tenant in the URL, they're sent to their default directory and receive an error that says their administrator hasn't consented.

  Reference: https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy

• Question 73:

  You have an Azure Stack Hub integrated system.

  You perform infrastructure backups twice daily.

  User workloads are protected by using Azure Site Recovery.

  The architect of the user workloads is planning a business continuity disaster recovery (BCDR) strategy.

  You need to recommend to the architect which resources to include in the BCDR strategy.

  Which two resources should you recommend? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Azure Key Vault secrets

  B. plans, quotas, and offers

  C. role-based access control (RBAC) permissions and roles

  D. user subscriptions

  E. Azure Resource Manager templates for resources used by Azure Stack Hub virtual machines

  F. Azure Site Recovery workloads

  Correct Answer: EF

  Reference: https://docs.microsoft.com/en-us/azure/architecture/hybrid/azure-stack-vm-dr

• Question 74:

  You have an Azure Stack Hub integrated system.

  You plan to deploy an Event Hubs resource provider that has the following requirements:

  Provides a 1 CU Azure Event Hubs cluster that requires a duster of 5x D11_V2 virtual machines

  Scales linearly as additional CUs are deployed

  At a minimum, which other management resources are required for the Event Hubs resource provider?

  A. a cluster of ix D2_V2 virtual machines for management that does not scale as Event Hubs clusters are added

  B. a 1x D2_V2 virtual machine for management that scales linearly to a maximum of 10 nodes as Event Hubs clusters are added

  C. a 1x D2_V2 virtual machine for management that does not scale as Event Hubs clusters are added

  D. a cluster of 3x D2_V2 virtual machines for management that scales linearly to a maximum of 10 as Event Hubs clusters are added

  Correct Answer: B

  Resource provider resource consumption The resource consumption by the Event Hubs resource provider is constant, and independent of the number or sizes of clusters created by users. The following table shows the core utilization by the Event Hubs resource provider on Azure Stack Hub, and the approximate resource consumption by other resources. The Event Hubs resource provider uses a D2_V2 VM type for its deployment.

  

  Note: Cluster resource consumption

  Your users will need to create Event Hubs clusters with CUs that meet their business requirements. To inform your decision on quota configuration, the following table shows:

  The total cores used by a 1 CU Event Hubs cluster. The approximate capacity required for consumption of other resources, including VM storage, memory, and storage accounts.

  

  Reference: https://learn.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-capacity- planning

• Question 75:

  You have an Azure Stack Hub integrated system.

  You are an operator, and you have read access to a user subscription named Fabrikam1.

  Users in Fabrikam1 request help creating a custom role-based access control (RBAC) role based on an existing built-in Azure role.

  You connect to the Azure subscription, create the respective role definition, and save the role definition as a JSON file.

  Which three actions should you perform to create the custom role? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Request owner access to the user subscription.

  B. Modify the custom role definition to include the target subscription ID as an AssignableScope, set the IsCustom field to true, and set Id to Null.

  C. Connect to the administrator management endpoint and run the New-AzureRmRoleDefinition cmdlet.

  D. Connect to the user management endpoint and run the New-AzureRmRoleDefinition cmdlet.

  E. Modify the custom role definition to include the target default provider subscription ID as an AssignableScope, set the IsCustom field to true, and set Id to Null.

  Correct Answer: ABD

  Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role- powershell

• Question 76:

  You have an Azure Stack Hub integrated system.

  The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).

  You need to create the list.

  Solution: From a privileged endpoint (PEP) session, you run the Get-CloudAdMinUserList cmcHet.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 77:

  Your company is a Cloud Solution Provider (CSP).

  You are planning the deployment of a multitenant Azure Stack Hub integrated system that will host internal company workloads and customer workloads.

  You need to register the integrated system.

  Which type of Azure subscription should you use for the registration?

  A. Azure Partner Shared Services (APSS)

  B. Enterprise Agreement (EA)

  C. Pay-As-You-Go (PAYG)

  D. CSP

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-add-manage-billing-as- a-csp?view=azs-2008

• Question 78:

  You have an Azure Stack Hub integrated system that connects to the internet.

  You need to update the Azure Event Hubs service.

  Solution: From the Updates blade of the administrator portal, you trigger the installation of the latest update listed in the Resource provider section.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead: Solution: From a privileged endpoint (PEP) session, you run the Install-AzsUpdate cmdlet.

  You can use the Azure Stack Hub administrative endpoints to monitor and manage your updates. They're accessible with PowerShell. For instructions on getting set up with PowerShell on Azure Stack Hub.

  You can use the following PowerShell cmdlet to manage your updates:

  * Install-AzsUpdate

  Apply a specific update at an update location.

  Reference:

  https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-update- monitor?view=azs-2008

• Question 79:

  You have an Azure Stack Hub integrated system that is not yet in production and has no workloads running.

  You configure the Infrastructure Backup Service, and you complete a backup.

  You need to recommend a method to verify the restore process once the integrated system is in production.

  What should you recommend?

  A. From the administrator portal, restore the domain controller backup to the default provider subscription and ensure that the domain controller starts successfully.

  B. Run Get-FileIntegrity against the infrastructure backup data files stored in the file share.

  C. Install the Azure Stack Development Kit (ASDK) and select the infrastructure backup data as the configuration during the installation.

  D. Instruct the IT team to redeploy the integrated system in restore mode by using the backup data.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure-stack/asdk/asdk-validate-backup?view=azs-2102

• Question 80:

  You have an Azure Stack Hub integrated system.

  You unlock the privileged endpoint (PEP).

  How long will the PEP session remain unlocked?

  A. 30 minutes

  B. 1 hour

  C. 24 hours

  D. 8 hours

  Correct Answer: D

  Unlocking the privileged endpoint for support scenarios During a support scenario, the Microsoft support engineer might need to elevate the privileged endpoint PowerShell session to access the internals of the Azure Stack Hub infrastructure.

  This process is sometimes informally referred to as "break the glass" or "unlock the PEP".

  An elevated PEP session has a validity of 8 hours, after which, if not terminated, the elevated PEP session will automatically lock back to a regular PEP session.

  Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-privileged- endpoint