Latest AZ-600 Practice Tests with Actual Questions

Get Complete pool of questions with Premium PDF and Test Engine

Exam Code : AZ-600
Exam Name : Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub
Vendor Name :
"Microsoft"

Download Full Version of AZ-600

---

AZ-600 Dumps

AZ-600 Braindumps AZ-600 Real Questions AZ-600 Practice Test

AZ-600 Actual Questions

killexams.com

Microsoft

AZ-600

Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub

https://killexams.com/pass4sure/exam-detail/AZ-600

Question: 66

DRAG DROP

You have an Azure Stack Hub integrated system linked to an Azure AD tenant named contoso.onmicrosoft.com.

You need to allow users in an Azure AD tenant named adatum.onmicrosoft.com to access Azure Stack Hub resources.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Graphical user interface, text, application Description automatically generated Register a guest directory

To register a guest directory for multi-tenancy, you need to configure both the home Azure Stack Hub directory and the guest directory. Configure Azure Stack Hub directory

The first step is to make your Azure Stack Hub system aware of the guest directory. In this example, the directory from Mary’s company, Adatum, is called adatum.onmicrosoft.com.

Question: 67

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.

You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.

You need to ensure that Windows Server is licensed by using the bring-your-own-license model. Solution: You add OsType: Windows to the Azure Resource Manager template.

Does this meet the goal?

1. Yes

2. No

Answer: B
Question: 68 DRAG DROP

You have an Azure Stack Hub integrated system.

You install the Azure Gallery Packager (.azpkg) tool on a management workstation.

You need to define a custom Azure Stack Hub Marketplace item that will provision a virtual machine from a base image.

Which file should you configure for each requirement? To answer, drag the appropriate files to the correct requirements. Each file may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Question: 69

You and a Microsoft Support Engineer are troubleshooting an Azure Stack Hub integrated system. The security team at your company requires an audit trail whenever management actions are performed on the integrated system.

You unlock the privileged endpoint (PEP) and perform several troubleshooting tasks that resolve the issue. Which cmdlet should you run next?

1. Invoke-AzureStackOnDemandLog

2. Close-PrivilegedEndpoint

3. Get-AzureStackLog

4. Exit-PSSession

Answer: B
Explanation:

Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-privileged-endpoint?view=azs-2008

Question: 70

You need to configure name resolution to support the planned changes. Which PowerShell cmdlet should you run?

1. Sec-DnsServer

2. Regiscer-CuscomDnsServer

3. Set-AzSDnsForwarder

4. Set-DNSClientServerAddress

Answer: B
Explanation:

Configure the integrated system to resolve external names by using a DNS Server that has an IP address of 10.100.100.100. Resolving external DNS names from Azure Stack Hub

To resolve DNS names for endpoints outside Azure Stack Hub (for example: www.bing.com), you need to provide DNS servers that Azure Stack Hub can use to forward DNS requests for which Azure Stack Hub isn’t authoritative. For deployment, DNS servers that Azure Stack Hub forwards requests to are required in the Deployment Worksheet (in the DNS Forwarder field). Provide at least two servers in this field for fault tolerance. Without these values, Azure Stack Hub deployment fails. You can edit the DNS Forwarder values with the Set-AzSDnsForwarder cmdlet after deployment.

Configure conditional DNS forwarding Important

This only applies to an AD FS deployment.

To enable name resolution with your existing DNS infrastructure, configure conditional forwarding. To add a conditional forwarder, you must use the privileged endpoint.

For this procedure, use a computer in your datacenter network that can communicate with the privileged endpoint in Azure Stack Hub.

Question: 71

HOTSPOT

You need to create the planned changes and meet the business requirements.

Which subscription should you use to host the SQL Server instance, and what should you configure on the instance? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Graphical user

interface, text, application, chat or text message Description automatically generated

Box 1: The Default Provider Subscription

A default Microsoft SQL Server instance will host the database of the App Service resource provider.

In Azure Stack Hub Subscriptions, select the Default Provider Subscription. Azure App Service on Azure Stack Hub must be deployed in the Default Provider Subscription.

Box 2:

Enter the SQL Server details for the server instance used to host the App Service resource provider database and then select Next. The installer validates the SQL connection properties.

Graphical user interface, website Description automatically generated
Question: 72

You provision a new certificate to support the planned changes.

You need to validate the certificate.

Which PowerShell module should you install first?

1. Az.Websites

2. AzureRM.TemplateValidator

3. AzureStack

4. Microsoft.AzureStack.ReadinessChecker

Answer: D
Explanation:

Use the Azure Stack Hub Readiness Checker tool to validate that generated public key infrastructure (PKI) certificates which are suitable for pre- deployment. Validate certificates by leaving enough time to test and reissue certificates if necessary.

The Readiness Checker tool performs the following certificate validations:

• Parse PFX

  
  

  Checks for valid PFX file, correct password, and whether the public information is protected by the password.

• Expiry Date

  
  

  Checks for minimum validity of seven days.

  
  

• Signature algorithm

  
  

  Checks that the signature algorithm isn’t SHA1.

  
  

• Private Key

  Checks that the private key is present and is exported with the local machine attribute.

  
  

• Etc.

Note: Perform core services certificate validation

Use these steps to validate the Azure Stack Hub PKI certificates for deployment and secret rotation:

Question: 73

DRAG DROP

You have an Azure Stack Hub integrated system.

The retention period for storage accounts is set to 7 days.

A user reports that a storage account named hr12943 was deleted accidentally two days ago. You need to restore hr12943.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Step 1: Connect to the administrator portal Find a storage account

The list of storage accounts in the region can be viewed in Azure Stack Hub by following these steps:

Question: 74

DRAG DROP

You have an Azure Stack Hub integrated system.

The retention period for storage accounts is set to 7 days.

A user reports that a storage account named hr12943 was deleted accidentally two days ago. You need to restore hr12943.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Step 1: Connect to the administrator portal

Find a storage account

The list of storage accounts in the region can be viewed in Azure Stack Hub by following these steps:

Question: 75

HOTSPOT

You need to identify the authentication and authorization process for the integrated system in Chicago. The solution must meet the technical requirements.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Question: 76

You need to support the planned changes for User1. Which service should you include?

1. Microsoft.Subscriptions

2. Microsoft.KeyVault

3. Microsoft.Storage

4. Microsoft.Compute

Answer: A
Explanation:

Assign the delegated provider role to User1. Delegation steps

There are two steps to setting up delegation:

Question: 77

You need to resolve the performance issue reported by the users in the priv1 region. What should you do?

1. Redeploy the virtual machines to a new Azure Stack Hub node

2. Install the NVIDIA drivers on the virtual machines

3. Install the AMD drivers on the virtual machines

4. Add an additional scale unit node

Answer: C
Explanation:

Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/n-series-amd-driver-setup

Question: 78

DRAG DROP

You schedule a planned maintenance window.

You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Graphical user interface, text, application, chat or text message Description automatically generated

Question: 79

You need to configure the log forwarding. The solution must meet the Azure Stack Hub requirements. What should you do?

1. Connect to 192.168.101.101 and run the Set-EventLogLevel and Add-AzLogProfile cmdlets.

2. Connect to 192.168.100.224 and run the Set-SyslogServer and Set-SyslogClient cmdlets.

3. Connect to 192.168.100.224 and run the Set-EventLogLevel and Add-AzLogProfile cmdlets.

4. Connect to 192.168.101.101 and run the Set-SyslogServer and Set-SyslogClient cmdlets.

Answer: D
Explanation:

Integrate Azure Stack Hub with monitoring solutions using syslog forwarding

The syslog channel exposes audits, alerts, and security logs from all the components of the Azure Stack Hub infrastructure. Use syslog forwarding to integrate with security monitoring solutions and to retrieve all audits, alerts, and security logs to store them for retention.

Cmdlets to configure syslog forwarding

Configuring syslog forwarding requires access to the privileged endpoint (PEP). Two PowerShell cmdlets have been added to the PEP to configure the syslog forwarding:

### cmdlet to pass the syslog server information to the client and to configure the transport protocol, the encryption and the authentication between the client and the server

Set-SyslogServer [-ServerName <String>] [-ServerPort <UInt16>] [-NoEncryption] [-SkipCertificateCheck] [-SkipCNCheck] [-UseUDP] [- Remove]

### cmdlet to configure the certificate for the syslog client to authenticate with the server Set-SyslogClient [-pfxBinary <Byte[]>] [-CertPassword <SecureString>]

Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security

User: Nellie***** I am thrilled to have passed my AZ-600 exam this week with flying colors, thanks to killexams.com. Their well-designed program includes simulations that closely resemble those found on the actual exam. Simulations carry more weight than other questions on the AZ-600 exam, so practicing with killexams.com software made it easy for me to pass.

User: Mildred***** I am ecstatic to have achieved a high score on my az-600 exam today. Initially, I did not think I could do it, but Killexams.com made me believe otherwise. The web educators did an exceptional job, and I applaud them for their dedication and commitment.

User: Tom***** I had a difficult time preparing for the AZ-600 exam because I needed an e-book that could provide questions and answers. killexams.com questions and answers were all in order and helpful. I had taken the AZ-600 exam for three years in a row but could not pass it until I found killexams.com. It helped me understand my weaknesses and work on them to pass the exam.

User: Tony***** Joining Killexams.com was like embarking on the greatest adventure of my life. Using their online resources, I passed my AZ-600 exam and became the primary person in my business enterprise with this qualification. I was proud and happy, and I advise anyone preparing for the AZ-600 exam to give Killexams.com a fair chance.

User: Lucy***** I was able to score 86% on all the questions during the AZ-600 exam, and almost 90% of the questions were equivalent to the killexams.com practice tests. My preparation was comprehensive, and I was looking for some stable, clean materials for the AZ-600 exam. I started reading the practice tests, and killexams.com solved my problems.

---