[Q72-Q94] Free Sales Ending Soon - Use Real AZ-600 PDF Questions [Sep 30, 2023]

Free Sales Ending Soon - Use Real AZ-600 PDF Questions [Sep 30, 2023]

Updated Sep-2023 Exam AZ-600 Dumps - Pass Your Certification Exam

NEW QUESTION # 72
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named contoso.com as an identity provider.
You need to create a certificate file named AzSIBCCert for infrastructure backup.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

NEW QUESTION # 73
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a disconnected Azure Stack Hub integrated system.
You need to identify the IP address of the privileged endpoint (PEP).
Solution: You review the AzureStackStampDeploymentInfo JSON file.
Does this meet the goal?

A. No
B. Yes

Answer: A

Explanation:
Explanation
Instead: Solution: You run the nslookup AzS-ERCS01.azurestack.local command.
Note: nslookup is a network administration command-line tool for querying the Domain Name System to obtain the mapping between domain name and IP address, or other DNS records.
ASDK architecture, Virtual machine roles
The ASDK offers services using the following VMs hosted on the development kit host computer:
* AzS-ERCS01 - Emergency Recovery Console VM.
Reference:
https://docs.microsoft.com/en-us/azure-stack/asdk/asdk-architecture?view=azs-2008

NEW QUESTION # 74
You have a connected Azure Stack Hub integrated system that uses Active Directory Federation Services (AD FS) as the identity provider.
You open a PowerShell session and store the GUID of an Azure subscription in a variable named
$SubscriptionlD.
You need to validate the AD FS integration.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box 1: Connect-AzAccount
Steps to validate the Azure registration
1. Open an elevated PowerShell prompt, and then run the following command to install AzsReadinessChecker:
Install-Module -Name Az.BootStrapper -Force -AllowPrerelease
Install-AzProfile -Profile 2020-09-01-hybrid -Force
Install-Module -Name Microsoft.AzureStack.ReadinessChecker
2. From the PowerShell prompt, run the following command to set $subscriptionID as the Azure subscription to use. Replace xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx with your own subscription ID:
$subscriptionID = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
3. From the PowerShell prompt, run the following command:
Connect-AzAccount -subscription $subscriptionID
4. From the PowerShell prompt, run the following command to start validation of your subscription. Provide your Azure AD administrator and your Azure AD tenant name:
Invoke-AzsRegistrationValidation -RegistrationSubscriptionID $subscriptionID Box 2: Microsoft.AzureStack.ReadinessChecker Validate AD FS integration
1. On a computer that meets the prerequisites, open an administrative PowerShell prompt and then run the following command to install AzsReadinessChecker:
Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease
2. From the PowerShell prompt, run the following command to start validation. Specify the value for
-CustomADFSFederationMetadataEndpointUri as the URI for the federation metadata.
Invoke-AzsADFSValidation -CustomADFSFederationMetadataEndpointUri https://adfs.cont Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-registration
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-adfs

NEW QUESTION # 75
You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-

NEW QUESTION # 76
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to collect diagnostic logs, but do not have access to an SMB share.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

1 - From the administrator portal, create an Azure Storage account and a container
2 - Create a shared access signature (SAS)
3 - Connect to the privilleged endpoint(PEP)
4 - Run the Get-AzureStackLog cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008

NEW QUESTION # 77
You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table.

You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.
How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

NEW QUESTION # 78
You plan to deploy a disconnected Azure Stack Hub integrated system.
You need to identify which type of certificate to use for the deployment and the file format for the certificate.
The solution must meet the following requirements:
* Minimize administrative effort.
* Maximize security.
What should identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Azure Stack Hub public key infrastructure (PKI) certificate requirements Azure Stack Hub has a public infrastructure network using externally accessible public IP addresses assigned to a small set of Azure Stack Hub services and possibly tenant VMs. PKI certificates with the appropriate DNS names for these Azure Stack Hub public infrastructure endpoints are required during Azure Stack Hub deployment.
Box 1: A certificate from an internal certification authority (CA)
Your Azure Stack Hub infrastructure must have network access to the certificate authority's Certificate Revocation List (CRL) location published in the certificate. This CRL must be an http endpoint. Note: for disconnected deployments, certificates issued by a public certificate authority (CA) are not supported, if the CRL endpoint is not accessible.
Features that are impaired or unavailable in disconnected deployments
Azure Stack Hub was designed to work best when connected to Azure, so it's important to note that there are some features and functionality that are either impaired or completely unavailable in the disconnected mode.
Private/internal Certificate Authority (CA)
No impact - In cases where the deployment uses certificates issued by a private CA, such as an internal CA within an organization, only internal network access to the CRL endpoint is required. Internet connectivity is not required, but you should verify that your Azure Stack Hub infrastructure has the required network access to contact the CRL endpoint defined in the certificates CDP extension.
Box 2: PFX
The certificate format must be PFX, as both the public and private keys are required for Azure Stack Hub installation. The private key must have the local machine key attribute set.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs

NEW QUESTION # 79
You are troubleshooting the chargeback issues of the dev1 region.
You need to query the usage for each tenant subscription.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box 1: Administrator management endpoint
Note: The developers report high chargeback costs for the dev1 region.
Two integrated systems that are dedicated to application development and have the following configurations:
* The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.
* One integrated system has a region name of dev1, and the other has a region name of dev2.
* Both regions are used only by developers at Northwind Traders.
The request gets consumption details for the requested subscriptions and for the requested time frame. There is no request body.
This usage API is a provider API, so the caller must be assigned an Owner, Contributor, or Reader role in the provider's subscription.
Method, Request URI
GET
https://{armendpoint}/subscriptions/{subId}/providers/Microsoft.Commerce.Admin/subscriberUsageAggregates Arguments
* armendpoint
Azure Resource Manager endpoint of your Azure Stack Hub environment. The Azure Stack Hub convention is that the name of the Azure Resource Manager endpoint is in the format
https://adminmanagement.{domain-name}. For example, for the Azure Stack Development Kit (ASDK), if the domain name is local.azurestack.external, then the Resource Manager endpoint is
https://adminmanagement.local.azurestack.external.
* subId
Subscription ID of the user who makes the call.
* Etc.
Box 2: Get-AzsSubscriberUsage
Retrieve usage information
PowerShell
To generate the usage data, you should have resources that are running and actively using the system; for example, an active virtual machine (VM), or a storage account containing some data. If you're not sure whether you have any resources running in the Azure Stack Hub Marketplace, deploy a VM, and verify the VM monitoring blade to make sure it's running. Use the following PowerShell cmdlets to view the usage data:
* Install PowerShell for Azure Stack Hub.
* Configure the Azure Stack Hub user or the Azure Stack Hub operator PowerShell environment.
* To retrieve the usage data, call the Get-AzsSubscriberUsage PowerShell cmdlet:
Get-AzsSubscriberUsage -ReportedStartTime "2017-09-06T00:00:00Z"
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-provider-resource-api

NEW QUESTION # 80
You have an Azure Stack Hub integrated system that contains a user named User1.
You have a JSON file that contains the definition of the Reader role.
You need to create a custom role to enable User1 to manage updates for the integrated system.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

1 - Modify the permissions section of the JSON file
2 - Modify the assignableScopes section of the JSON file.
3 - Connect to the administrator Azure Resource Manager (ARM) endpoint.
4 - Run the New-AzRoleDefinition cmdlet.

NEW QUESTION # 81
You have an Azure Stack Hub integrated system that has the following configurations:
* A deployment prefix of AzS
* A physical prefix of AzP
You need to renew the certificates for the integrated system.
To which virtual machine should you establish a PowerShell session?

A. AzS-CA01
B. AzS-ERCS02
C. AzS-WAS01
D. AzP-S1-N01

Answer: B

NEW QUESTION # 82
You plan to deploy a disconnected Azure Stack Hub integrated system named eastus.azurestack.contoso.com.
Azure Stack Hub clients will be isolated from the internet.
You need to identify which certificates and certificate type to use for the deployment.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
D:\mudassar\Untitled.jpg

NEW QUESTION # 83
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You remove the licenseType section from the Azure Resource Manager template.
Does this meet the goal?

A. No
B. Yes

Answer: A

NEW QUESTION # 84
You have an Azure Stack Hub integrated system that connects to the Internet.
You attempt to download an image as shown in the Add from Azure exhibit. (Click the Add from Azure tab.)

The Marketplace item blade for [smalldisk] Windows Server 2019 Datacenter-Pay as you go is shown in the item exhibit. (Click the Item tab.)

The marketplace items are shown in the Marketplace Items exhibit. (Click the Marketplace Items tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-windows-server-faq?view=azs-2102&tabs=az1%2Caz2

NEW QUESTION # 85
You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.
You obtain certificates for the deployment.
You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.
Which PowerShell cmdlet should you run?

A. Invoke-AzsHubDeploymentCertificateValidation
B. Get-PfxCertificate
C. ConvertTo-AzsPFX
D. New-AzsHubDeploymentCertificateSigningRequest
E. Test-Certificate

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008 To validate certificates for other Azure Stack Hub services, change the value for -CertificateType. For example:
# App Services
Invoke-AzsHubAppServicesCertificateValidation -CertificatePath C:\Certificates\AppServices -pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com
# DBAdapter
Invoke-AzsHubDBAdapterCertificateValidation -CertificatePath C:\Certificates\DBAdapter -pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com
# EventHubs
Invoke-AzsHubEventHubsCertificateValidation -CertificatePath C:\Certificates
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2108#perform-core-services-certificate-validation

NEW QUESTION # 86
You plan to deploy an Azure Stack Hub integrated system to a datacenter.
You need to connect the top-of-rack (ToR) switches to the existing border devices. The solution must ensure that routes propagate dynamically between the ToR switches and the border devices.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Box 1: BGP
BGP routing
Using a dynamic routing protocol like BGP guarantees that your system is always aware of network changes and facilitates administration. For enhanced security, a password may be set on the BGP peering between the TOR and the Border.
Box 2: Layer 3 uplinks with point-to-point connectivity
To integrate Azure Stack Hub to the network it requires uplinks from the Top-of-Rack switches (ToR) to the nearest switch or router, which on this documentation is referred as Border. The ToRs can be uplinked to a single or a pair of Borders.
The top of rack (TOR) switches require Layer 3 uplinks with Point-to-Point IPs (/30 networks) configured on the physical interfaces. Layer 2 uplinks with TOR switches supporting Azure Stack Hub operations isn't supported Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-border-connectivity
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-network

NEW QUESTION # 87
You have an Azure Stack Hub integrated system that has 10 user subscriptions. Each subscription contains approximately 50 virtual machines.
You are planning a backup and restore strategy for the integrated system.
You need to identify which type of backup to use to back up specific resources.
What should you identify for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-enable-backup-console?view=azs-2008

NEW QUESTION # 88
You have an Azure Slack Hub integrated system and a computer named Computer1 that runs Windows 11. You need to deploy the Azure Stack Hub PowerShell tools to Computer1. What should you do first?

A. Connect to the privileged endpoint (PEP).
B. Download the AzureStack module from PowerShell Gallery.
C. Download AzureStack-Tools from the GitHub repository.
D. Copy the AzureStack module from the Hardware Lifecycle Host (HLH).

Answer: C

Explanation:
Download Azure Stack Hub tools from GitHub
AzureStack-Tools is a GitHub repository that hosts PowerShell modules for managing and deploying resources to Azure Stack Hub. If you're planning to establish VPN connectivity, you can download these PowerShell modules to the Azure Stack Development Kit (ASDK), or to a Windows-based external client.

NEW QUESTION # 89
You have a connected Azure Stack Hub integrated system.
You need to the validate the configuration of the integrated system by using the Test-AzureStack -Include AzsScenarios command.
Which additional parameter should you specify?

A. -ComputerName
B. -SessionOption
C. -ConfigurationName
D. -ServiceAdminCredential

Answer: A

NEW QUESTION # 90
You have an Azure Stack Hub integrated system that contains a guest Azure AD tenant named fabrikam.com.
You need to unregister fabrikam.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Explanation
Step 1: Connect to the Azure Resource Manager (ARM) endpoint
Compare to the steps in the note below.
Use https://adminmanagement.<region>.<domain>
Azure Resource Manager (administrator)
Adminmanagement.<region>.<fqdn>
Azure Resource Manager (user)
Management.<region>.<fqdn>
Step 2: Run the -Unregister-AzSGuestDirectoryTenant cmdlet.
Unregister a guest directory
If you no longer want to allow sign-ins to Azure Stack Hub services from a guest directory tenant, you can unregister the directory. Again, both the home Azure Stack Hub directory and guest directory need to be configured.
Configure guest directory
Step 3: Instruct the global administrator of fabrikam.com to run the -unregister- AzsWithMyDirectoryTenant cmdlet.
Configure guest directory
Note: Enabling AAD Multi-Tenancy in Azure Stack
Allowing users and service principals from multiple AAD directory tenants to sign in and create resources on Azure Stack. There are two personas involved in implementing this scenario.
1. The Administrator of the Azure Stack installation
2. The Directory Tenant Administrator of the directory that needs to be onboarded to Azure Stack Step 1: Onboard the Guest Directory Tenant to Azure Stack This step will let Azure Resource manager know that it can accept users and service principals from the guest directory tenant.
$adminARMEndpoint = "https://adminmanagement.<region>.<domain>"
$azureStackDirectoryTenant = "<homeDirectoryTenant>.onmicrosoft.com" # this is the primary tenant Azure Stack is registered to
$guestDirectoryTenantToBeOnboarded = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack
$location = "local"
Register-AzsGuestDirectoryTenant -AdminResourceManagerEndpoint $adminARMEndpoint `
-DirectoryTenantName $azureStackDirectoryTenant `
-GuestDirectoryTenantName $guestDirectoryTenantToBeOnboarded `
-ResourceGroupName "system.local" `
-Location $location
With this step, the work of the Azure Stack administrator is done.
Guest Directory Tenant Administrator
Step 2: Registering Azure Stack applications with the Guest Directory
Execute the following cmdlet as the administrator of the directory that needs to be onboarded, replacing
$guestDirectoryTenantName with your directory domain name
$tenantARMEndpoint = "https://management.<region>.<domain>"
$guestDirectoryTenantName = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack Register-AzsWithMyDirectoryTenant -TenantResourceManagerEndpoint $tenantARMEndpoint `
-DirectoryTenantName $guestDirectoryTenantName
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy

NEW QUESTION # 91
You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com.
An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-rotate-secrets
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-monitor-health

NEW QUESTION # 92
You have an Azure Stack Hub integrated system that is disconnected from the internet. The integrated system contains an Azure App Service deployment.
You anticipate a major increase in new App Service workloads. The integrated system has the required hardware to handle the increased demand.
You need to ensure that App Service can support the increased workloads.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Increase the user subscription quotas.
B. From the user portal, increase workers in App Service.
C. Enable new identity and access management roles for the user subscription.
D. From the administrator portal, increase workers in App Service.
E. Add an additional scale unit node.

Answer: A,D,E

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-add-worker-roles?view=azs-2008&tabs=az

NEW QUESTION # 93
You start the update of an Azure Stack Hub integrated system. The Update run details are shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.