[Oct 16, 2023] AZ-600 Exam Dumps 100% Same Q&A In Your Real Exam
AZ-600 Test Engine Dumps Training With 179 Questions
NEW QUESTION # 22
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.
You have a group named AppGroup1.
You need to provide an application with the ability to access Azure Stack Hub resources by using AppGroup1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-create-service-principals?view=azs-2008&tab
NEW QUESTION # 23
You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-2008&tabs=az1%2Caz2&pivots=state-disconnected
NEW QUESTION # 24
You plan to deploy two Azure Stack Hub integrated systems named AZStack1 and AZStack2.
AZStack1 must meet the following requirements:
Connect to the Internet.
Have minimal capital expenditures.
Use the minimum number of on-premises servers for identity.
Have no existing licenses for Windows virtual machines deployed.
AZStack2 must meet the following requirements:
Be disconnected from the Internet.
Use the minimum number of on-premises servers for identity.
Support the syndication of Azure Stack Hub Marketplace items.
Which identity provider and licensing model should you use for each integrated system? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-connected-deployment?view=azs-2008
NEW QUESTION # 25
You have an Azure Slack Hub integrated system and a computer named Computer1 that runs Windows 11.
You need to deploy the Azure Stack Hub PowerShell tools to Computer1. What should you do first?
- A. Connect to the privileged endpoint (PEP).
- B. Copy the AzureStack module from the Hardware Lifecycle Host (HLH).
- C. Download AzureStack-Tools from the GitHub repository.
- D. Download the AzureStack module from PowerShell Gallery.
Answer: C
Explanation:
Explanation
Download Azure Stack Hub tools from GitHub
AzureStack-Tools is a GitHub repository that hosts PowerShell modules for managing and deploying resources to Azure Stack Hub. If you're planning to establish VPN connectivity, you can download these PowerShell modules to the Azure Stack Development Kit (ASDK), or to a Windows-based external client.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-powershell-download
NEW QUESTION # 26
You have an Azure Stack Hub Integrated system that has the following configurations:
* Deployment virtual machine (DVM) IP address: 10.30.1.253
* First host IP address: 10.30.1.193
* Last host IP address: 10.30.1.254
* Subnet mask: 255.255.255.192
* BMC network: 10.30.1.192/26
* Default gateway: 10.30.1.193
* NTP: 10.31.1.2
* DNS: 8.8.8.8
You need to deploy an Operator Access Workstation (OAW) to the Hardware Lifecycle Host (HLH) and configure the network settings for the OAW.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: .\New-OAW.ps1
Create the OAW VM using a script
The following script prepares the virtual machine as the Operator Access Workstation (OAW), which is used to access Microsoft Azure Stack Hub.
Sign in to the HLH with your credentials.
Download OAW.zip and extract the files.
Open an elevated PowerShell session.
Navigate to the extracted contents of the OAW.zip file.
Run the New-OAW.ps1 script.
Example: Example: Deploy on HLH using a Microsoft Image
$oawRootPath = "D:\oawtest"
$securePassword = Read-Host -Prompt "Enter password for Azure Stack OAW's local administrator"
-AsSecureString
if (Get-ChildItem -Path $oawRootPath -Recurse | Get-Item -Stream Zone* -ErrorAction SilentlyContinue | Select-Object FileName)
{ Write-Host "Execution failed, unblock the script files first" }
else { .\New-OAW.ps1 -LocalAdministratorPassword $securePassword }
Syntax:
New-OAW
-LocalAdministratorPassword <Security.SecureString> `
-IPAddress <String> `
-SubnetMask <String> `
-DefaultGateway <String> `
-DNS <String[]> `
-TimeServer<String> `
[-AzureStackCertificatePath <String>] `
[-AzSStampInfoFilePath <String>] `
[-CertificatePassword <Security.SecureString>] `
[-ERCSVMIP <String[]>] `
[-ImageFilePath <String>] `
[-VirtualMachineName <String>] `
[-VirtualMachineMemory <int64>] `
[-VirtualProcessorCount <int>] `
[-VirtualMachineDiffDiskPath <String>] `
[-PhysicalAdapterMACAddress <String>] `
[-VirtualSwitchName <String>] `
[-ReCreate] `
[-AsJob] `
[-Passthru] `
[-WhatIf] `
[-Confirm] `
[<CommonParameters>]
Box 2: 10.30.1.253
Deployment virtual machine (DVM) IP address: 10.30.1.253
Note:
Parameter:
IPAddress (Required)
The static IPv4 address to configure TCP/IP on the virtual machine.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation
NEW QUESTION # 27
You have a disconnected Azure Stack Hub integrated system.
You deploy an Operator Access Workstation (OAW) virtual machine image.
Which management tool should be installed manually on the image?
- A. AzureStack-Tools
- B. Windows Admin Center
- C. AzCopy
- D. Azure Storage Explorer
Answer: B
Explanation:
Explanation
Windows Admin Center is a new, locally-deployed, browser-based management tool set that lets you manage your Windows Servers with no Azure or cloud dependency. Windows Admin Center gives you full control over all aspects of your server infrastructure and is particularly useful for managing servers on private networks that are not connected to the Internet.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation
NEW QUESTION # 28
You have an Azure Stack Hub integrated system.
You need to update the integrated system to use a non-Windows NTP service that has a host name of ntp1.contoso.com.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-configure-time?view=azs-2008
NEW QUESTION # 29
You have an Azure Stack Hub integrated system that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The Azure Stack Hub portals are configured as shown in the following table.
You register a guest Azure AD tenant named adatum.onmicrosoft.com that contains a user named [email protected]. User1 needs to subscribe to art Azure Stack Hub integrated system offer. Which URL should User1 use?
- A. https://adminportal.eastus.contoso.com/fabnkam.com
- B. https://portal.eastus.contoso.com/
- C. https://portal.eastus.contoso.com/fabrikam.com
- D. https //portal eastus.contoso.com/adatum.onmicrosoft.com
Answer: D
Explanation:
Explanation
For multinode systems, the user portal URL is formatted as https://portal.<region>.<FQDN>. For an ASDK deployment, the URL is https://portal.local.azurestack.external.
In our case we must also direct any foreign principals (users in the Adatum directory without the suffix of adatum.onmicrosoft.com) to sign in using https://<user-portal-url>/adatum.onmicrosoft.com. If they don't specify the /adatum.onmicrosoft.com directory tenant in the URL, they're sent to their default directory and receive an error that says their administrator hasn't consented.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
NEW QUESTION # 30
You have 20 computers that run Linux.
You deploy a disconnected Azure Stack Hub integrated system.
You need to ensure that users on the Linux computers can manage their Azure Stack Hub resources by using Azure Command-Line Interface (CLI).
What should you do first?
- A. Export the root certificate of the integrated system as a P7B file.
- B. Request a new certificate for the integrated system.
- C. For each Linux computer, request a certificate from the integrated system.
- D. Export the root certificate of the integrated system as a CER file.
Answer: D
Explanation:
Explanation
Add certificate
Export and then import Azure Stack Hub certificate for disconnected integrated systems and for the ASDK.
You need the CA root certificate for Azure Stack Hub to use Azure CLI on your development machine.
Export the Azure Stack Hub CA root certificate
Export the CA root certificate. To export the ASDK root certificate in PEM format:
Get the name of your Azure Stack Hub Root Cert:
1. Sign in to the Azure Stack Hub User or Azure Stack Hub Administrator portal.
Select the lock in the browser address bar.
In the pop-up window, select Connection is secure.
In the Certificate window, select the Certification Path tab.
Note down the name of your Azure Stack Hub Root Cert, for example, *.<locale>.<FQDN>
2. Sign in to the VM, open an elevated PowerShell prompt, and then run the following script:
$label = "*.<locale>.<FQDN> from step 1"
Write-Host "Getting certificate from the current user trusted store with subject CN=$label"
$root = Get-ChildItem Cert:\CurrentUser\Root | Where-Object Subject -eq "CN=$label" | select -First 1 if (-not $root)
{
Write-Error "Certificate with subject CN=$label not found"
return
}
Write-Host "Exporting certificate"
Export-Certificate -Type CERT -FilePath root.cer -Cert $root
Write-Host "Converting certificate to PEM format"
certutil -encode root.cer root.pem
Reference:
https://learn.microsoft.com/en-us/azure-stack/asdk/asdk-cli
https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-version-profiles-azurecli2
NEW QUESTION # 31
You deploy an App Service resource provider to an Azure Stack Hub integrated system.
You need to create an offer to deploy an Azure Functions app by using the resource provider.
Which resource provider should you specify in the offer, and which type of subscription should you use to test the functionality of the offer? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Box 1: Microsoft.Web
Resource providers for Azure services
Match resource provider to service (Resource provider namespace, Azure service)
* Microsoft.Web
App Service
Azure Functions
Box 2: Default Provider Subscription
In Azure Stack Hub Subscriptions, select the Default Provider Subscription. Azure App Service on Azure Stack Hub must be deployed in the Default Provider Subscription.
Reference:
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-services-resource-providers#
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-deploy
NEW QUESTION # 32
You have an Azure Stack Hub integrated system.
You need to ensure that you can recover managed and unmanaged disks that are deleted from user subscriptions.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts?view=azs-2008
NEW QUESTION # 33
You need to identify the procedure for creating the subscriptions on the integrated system in Chicago. The solution must meet the technical requirements.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-subscribe-plan-provision-vm?view=azs-2008
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-create-offer?view=azs-2008
NEW QUESTION # 34
You have an Azure Stack Hub integrated system that contains a user named User1.
User1 creates a new virtual machine named VM01.
You need to grant User1 console access to VM01.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Connect to the privileged endpoint (PEP).
2 - From an elevated PowerShell prompt, run the Connect To- Tentantvm - ResourceID .....
3 - Connect to the Emergency Recovery Console Server (ERCS) by using Remote Desktop Conncetion.
4 - From and elveated PowerShell pompt, run the Import-Module -Name Microsoft.AzureStack.PrivilegedEndpointSecurity cmdlet.
5 - Run the - Grant - RdpAccessToErcsVM cmdlet.
NEW QUESTION # 35
You plan to deploy a disconnected Azure Stack Hub integrated system that has the following configurations:
FQDN: contoso.local
Region name: region1
Internal domain name: contoso.com
You need to generate a certificate signing request (CSR) for the new deployment. The solution must prevent the common name (CN) value from being included in the certificate subject.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 36
You have an Azure Stack Hub integrated system that has syslog forwarding configured.
You need to remove syslog forwarding and the associated certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Connect to the privileged endpoint (PEP)
2 - Run the Set-SyslogServer cmdlet
3 - Run the Set-SyslogClient cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security?view=azs-2008
NEW QUESTION # 37
You have an Azure Stack Hub integrated system that connects to the internet.
You need to deploy Azure Event Hubs to the integrated system and ensure that users can create Event Hubs resources. The solution must minimize administrative effort.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-install?view=azs-2008&pivots=state-conne
NEW QUESTION # 38
You have an Azure Stack Hub integrated system that contains a guest Azure AD tenant named fabrikam.com.
You need to unregister fabrikam.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: Connect to the Azure Resource Manager (ARM) endpoint
Compare to the steps in the note below.
Use https://adminmanagement.<region>.<domain>
Azure Resource Manager (administrator)
Adminmanagement.<region>.<fqdn>
Azure Resource Manager (user)
Management.<region>.<fqdn>
Step 2: Run the -Unregister-AzSGuestDirectoryTenant cmdlet.
Unregister a guest directory
If you no longer want to allow sign-ins to Azure Stack Hub services from a guest directory tenant, you can unregister the directory. Again, both the home Azure Stack Hub directory and guest directory need to be configured.
Configure guest directory
Step 3: Instruct the global administrator of fabrikam.com to run the -unregister- AzsWithMyDirectoryTenant cmdlet.
Configure guest directory
Note: Enabling AAD Multi-Tenancy in Azure Stack
Allowing users and service principals from multiple AAD directory tenants to sign in and create resources on Azure Stack. There are two personas involved in implementing this scenario.
1. The Administrator of the Azure Stack installation
2. The Directory Tenant Administrator of the directory that needs to be onboarded to Azure Stack Step 1: Onboard the Guest Directory Tenant to Azure Stack This step will let Azure Resource manager know that it can accept users and service principals from the guest directory tenant.
$adminARMEndpoint = "https://adminmanagement.<region>.<domain>"
$azureStackDirectoryTenant = "<homeDirectoryTenant>.onmicrosoft.com" # this is the primary tenant Azure Stack is registered to
$guestDirectoryTenantToBeOnboarded = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack
$location = "local"
Register-AzsGuestDirectoryTenant -AdminResourceManagerEndpoint $adminARMEndpoint `
-DirectoryTenantName $azureStackDirectoryTenant `
-GuestDirectoryTenantName $guestDirectoryTenantToBeOnboarded `
-ResourceGroupName "system.local" `
-Location $location
With this step, the work of the Azure Stack administrator is done.
Guest Directory Tenant Administrator
Step 2: Registering Azure Stack applications with the Guest Directory
Execute the following cmdlet as the administrator of the directory that needs to be onboarded, replacing
$guestDirectoryTenantName with your directory domain name
$tenantARMEndpoint = "https://management.<region>.<domain>"
$guestDirectoryTenantName = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack Register-AzsWithMyDirectoryTenant -TenantResourceManagerEndpoint $tenantARMEndpoint `
-DirectoryTenantName $guestDirectoryTenantName
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
NEW QUESTION # 39
You are planning the deployment of two Azure Stack Hub integrated systems that will be located in Seattle and Redmond, respectively.
Workloads will run on infrastructure as a service (IaaS) virtual machines that have a static IIS web front-end and a Microsoft SQL Server 2019 cluster backend for database storage.
You plan to leverage Azure Traffic Manager to direct DNS requests to the integrated system in Seattle by default and use the Redmond integrated system in the event of a disaster.
What should you use to replicate application consistent database changes to the Redmond site?
- A. SQL Server replication
- B. Azure Blob storage replication
- C. Hyper-V Replica
- D. Azure SQL Database replication
Answer: A
Explanation:
Reference:
https://azure.microsoft.com/en-gb/blog/protecting-applications-and-data-on-azure-stack/
NEW QUESTION # 40
You plan to deploy a disconnected Azure Stack Hub integrated system.
You need to identify which type of certificate to use for the deployment and the file format for the certificate. The solution must meet the following requirements:
* Minimize administrative effort.
* Maximize security.
What should identify? To answer, select the appropriate options in the answer are a. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs
NEW QUESTION # 41
......
Microsoft AZ-600 exam is an essential certification exam for IT professionals who want to validate their expertise in configuring and operating a hybrid cloud with Microsoft Azure Stack Hub. Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub certification exam tests the candidate's knowledge of various topics related to Azure Stack Hub, and passing the exam demonstrates the candidate's ability to design, implement, and manage solutions that run on Azure Stack Hub and the hybrid cloud.
Microsoft AZ-600 exam is an excellent way to demonstrate your expertise in configuring and operating a hybrid cloud with Microsoft Azure Stack Hub. AZ-600 exam covers a range of topics related to hybrid cloud computing, and passing it is a great way to advance your career in the IT industry. By taking AZ-600 exam, you will develop the skills you need to succeed in a hybrid cloud environment and demonstrate your expertise to employers around the world.
AZ-600 Practice Test Pdf Exam Material: https://www.actual4dumps.com/AZ-600-study-material.html
AZ-600 Questions Pass on Your First Attempt Dumps for Azure Stack Hub Operator Associate Certified: https://drive.google.com/open?id=1djzG7bt0_0KchgxSUK_y-5JCV_iffVsq