AZ-600 : Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub Exam

AZ-600 Dumps
AZ-600 Braindumps
AZ-600 Real Questions
AZ-600 Practice Test
AZ-600 Actual Questions


Microsoft
AZ-600
Configuring and Operating a Hybrid Cloud with Microsoft
Azure Stack Hub
https://killexams.com/pass4sure/exam-detail/AZ-600
Question: 66
DRAG DROP
You have an Azure Stack Hub integrated system linked to an Azure AD tenant named contoso.onmicrosoft.com.
You need to allow users in an Azure AD tenant named adatum.onmicrosoft.com to access Azure Stack Hub resources.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and
arrange them in the correct order.

Answer:

Explanation:
Graphical user interface, text, application
Description automatically generated
Register a guest directory
To register a guest directory for multi-tenancy, you need to configure both the home Azure Stack Hub directory and the guest directory.
Configure Azure Stack Hub directory
The first step is to make your Azure Stack Hub system aware of the guest directory. In this example, the directory from Mary’s company, Adatum,
is called adatum.onmicrosoft.com.
Question: 67
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for
licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019
Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You add OsType: Windows to the Azure Resource Manager template.
Does this meet the goal?
A. Yes
B. No
Answer: B
Question: 68
DRAG DROP
You have an Azure Stack Hub integrated system.
You install the Azure Gallery Packager (.azpkg) tool on a management workstation.
You need to define a custom Azure Stack Hub Marketplace item that will provision a virtual machine from a base image.
Which file should you configure for each requirement? To answer, drag the appropriate files to the correct requirements. Each file may be used
once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Question: 69
You and a Microsoft Support Engineer are troubleshooting an Azure Stack Hub integrated system. The security team at your company requires an
audit trail whenever management actions are performed on the integrated system.
You unlock the privileged endpoint (PEP) and perform several troubleshooting tasks that resolve the issue.
Which cmdlet should you run next?
A. Invoke-AzureStackOnDemandLog
B. Close-PrivilegedEndpoint
C. Get-AzureStackLog
D. Exit-PSSession
Answer: B
Explanation:
Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-privileged-endpoint?view=azs-2008
Question: 70
You need to configure name resolution to support the planned changes.
Which PowerShell cmdlet should you run?
A. Sec-DnsServer
B. Regiscer-CuscomDnsServer
C. Set-AzSDnsForwarder
D. Set-DNSClientServerAddress
Answer: B
Explanation:
Configure the integrated system to resolve external names by using a DNS Server that has an IP address of 10.100.100.100.
Resolving external DNS names from Azure Stack Hub
To resolve DNS names for endpoints outside Azure Stack Hub (for example: www.bing.com), you need to provide DNS servers that Azure Stack
Hub can use to forward DNS requests for which Azure Stack Hub isn’t authoritative. For deployment, DNS servers that Azure Stack Hub forwards
requests to are required in the Deployment Worksheet (in the DNS Forwarder field). Provide at least two servers in this field for fault tolerance.
Without these values, Azure Stack Hub deployment fails. You can edit the DNS Forwarder values with the Set-AzSDnsForwarder cmdlet after
deployment.
Configure conditional DNS forwarding
Important
This only applies to an AD FS deployment.
To enable name resolution with your existing DNS infrastructure, configure conditional forwarding.
To add a conditional forwarder, you must use the privileged endpoint.
For this procedure, use a computer in your datacenter network that can communicate with the privileged endpoint in Azure Stack Hub.
Question: 71
HOTSPOT
You need to create the planned changes and meet the business requirements.
Which subscription should you use to host the SQL Server instance, and what should you configure on the instance? To answer, select the
appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:
Graphical user
interface, text, application, chat or text message
Description automatically generated
Box 1: The Default Provider Subscription
A default Microsoft SQL Server instance will host the database of the App Service resource provider.
In Azure Stack Hub Subscriptions, select the Default Provider Subscription. Azure App Service on Azure Stack Hub must be deployed in the
Default Provider Subscription.
Box 2:
Enter the SQL Server details for the server instance used to host the App Service resource provider database and then select Next. The installer
validates the SQL connection properties.


Graphical user interface, website
Description automatically generated
Question: 72
You provision a new certificate to support the planned changes.
You need to validate the certificate.
Which PowerShell module should you install first?
A. Az.Websites
B. AzureRM.TemplateValidator
C. AzureStack
D. Microsoft.AzureStack.ReadinessChecker
Answer: D
Explanation:
Use the Azure Stack Hub Readiness Checker tool to validate that generated public key infrastructure (PKI) certificates which are suitable for pre-
deployment. Validate certificates by leaving enough time to test and reissue certificates if necessary.
The Readiness Checker tool performs the following certificate validations:
* Parse PFX
Checks for valid PFX file, correct password, and whether the public information is protected
by the password.
* Expiry Date
Checks for minimum validity of seven days.
* Signature algorithm
Checks that the signature algorithm isn’t SHA1.
* Private Key
Checks that the private key is present and is exported with the local machine attribute.
* Etc.
Note: Perform core services certificate validation
Use these steps to validate the Azure Stack Hub PKI certificates for deployment and secret rotation:
Question: 73
DRAG DROP
You have an Azure Stack Hub integrated system.
The retention period for storage accounts is set to 7 days.
A user reports that a storage account named hr12943 was deleted accidentally two days ago.
You need to restore hr12943.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange
them in the correct order.

Answer:

Explanation:
Step 1: Connect to the administrator portal
Find a storage account
The list of storage accounts in the region can be viewed in Azure Stack Hub by following these steps:
Question: 74
DRAG DROP
You have an Azure Stack Hub integrated system.
The retention period for storage accounts is set to 7 days.
A user reports that a storage account named hr12943 was deleted accidentally two days ago.
You need to restore hr12943.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange
them in the correct order.

Answer:

Explanation:
Step 1: Connect to the administrator portal
Find a storage account
The list of storage accounts in the region can be viewed in Azure Stack Hub by following these steps:
Question: 75
HOTSPOT
You need to identify the authentication and authorization process for the integrated system in Chicago. The solution must meet the technical
requirements.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one
point.

Answer:
Question: 76
You need to support the planned changes for User1.
Which service should you include?
A. Microsoft.Subscriptions
B. Microsoft.KeyVault
C. Microsoft.Storage
D. Microsoft.Compute
Answer: A
Explanation:
Assign the delegated provider role to User1.
Delegation steps
There are two steps to setting up delegation:
Question: 77
You need to resolve the performance issue reported by the users in the priv1 region.
What should you do?
A. Redeploy the virtual machines to a new Azure Stack Hub node
B. Install the NVIDIA drivers on the virtual machines
C. Install the AMD drivers on the virtual machines
D. Add an additional scale unit node
Answer: C
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/n-series-amd-driver-setup
Question: 78
DRAG DROP
You schedule a planned maintenance window.
You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and
arrange them in the correct order.


Answer:


Explanation:
Graphical user interface, text, application, chat or text message
Description automatically generated
Question: 79
You need to configure the log forwarding. The solution must meet the Azure Stack Hub requirements.
What should you do?
A. Connect to 192.168.101.101 and run the Set-EventLogLevel and Add-AzLogProfile cmdlets.
B. Connect to 192.168.100.224 and run the Set-SyslogServer and Set-SyslogClient cmdlets.
C. Connect to 192.168.100.224 and run the Set-EventLogLevel and Add-AzLogProfile cmdlets.
D. Connect to 192.168.101.101 and run the Set-SyslogServer and Set-SyslogClient cmdlets.
Answer: D
Explanation:
Integrate Azure Stack Hub with monitoring solutions using syslog forwarding
The syslog channel exposes audits, alerts, and security logs from all the components of the Azure Stack Hub infrastructure. Use syslog forwarding to
integrate with security monitoring solutions and to retrieve all audits, alerts, and security logs to store them for retention.
Cmdlets to configure syslog forwarding
Configuring syslog forwarding requires access to the privileged endpoint (PEP). Two PowerShell cmdlets have been added to the PEP to configure
the syslog forwarding:
### cmdlet to pass the syslog server information to the client and to configure the transport protocol, the encryption and the authentication between
the client and the server
Set-SyslogServer [-ServerName ] [-ServerPort ] [-NoEncryption] [-SkipCertificateCheck] [-SkipCNCheck] [-UseUDP] [-
Remove]
### cmdlet to configure the certificate for the syslog client to authenticate with the server
Set-SyslogClient [-pfxBinary ] [-CertPassword ]
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security

User: Lizabeta***** I passed my exam with an 84% mark in the stipulated time, thanks to killexams.com. Studying while working full-time can be challenging, but the concise answers provided by killexams.com helped me understand complicated subjects. I took the az-600 exam to advance my career, and killexams.com helped me achieve my goal.

User: Mishay***** I want to spread the word about Killexams.com, which is a unique and high-quality coaching venture that helped me perform outstandingly in my configuring and operating a hybrid cloud with microsoft azure stack hub exam, exceeding all my expectations. I believe Killexams.com is one of the most admirable online coaching platforms out there, and it deserves recognition for its excellent services.

User: Luba***** The az-600 exam practice test provided by Killexams.com is perfect for quick preparation. The questions and answers helped me score 88% by answering all the questions in just 90 minutes. The az-600 exam covers a wide range of materials in the commercial enterprise domain, but Killexams.com made it easy for me to choose the best one. I am grateful for their help in achieving my certification.

User: Nataly***** Your answers and explanations to the questions were superb and helped me understand the fundamentals. Without your question bank and last-minute revision set, I may not have passed. Although I had anticipated scoring 90+, I still scored a respectable 83%. Thank you for your help.

User: Nikolaj***** I am delighted to inform you that I passed the AZ-600 exam a day or two ago with an impressive score of 88%. Although the exam was quite challenging, killexams.com Questions and Answers and exam simulator made my life easier. I believe that this study material was the reason I passed the exam. The exam simulator was particularly helpful, and I enjoyed using the questions and answers as it is the best approach to study.

---