[Q23-Q42] Exam Passing Guarantee Sep 29, 2023 AZ-600 Exam with Accurate Quastions!

Exam Passing Guarantee Sep 29, 2023 AZ-600 Exam with Accurate Quastions!

Test Engine to Practice Test for AZ-600 Valid and Updated Dumps

NEW QUESTION # 23
You have an Azure Slack Hub integrated system.
You receive the following alert: "One or more guest Azure AD tenants must be configured." You need to identify which Azure AD tenants require configuration.
Which PowerShell cmdlet should you run?

A. Get-AzureADTenantDetail
B. Get-AzsDirectoryTenantidcntifier
C. Get-AzsAlerts
D. Get-AzsHealthReport

Answer: D

Explanation:
Explanation
Synopsis
Gets the health report of identity application in the Azure Stack home and guest directories DESCRIPTION Gets the health report for Azure Stack identity applications in the home directory as well as guest directories of Azure Stack. Any directories with an unhealthy status need to have their permissions updated.
EXAMPLE
$adminResourceManagerEndpoint = "https://adminmanagement.local.azurestack.external"
$homeDirectoryTenantName = "<homeDirectoryTenant>.onmicrosoft.com"
Get-AzsHealthReport -AdminResourceManagerEndpoint $adminResourceManagerEndpoint `
-DirectoryTenantName $homeDirectoryTenantName -Verbose
Reference: https://github.com/Azure/AzureStack-Tools/blob/master/Identity/AzureStack.Identity.psm1
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md

NEW QUESTION # 24
You have an Azure Stack Hub integrated system.
The retention period for storage accounts is set to 7 days.
A user reports that a storage account named hr12943 was deleted accidentally two days ago.
You need to restore hr12943.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Explanation
Step 1: Connect to the administrator portal
Find a storage account
The list of storage accounts in the region can be viewed in Azure Stack Hub by following these steps:
1. Sign in to the administrator portal https://adminportal.local.azurestack.external.
2. Select All services > Storage > Storage accounts.

By default, the first 10 accounts are displayed. You can choose to fetch more by clicking the Load more link at the bottom of the list.
Step 2: Open the Storage accounts blade.
Step 3: Select hr12943.
Once you've located the accounts you're interested in viewing, you can select the particular account to view certain details. A new pane opens with the account details. These details include the kind of account, creation time, location, and so on.
Step 4: Select Recover.
Recover a deleted account
You may be in a situation where you need to recover a deleted account.
In Azure Stack Hub, there's a simple way to do that:
* Browse to the storage accounts list. For more information, see Find a storage account at the top of this article.
* Locate that particular account in the list. You may need to filter.
* Check the state of the account. It should say Deleted.
* Select the account, which opens the account details pane. (Step 3 above)
* On top of this pane, locate the Recover button and select it. (Step 4)
* Select Yes to confirm.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts

NEW QUESTION # 25
You need to register the northcentralus region.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-registration?view=azs-2008&tabs=az1%2Caz

NEW QUESTION # 26
You have an Azure Stack Hub integrated system that has the App Service resource provider. You have the App Service Environment (ASE) shown in the following table.

You need to ensure that web apps and function apps remain available during upgrades and maintenance events.
What is the minimum number of additional worker nodes you should deploy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
D:\mudassar\Untitled.jpg

NEW QUESTION # 27
You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.
You obtain certificates for the deployment.
You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.
Which PowerShell cmdlet should you run?

A. Invoke-AzsHubDeploymentCertificateValidation
B. Get-PfxCertificate
C. ConvertTo-AzsPFX
D. Test-Certificate
E. New-AzsHubDeploymentCertificateSigningRequest

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008

NEW QUESTION # 28
You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table.

You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.
How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION # 29
You have 20 computers that run Linux.
You deploy a disconnected Azure Stack Hub integrated system.
You need to ensure that users on the Linux computers can manage their Azure Stack Hub resources by using Azure Command-Line Interface (CLI).
What should you do first?

A. Request a new certificate for the integrated system.
B. Export the root certificate of the integrated system as a P7B file.
C. Export the root certificate of the integrated system as a CER file.
D. For each Linux computer, request a certificate from the integrated system.

Answer: C

Explanation:
Explanation
Add certificate
Export and then import Azure Stack Hub certificate for disconnected integrated systems and for the ASDK.
You need the CA root certificate for Azure Stack Hub to use Azure CLI on your development machine.
Export the Azure Stack Hub CA root certificate
Export the CA root certificate. To export the ASDK root certificate in PEM format:
Get the name of your Azure Stack Hub Root Cert:
1. Sign in to the Azure Stack Hub User or Azure Stack Hub Administrator portal.
Select the lock in the browser address bar.
In the pop-up window, select Connection is secure.
In the Certificate window, select the Certification Path tab.
Note down the name of your Azure Stack Hub Root Cert, for example, *.<locale>.<FQDN>
2. Sign in to the VM, open an elevated PowerShell prompt, and then run the following script:
$label = "*.<locale>.<FQDN> from step 1"
Write-Host "Getting certificate from the current user trusted store with subject CN=$label"
$root = Get-ChildItem Cert:\CurrentUser\Root | Where-Object Subject -eq "CN=$label" | select -First 1 if (-not $root)
{
Write-Error "Certificate with subject CN=$label not found"
return
}
Write-Host "Exporting certificate"
Export-Certificate -Type CERT -FilePath root.cer -Cert $root
Write-Host "Converting certificate to PEM format"
certutil -encode root.cer root.pem
Reference:
https://learn.microsoft.com/en-us/azure-stack/asdk/asdk-cli
https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-version-profiles-azurecli2

NEW QUESTION # 30
You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.
You obtain certificates for the deployment.
You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.
Which PowerShell cmdlet should you run?

A. Invoke-AzsHubDeploymentCertificateValidation
B. Get-PfxCertificate
C. ConvertTo-AzsPFX
D. Test-Certificate
E. New-AzsHubDeploymentCertificateSigningRequest

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008 To validate certificates for other Azure Stack Hub services, change the value for -CertificateType. For example:
# App Services
Invoke-AzsHubAppServicesCertificateValidation -CertificatePath C:\Certificates\AppServices -pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com
# DBAdapter
Invoke-AzsHubDBAdapterCertificateValidation -CertificatePath C:\Certificates\DBAdapter -pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com
# EventHubs
Invoke-AzsHubEventHubsCertificateValidation -CertificatePath C:\Certificates
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2108#perform-core-services-certificate-validation

NEW QUESTION # 31
You plan to publish a custom Azure Stack Hub Marketplace image.
You need to define the name of the image, the name of the offer, and the name of the tenant that tenants will see when they deploy the image.
Which JSON file should you modify?

A. Manifest json
B. Default Template json
C. Createduidefinition.json
D. UIDefinitionjson

Answer: A

Explanation:
Explanation
Note: Create a Marketplace item
To create a custom marketplace item, do the following:
1. Download the Azure Gallery Packager tool
2. Create an Azure Resource Manager template or use our sample templates for Windows/Linux. These sample templates are provided in the packager tool .zip file you downloaded in step 1.
3. Replace the following highlighted values (those with numbers) in the Manifest.json template with the value that you provided when uploading your custom image.
4. Replace the following highlighted values (those with numbers) in the Manifest.json template with the value that you provided when uploading your custom image.
5. Replace the following highlighted values (those with numbers) in the Manifest.json template with the value that you provided when uploading your custom image.
The following template is a sample of the Manifest.json file:
{
"$schema": "https://gallery.azure.com/schemas/2015-10-01/manifest.json#",
"name": "Test", (1)
"publisher": "<Publisher name>", (2)
"version": "<Version number>", (3)
"displayName": "ms-resource:displayName", (4)
"publisherDisplayName": "ms-resource:publisherDisplayName", (5)
"publisherLegalName": "ms-resource:publisherDisplayName", (6)
"summary": "ms-resource:summary",
"longSummary": "ms-resource:longSummary",
"description": "ms-resource:description",
"longDescription": "ms-resource:description",
"links": [
{ "displayName": "ms-resource:documentationLink", "uri": "http://go.microsoft.com/fwlink/?LinkId=532898"
}
],
"artifacts": [
{
"isDefault": true
}
],
"images": [{
"context": "ibiza",
"items": [{
"id": "small",
"path": "icons\\Small.png", (7)
"type": "icon"
},
{
"id": "medium",
"path": "icons\\Medium.png",
"type": "icon"
},
{
"id": "large",
"path": "icons\\Large.png",
"type": "icon"
},
{
"id": "wide",
"path": "icons\\Wide.png",
"type": "icon"
}]
}]
}
The following list explains the preceding numbered values in the example template:
(1) - The name of the offer.
(2) - The name of the publisher, without a space.
(3) - The version of your template, without a space.
(4) - The name that customers see.
(5) - The publisher name that customers see.
(6) - The publisher legal name.
(7) - The path and name for each icon.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and-publish-marketplace-item

NEW QUESTION # 32
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to collect diagnostic logs, but do not have access to an SMB share.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

1 - From the administrator portal, create an Azure Storage account and a container
2 - Create a shared access signature (SAS)
3 - Connect to the privilleged endpoint(PEP)
4 - Run the Get-AzureStackLog cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008

NEW QUESTION # 33
You have an Azure Stack Hub integrated system that is linked to an Active Directory domain named fabrikam.com by using Active Directory Federation Services (AD FS).
You have the resources shown in the following table.

You need to ensure that the integrated system can resolve DNS queries for fabrikam.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-dns

NEW QUESTION # 34
You have three Azure Stack Hub integrated systems that use the same Azure Active Directory (Azure AD) tenant named contoso.com as their identity provider. The integrated systems are deployed in Chicago, New York, and Seattle. The region name of each integrated system corresponds to the city in which the system is deployed.
When reviewing alerts in the integrated system in Chicago, you receive an alert indicating that the home directory requires an update.
From the Azurestack-tools-master/identity folder, you import the AzureStack.Identity.psm1 module.
How should you complete the command to update the home directory? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md

NEW QUESTION # 35
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.
The integrated system has the following domains enabled for multitenancy:
* fabrikam.onmicrosoft.com
* contoso.onmicrosoft.com
* fabrikam.com
* contoso.com
You need to disable multitenancy for contoso.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008

NEW QUESTION # 36
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com as an identity provider.
You need to ensure that users from an Azure AD tenant named fabrikam.onmicrosoft.com can authenticate to the integrated system.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:
Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008

NEW QUESTION # 37
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to update the Azure App Service resource provider.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Download the App Service installer to a computer that can connect to the Azure Stack Hub endpoints
B. From the Updates blade of the administrator portal, select the infrastructure section
C. From the administrator portal, select the update, download the update, and then install the update
D. Run appservice.exeas a local administrator
E. From the Updates blade of the administrator portal, select the Resource providers section

Answer: A,D

Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-update?view=azs-
2008&pivots=state-connected

NEW QUESTION # 38
You have an Azure Stack Hub integrated system that connects to the internet.
You need to update the Azure Event Hubs service.
Solution: From the Updates blade of the administrator portal, you trigger the installation of the latest update listed in the Resource provider section.
Does this meet the goal?

A. Yes
B. No

Answer: B

Explanation:
Instead: Solution: From a privileged endpoint (PEP) session, you run the Install-AzsUpdate cmdlet.
You can use the Azure Stack Hub administrative endpoints to monitor and manage your updates. They're accessible with PowerShell. For instructions on getting set up with PowerShell on Azure Stack Hub.
You can use the following PowerShell cmdlet to manage your updates:
* Install-AzsUpdate
Apply a specific update at an update location.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-update-monitor?view=azs-2008

NEW QUESTION # 39
You need to implement the App Service infrastructure to address the current issues and support the planned changes for Azure Functions in Boston.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Table Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-capacity-planning?view=azs-2008

NEW QUESTION # 40
You plan to deploy a disconnected Azure Stack Hub integrated system.
You need to identify which type of certificate to use for the deployment and the file format for the certificate.
The solution must meet the following requirements:
* Minimize administrative effort.
* Maximize security.
What should identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Azure Stack Hub public key infrastructure (PKI) certificate requirements Azure Stack Hub has a public infrastructure network using externally accessible public IP addresses assigned to a small set of Azure Stack Hub services and possibly tenant VMs. PKI certificates with the appropriate DNS names for these Azure Stack Hub public infrastructure endpoints are required during Azure Stack Hub deployment.
Box 1: A certificate from an internal certification authority (CA)
Your Azure Stack Hub infrastructure must have network access to the certificate authority's Certificate Revocation List (CRL) location published in the certificate. This CRL must be an http endpoint. Note: for disconnected deployments, certificates issued by a public certificate authority (CA) are not supported, if the CRL endpoint is not accessible.
Features that are impaired or unavailable in disconnected deployments
Azure Stack Hub was designed to work best when connected to Azure, so it's important to note that there are some features and functionality that are either impaired or completely unavailable in the disconnected mode.
Private/internal Certificate Authority (CA)
No impact - In cases where the deployment uses certificates issued by a private CA, such as an internal CA within an organization, only internal network access to the CRL endpoint is required. Internet connectivity is not required, but you should verify that your Azure Stack Hub infrastructure has the required network access to contact the CRL endpoint defined in the certificates CDP extension.
Box 2: PFX
The certificate format must be PFX, as both the public and private keys are required for Azure Stack Hub installation. The private key must have the local machine key attribute set.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs

NEW QUESTION # 41
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to make a new image available in Azure Stack Hub Marketplace in the disconnected environment.
From a computer that has Internet access, you download all the required tools.
Which four actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.