[Oct-2023] Use Real AZ-600 Dumps Free Sample Questions and Practice Test Engine [Q92-Q113]

[Oct-2023] Use Real AZ-600 Dumps Free Sample Questions and Practice Test Engine

Pass Microsoft AZ-600 exam - questions - convert Tets Engine to PDF

Microsoft AZ-600 (Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub) Exam is a certification exam designed for IT professionals who want to demonstrate their skills in configuring and operating a hybrid cloud with Microsoft Azure Stack Hub. AZ-600 exam measures the candidate's knowledge and skills in deploying, managing, and monitoring resources and services in an Azure Stack Hub environment. AZ-600 exam is ideal for IT professionals who are responsible for managing cloud infrastructures, including administrators, architects, and developers.

NEW QUESTION # 92
You have an Azure Stack Hub Integrated system that has the following configurations:
* Deployment virtual machine (DVM) IP address: 10.30.1.253
* First host IP address: 10.30.1.193
* Last host IP address: 10.30.1.254
* Subnet mask: 255.255.255.192
* BMC network: 10.30.1.192/26
* Default gateway: 10.30.1.193
* NTP: 10.31.1.2
* DNS: 8.8.8.8
You need to deploy an Operator Access Workstation (OAW) to the Hardware Lifecycle Host (HLH) and configure the network settings for the OAW.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION # 93
You need to create the planned changes and meet the business requirements.
Which subscription should you use to host the SQL Server instance, and what should you configure on the instance? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, text, application, chat or text message Description automatically generated

Box 1: The Default Provider Subscription
A default Microsoft SQL Server instance will host the database of the App Service resource provider.
In Azure Stack Hub Subscriptions, select the Default Provider Subscription. Azure App Service on Azure Stack Hub must be deployed in the Default Provider Subscription.
Box 2:
Enter the SQL Server details for the server instance used to host the App Service resource provider database and then select Next. The installer validates the SQL connection properties.
Graphical user interface, website Description automatically generated

Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-deploy

NEW QUESTION # 94
You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com.
An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Box 1: 30 days
We cannot tell for sure without the exhibit. It would likely be either 30 or 90 days.
The Azure Stack Hub root certificate is provisioned during deployment with an expiration of five years.
Starting with 2108, internal secret rotation also rotates the root certificate. The standard secret expiration alert identifies the expiry of the root certificate and generates alerts at both 90 (warning) and 30 (critical) days.
Note: Manual remediation
If the Repair option is not supported, be sure to follow the complete set of remediation instructions provided in the alert. As an example, the internal certificate expiration remediation steps will guide you through the process of secret rotation:
Graphical user interface, text, application Description automatically generated

Box 2: running the Start-SecreatRotation -Internal PowerShell cmdlet from the priveged endpoint (PEP) session Start-SecretRotation cmdlet rotates the infrastructure secrets of an Azure Stack Hub system. This cmdlet can only be executed against the Azure Stack Hub privileged endpoint, by using an Invoke-Command script block passing the PEP session in the -Session parameter. By default, it rotates only the certificates of all external network infrastructure endpoints.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-rotate-secrets
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-monitor-health

NEW QUESTION # 95
You start the update of an Azure Stack Hub integrated system. The Update run details are shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-apply-updates?view=azs-2008

NEW QUESTION # 96
Your company is a Cloud Solution Provider (CSP).
You are planning the deployment of a multitenant Azure Stack Hub integrated system that will host internal company workloads and customer workloads.
You need to register the integrated system.
Which type of Azure subscription should you use for the registration?

A. Enterprise Agreement (EA)
B. Pay-As-You-Go (PAYG)
C. CSP
D. Azure Partner Shared Services (APSS)

Answer: D

Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-add-manage-billing-as-a-csp?view=azs-
2008

NEW QUESTION # 97
You schedule a planned maintenance window.
You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

1 - Complete teh activities identified in the Azure Stack Hub update activity checklist.
2 - Download the required package and import the package to the respective storage account in the dev1 region.
3 - From the administrator portal, start the update process
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-updates?view=azs-2008

NEW QUESTION # 98
You are planning an Azure Slack Hub deployment for an enterprise customer.
You need to identify an appropriate identity model for the customer. The solution must use capacity-based billing. Which two identity providers can you use for the customer? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Active Directory Federation Services (AD FS) in a Cloud Solution Provider (CSP) subscription
B. Azure Active Directory (Azure AD) in an Enterprise Agreement (EA)
C. Azure Active Directory (Azure AD) in a Cloud Solution Provider (CSP) subscription
D. Active Directory Federation Services (AD FS) in an Enterprise Agreement (EA)

Answer: A,C

Explanation:
Explanation
Choose an identity store
With a connected deployment, you can choose between Azure AD or AD FS for your identity store. A disconnected deployment, with no internet connectivity, can only use AD FS.
Capacity-based billing
If you decide to use the capacity billing model, you must purchase an Azure Stack Hub Capacity Plan SKU based on the capacity of your system. You need to know the number of physical cores in your Azure Stack Hub to purchase the correct quantity.
Capacity billing requires an Enterprise Agreement (EA) Azure subscription for registration. The reason is that registration sets up the availability of items in the Marketplace, which requires an Azure subscription. The subscription isn't used for Azure Stack Hub usage.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-connected-deployment

NEW QUESTION # 99
In which three situations should you update the registration of an Azure Stack Hub integrated system? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. when you add or remove nodes for consumption-based billing
B. when you change the billing model
C. when you update the Azure Active Directory (Azure AD) home directory
D. when you renew an annual capacity subscription
E. when you enable Azure Stack Hub for multitenancy
F. when you add or remove nodes for capacity-based billing

Answer: B,D,F

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-registration?view=azs-2008&tabs=az1%2Caz

NEW QUESTION # 100
You have a connected Azure Stack Hub integrated system.
You need to deploy an Operator Access Workstation (OAW) virtual machine image.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Explanation
Step 1: Connect to the Hardware Lifecycle Host (HLH)
Create the OAW VM using a script
The following script prepares the virtual machine as the Operator Access Workstation (OAW), which is used to access Microsoft Azure Stack Hub.
Sign in to the HLH with your credentials. (Step 1)
Download OAW.zip and extract the files. (Step 2)
Open an elevated PowerShell session. (Step 3)
Navigate to the extracted contents of the OAW.zip file.
Run the New-OAW.ps1 script.
Step 2: From microsoft.com, download the OAW.zip file and extract the contents Download files Because of the stateless nature of the solution, there are no updates for the OAW VM. For each milestone, a new version of the VM image file is released. Use the latest version to create a new OAW VM. The image file is based on the latest Windows Server 2019 version. After installation, you can apply updates, including any critical updates, using Windows Update.
Validate the hash of the downloaded OAW.zip file to make sure it hasn't been modified before using it to create the OAW VM.
Step 3: From an elevated PowerShell session, run the New-OAW.ps1 script.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation

NEW QUESTION # 101
You schedule a planned maintenance window.
You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

1 - Compelete the activities iddentified in the Azure Stack Hub Activity Checklist
2 - Download the required package and import the package to the respective storage account in the dev1 region.
3 - From the administrator portal, start the update process
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-updates?view=azs-2008

NEW QUESTION # 102
You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.
You obtain certificates for the deployment.
You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.
Which PowerShell cmdlet should you run?

A. Invoke-AzsHubDeploymentCertificateValidation
B. New-AzsHubDeploymentCertificateSigningRequest
C. Get-PfxCertificate
D. Test-Certificate
E. ConvertTo-AzsPFX

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008 To validate certificates for other Azure Stack Hub services, change the value for -CertificateType. For example:
# App Services
Invoke-AzsHubAppServicesCertificateValidation -CertificatePath C:\Certificates\AppServices -pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com
# DBAdapter
Invoke-AzsHubDBAdapterCertificateValidation -CertificatePath C:\Certificates\DBAdapter -pfxPassword $pfxPassword -RegionName east -FQDN azurestack.contoso.com
# EventHubs
Invoke-AzsHubEventHubsCertificateValidation -CertificatePath C:\Certificates
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2108#perform-core-services-certificate-validation

NEW QUESTION # 103
You have an Azure Stack Hub integrated system.
You need to ensure that you can recover managed and unmanaged disks that are deleted from user subscriptions.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts?view=azs-2008

NEW QUESTION # 104
You have an Azure Stack Hub integrated system that has the following configurations:
* A deployment prefix of AzS
* A physical prefix of AzP
You need to renew the certificates for the integrated system.
To which virtual machine should you establish a PowerShell session?

A. AzS-WAS01
B. AzS-ERCS02
C. AzP-S1-N01
D. AzS-CA01

Answer: B

NEW QUESTION # 105
You need to identify the certificate for the integrated system in Chicago. The solution must meet the technical requirements.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:
When deploying Azure Stack Hub in disconnected mode it is recommended to use certificates issued by an enterprise certificate authority. This is important because clients accessing Azure Stack Hub endpoints must be able to contact the certificate revocation list (CRL).
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs?view=azs-2008

NEW QUESTION # 106
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.
The integrated system has the following domains enabled for multitenancy:
* fabrikam.onmicrosoft.com
* contoso.onmicrosoft.com
* fabrikam.com
* contoso.com
You need to disable multitenancy for contoso.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008

NEW QUESTION # 107
You open the Resource providers blade for a user subscription as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Graphical user interface, text, application, email Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-services-resource-providers

NEW QUESTION # 108
You have an Azure Stack Hub integrated system that has syslog forwarding configured.
You need to remove syslog forwarding and the associated certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security?view=azs-2008

NEW QUESTION # 109
You need to implement disaster recovery for the priv1 region to meet the technical requirements.
Which main components should you include in the disaster recovery plan?

A. Option B
B. Option D
C. Option C
D. Option A

Answer: D

Explanation:
Topic 1, Northwind Traders
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the button to return to the question.
Overview
A company named Northwind Traders has a main office and a datacenter. All development occurs at the main office.
Existing Environment
Identity Environment
The network contains an Active Directory forest named northwind.com. The forest and an Azure Active Directory (Azure AD) tenant named northwind.onmicrosoft.com are integrated by using Active Directory Federation Service (AD FS).
All Azure subscriptions use the northwind.onmicrosoft.com Azure AD tenant.
Northwind Traders uses an Enterprise Agreement (EA) subscription.
All operators are global administrators in northwind.onmicrosoft.com.
Azure Stack Hub Environment
Northwind Traders has the following five Azure Stack Hub integrated systems:
One integrated system that connects to an internet-facing network and has the following configurations:
- The region name is int1.
- The operators do not have access to the user subscriptions.
- The integrated system is used for customer and partner applications.
- The partners and customers of NorthWind Traders use guest user accounts to access various user resources.
Two integrated systems that connect to a private network, are accessed only from inside the company, and have the following configurations:
- The integrated systems are dedicated to research and development.
- One integrated system has a region name of priv1, and the other has a region name of priv2.
- The integrated systems are used for various data rendering, AI workloads, inference, and data visualization.
Two integrated systems that are dedicated to application development and have the following configurations:
- The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.
- One integrated system has a region name of dev1, and the other has a region name of dev2.
- Both regions are used only by developers at Northwind Traders.
The external domain name of all the integrated systems is northwind.com. All the integrated systems have Azure App Service and the Azure Kubernetes Service (AKS) engine deployed.
The computer of the operator in each region has all the prerequisite software installed for managing Azure Stack Hub.
Current Problems
You identify the following issues in the current environment:
The priv2 region recently experienced a catastrophic failure.
The developers report high chargeback costs for the dev1 region.
The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images.
The Northwind Traders partners and customers report that use of the guest user accounts is too complex.
Users in the priv1 region recently deployed NCas_v4 virtual machines for various AI workload. The users discover that the virtual machines do not use GPUs.
Requirements
Planned Changes
Northwind Traders plans to implement the following changes:
Remove all guest user accounts.
Change the DNS forwarder of the priv1 region.
Change the billing model and registration name of the int1 region.
After the catastrophic failure, restore the priv2 region to its original state.
Provide each partner with its own dedicated user subscription that will use its own dedicated Azure AD tenant.
Technical Requirements
Northwind Traders identifies the following technical requirements:
Minimize hardware and software costs.
Standardize all datacenter workloads on Azure Stack Hub.
In the priv1 region, implement a disaster recovery plan for App Service.
Whenever possible, implement solutions by using the minimum amount of administrative effort.
In the dev2 region, update the AKS Base Ubuntu image to the latest version in Azure Stack Hub Marketplace.
Whenever possible, implement solutions by using built-in tools, features, and services without acquiring additional third-party tools.
For the users' virtual machines and the associated resources in the dev1 and dev2 regions, implement a business continuity and disaster recovery plan that includes an automated failback process.
If changes to the Azure Stack Hub infrastructure cause workload downtime outside of planned maintenance windows, notify all users in the region where the downtime occurred and schedule a maintenance window.

NEW QUESTION # 110
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
During an update, an error occurs that prevents you from accessing the administrator portal.
While troubleshooting the issue, a Microsoft Support Engineer requests that you collect and send the relevant logs.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

1 - Connect to the privileged endpoint (PEP)
2 - Run the Get-AzureStacking cmdlet and specify a local file share to collect the logs of events ....
3 - From a workstation that has internet access, upload the logs to the location specified....
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008

NEW QUESTION # 111
You have an Azure Stack Hub integrated system that is registered to an Azure Active Directory (Azure AD) tenant named contoso.com. The integrated system region name is region1.
You need to retrieve only critical infrastructure alerts from the integrated system by using the REST API.
Which URI query should you use? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:
Explanation
Graphical user interface, text, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure-stack/user/azure-stack-rest-api-use?view=azs-2008

NEW QUESTION # 112
Your company is a Cloud Solution Provider (CSP) named contoso.com.
The company has an Azure Stack Hub integrated system enabled for multitenancy.
You plan to add a new customer. For the customer, you already created an Azure user subscription that uses an Azure AD tenant named the fabrikam.com.
You collect the following information:
* Customer subscription ID: Q7daa8e5-f301-4$65-99c3-dUae36620df
* Registration subscription IB 52949927-abbe-4bb0-ae2a-dfe8f9636899
* Registration resource group name: AzureStack
* Registration name: AzureStack-id9de6l0-9Oc4-48ff-b455-d6ad9eb1b7a4
Vou need to ensure that the fabrAam.com user subscription is billed separately from other user subscriptions.
How should you complete the powerShell script? To answer select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.