AZ-600 Certification - The Ultimate Guide [Updated 2024]
AZ-600 Practice Exam and Study Guides - Verified By ExamPrepAway
NEW QUESTION # 64
You have an Azure Stack Hub integrated system that is disconnected from the internet.
A new Microsoft update package is released.
You need to apply the update.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Answer:
Explanation:
Explanation
Text, table Description automatically generated with medium confidence
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-update-prepare-package?view=azs-2008
NEW QUESTION # 65
You have a connected Azure Stack Hub integrated system.
You deploy an Operator Access Workstation (OAW).
You need to sign in to the OAW.
Which account should you use?
- A. AzureStackAdmin
- B. CloudAdmin
- C. GUser
- D. AdminUser
Answer: D
Explanation:
Explanation
User account policy
The following user account policy is applied to the OAW VM:
Built-in Administrator username: AdminUser
MinimumPasswordLength = 14
PasswordComplexity is enabled
MinimumPasswordAge = 1 (day)
MaximumPasswordAge = 42 (days)
NewGuestName = GUser (disabled by default)
Reference:
https://github.com/MicrosoftDocs/azure-stack-docs/blob/main/azure-stack/operator/operator-access-workstation.
NEW QUESTION # 66
You have an Azure Stack Hub integrated system that connects to the Internet.
You attempt to download an image as shown in the Add from Azure exhibit. (Click the Add from Azure tab.)
The Marketplace item blade for [smalldisk] Windows Server 2019 Datacenter-Pay as you go is shown in the item exhibit. (Click the Item tab.)
The marketplace items are shown in the Marketplace Items exhibit. (Click the Marketplace Items tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-windows-server-faq?view=azs-2102&tabs=az
NEW QUESTION # 67
You have an Azure Stack Hub integrated system.
You install the Azure Gallery Packager (.azpkg) tool on a management workstation.
You need to define a custom Azure Stack Hub Marketplace item that will provision a virtual machine from a base image.
Which file should you configure for each requirement? To answer, drag the appropriate files to the correct requirements. Each file may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Explanation:
Explanation
NEW QUESTION # 68
You have an Azure Stack Hub integrated system.
You plan to enable Azure Command-Line Interface (CLI) for Azure Stack Hub users.
You create an alias template file.
You need to configure the virtual machine aliases endpoint. The solution must use the principle of least privilege.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: Create a storage account
A sample alias file with many common image aliases is available. You can use that as a starting point. Host this file in a space where your CLI clients can reach it. One way is to host the file in a blob storage account and share the URL with your users:
1. Download the sample file from GitHub.
2. Create a storage account in Azure Stack Hub (Step 1). When that's done, create a blob container. Set the access policy to "public." (Step 2)
3. Upload the JSON file to the new container (Step 3). When that's done, you can view the URL of the blob.
Select the blob name and then select the URL from the blob properties.
Step 2: Create a blob container and set the Public access to Blob.
Set up the VM aliases endpoint
Azure Stack Hub operators should set up a publicly accessible endpoint that hosts a VM alias file. The VM alias file is a JSON file that provides a common name for an image. You use the name when you deploy a VM as an Azure CLI parameter.
Note: When public access is allowed for a storage account, you can configure a container with the following permissions:
* Public read access for blobs only: Blobs within the container can be read by anonymous request, but container data is not available anonymously. Anonymous clients cannot enumerate the blobs within the container.
* Public read access for container and its blobs: Container and blob data can be read by anonymous request, except for container permission settings and container metadata. Clients can enumerate blobs within the container by anonymous request, but cannot enumerate containers within the storage account.
* No public read access: The container and its blobs can be accessed only with an authorized request. This option is the default for all new containers.
Step 3: To the container, upload the alias template as a JSON file.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-cli-admin
https://learn.microsoft.com/en-us/azure/storage/blobs/anonymous-read-access-configure
NEW QUESTION # 69
You need to implement disaster recovery for the priv1 region to meet the technical requirements.
Which main components should you include in the disaster recovery plan?
- A. Option A
- B. Option D
- C. Option C
- D. Option B
Answer: D
NEW QUESTION # 70
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.
The integrated system has the following domains enabled for multitenancy:
fabrikam.onmicrosoft.com
contoso.onmicrosoft.com
fabrikam.com
contoso.com
You need to disable multitenancy for contoso.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008
NEW QUESTION # 71
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy and contains a user subscription. The subscription contains a user named User1.
The integrated system has the following configurations:
Region name: region1
Fully qualified domain name (FQDN): contoso.com
You need to identify which gallery endpoint URI User1 must use.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or net at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-endpoints
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and-publish-marketplace-item
NEW QUESTION # 72
You have an Azure Stack Hub integrated system that connects to the Internet.
You need to enable multitenant billing.
What should you do first?
- A. Generate a service principal to connect the Azure Billing API to Azure Commerce
- B. Email the registration subscription ID, resource group name, and registration name to [email protected]
- C. Create a blob storage account named AzSCommerceStaging that stores CSV usage metadata before you send the metadata to Azure Commerce
- D. Run the New-AzResourcecmdlet
Answer: B
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-csp-howto-register-tenants?view=azs-
2008&tabs=az
NEW QUESTION # 73
You have two Azure subscriptions named sub1 and sub2. The subscriptions are linked to an Azure AD tenant named contoso.com.
You deploy on Azure Stack Hub integrated system and register the system with sub1.
You open a new PowerShell session and connect to sub1.
You need to register the Azure Stack Hub integrated system with sub2.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 74
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to collect diagnostic logs, but do not have access to an SMB share.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From the administrator portal, create an Azure Storage account and a container
2 - Create a shared access signature (SAS)
3 - Connect to the privileged endpoint (PEP)
4 - Run the Get-AzureStackLog cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION # 75
You have a Windows Server-based certification authority (CA) and a disconnected Azure Stack Hub integrated system.
You need to issue a certificate that will be used to authenticate a service principal when the service principal accesses Azure Stack Hub resources.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 76
You provision a new certificate to support the planned changes.
You need to validate the certificate.
Which PowerShell module should you install first?
- A. Az.Websites
- B. Microsoft.AzureStack.ReadinessChecker
- C. AzureStack
- D. AzureRM.TemplateValidator
Answer: B
Explanation:
Use the Azure Stack Hub Readiness Checker tool to validate that generated public key infrastructure (PKI) certificates which are suitable for pre-deployment. Validate certificates by leaving enough time to test and reissue certificates if necessary.
The Readiness Checker tool performs the following certificate validations:
* Parse PFX
Checks for valid PFX file, correct password, and whether the public information is protected by the password.
* Expiry Date
Checks for minimum validity of seven days.
* Signature algorithm
Checks that the signature algorithm isn't SHA1.
* Private Key
Checks that the private key is present and is exported with the local machine attribute.
* Etc.
Note: Perform core services certificate validation
Use these steps to validate the Azure Stack Hub PKI certificates for deployment and secret rotation:
1. Install AzsReadinessChecker from a PowerShell prompt (5.1 or above) by running the following cmdlet:
Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease
2. Create the certificate directory structure.
3. Etc.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs
NEW QUESTION # 77
You have an Azure Stack Hub integrated system that connects to the internet.
You need to deploy Azure Event Hubs to the integrated system and ensure that users can create Event Hubs resources. The solution must minimize administrative effort.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From Marketplace management - Resource providers, download the packages to the.....
2 - Install the Event Hubs package.
3 - Add Event Hubs to plans, offers, and subscriptions.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-install?view=azs-2008&pivots=state-connected
NEW QUESTION # 78
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy and contains a tenant. The integrated system is configured as shown in the following table.
You need to configure the URI that will be used by the tenant to query the subscription usage.
How should you complete the URI? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-tenant-resource-usage-api
NEW QUESTION # 79
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.
You deploy a new computer named Computer1 that runs Windows 11.
You need to connect to the Azure Stack Hub Resource Manager (user) endpoint from Computer1 by using PowerShell.
Which command should you run?
- A. Add-AzEnvironment -Name "AzureStackUser" -ArmEndpoint "https://portal.region1.fabrikam.com" Connect-AzAccount -EnvironmentName "AzureStackUser"
- B. Add-AzEnvironment -Name "AzureStackUser" -ArmEndpoint
"https://adminmanagement.region1.fabrikam.com"
Connect-AzAccount -EnvironmentName "AzureStackUser" - C. Add-AzureEnvironment -Name "AzureStackUser" -ArmEndpoint
"https://adminmanagement.region1.fabrikam.com"Connect-AzureRmAccount -EnvironmentName "AzureStackUser" - D. Add-AzEnvironment -Name "AzureStackUser" -ArmEndpoint
"https://management.region1.fabrikam.com"
Connect-AzureRmAccount -EnvironmentName "AzureStackUser"
Answer: D
Explanation:
Explanation
A DNS entry is created for each endpoint in the external DNS zone that's specified at deployment time. For example, the user portal is assigned the DNS host entry of portal.<region>.<fqdn>.
* Azure Resource Manager (user)
Management.<region>.<fqdn>
Incorrect:
Not C: Portal (user)
Portal.<region>.<fqdn>
Not A, Not D: Azure Resource Manager (administrator)
Adminmanagement.<region>.<fqdn>
Note: Portal (administrator)
Adminportal.<region>.<fqdn>
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-endpoints
NEW QUESTION # 80
You have an Azure Stack Hub integrated system.
You need to add GPUs to the integrated system. The solution must minimize downtime of the existing Azure Stack Hub workloads.
Which PowerShell cmdlet should you run first?
- A. Rescarc-AzsInfrascruccureRolelnscance
- B. Resec-DacacencerlncegrationConfiguration
- C. Disable-AzsScaleUnitNode
- D. Scop-AzureScack
Answer: D
Explanation:
Note: Upgrade GPUs or add to an existing node
The following section provides a high-level overview of the process to add a GPU.
The entire scale unit must be shut down, as a rolling GPU upgrade isn't supported. Stop Azure Stack Hub using the steps documented in the Start and stop Azure Stack Hub article.
Add or upgrade the memory on each physical computer using your hardware manufacturer's documentation.
Start Azure Stack Hub using the steps in Start and stop Azure Stack Hub.
Note: Stop Azure Stack Hub
Stop or shut down Azure Stack Hub with the following steps:
1. Prepare all workloads running on your Azure Stack Hub environment's tenant resources for the upcoming shutdown.
2. Open a privileged endpoint session (PEP) from a machine with network access to the Azure Stack Hub ERCS VMs. For instructions, see Using the privileged endpoint in Azure Stack Hub.
3. From the PEP, run:
Stop-AzureStack
Wait for all physical Azure Stack Hub nodes to power off.
Note
You can verify the power status of a physical node by following the instructions from the original equipment manufacturer (OEM) who supplied your Azure Stack Hub hardware.
4. (Optional) If the stop operation times out, you can monitor its progress using the following PowerShell cmdlet:
Get-ActionStatus Stop-AzureStack
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-start-and-stop
NEW QUESTION # 81
You have an Active Directory federation Services {AD FS) deployment.
You plan to deploy a disconnected Azure Stack Hub integrated system.
You install the Azure Stack Hub Readiness Checker tool.
You need to validate that the AD FS deployment can be used to manage role-based access control (RBAC) roles in Azure Stack Hub.
how should you complete the command? To answer, select the appropriate options m the answer area NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 82
You have an Azure Stack Hub integrated system that is disconnected from the internet.
A new Microsoft update package is released.
You need to apply the update.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Answer:
Explanation:
Explanation
Text, table Description automatically generated with medium confidence
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-update-prepare-package?view=azs-2008
NEW QUESTION # 83
You have an Azure Stack Hub integrated system that contains a guest Azure AD tenant named fabrikam.com.
You need to unregister fabrikam.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: Connect to the Azure Resource Manager (ARM) endpoint
Compare to the steps in the note below.
Use https://adminmanagement.<region>.<domain>
Azure Resource Manager (administrator)
Adminmanagement.<region>.<fqdn>
Azure Resource Manager (user)
Management.<region>.<fqdn>
Step 2: Run the -Unregister-AzSGuestDirectoryTenant cmdlet.
Unregister a guest directory
If you no longer want to allow sign-ins to Azure Stack Hub services from a guest directory tenant, you can unregister the directory. Again, both the home Azure Stack Hub directory and guest directory need to be configured.
Configure guest directory
Step 3: Instruct the global administrator of fabrikam.com to run the -unregister- AzsWithMyDirectoryTenant cmdlet.
Configure guest directory
Note: Enabling AAD Multi-Tenancy in Azure Stack
Allowing users and service principals from multiple AAD directory tenants to sign in and create resources on Azure Stack. There are two personas involved in implementing this scenario.
1. The Administrator of the Azure Stack installation
2. The Directory Tenant Administrator of the directory that needs to be onboarded to Azure Stack Step 1: Onboard the Guest Directory Tenant to Azure Stack This step will let Azure Resource manager know that it can accept users and service principals from the guest directory tenant.
$adminARMEndpoint = "https://adminmanagement.<region>.<domain>"
$azureStackDirectoryTenant = "<homeDirectoryTenant>.onmicrosoft.com" # this is the primary tenant Azure Stack is registered to
$guestDirectoryTenantToBeOnboarded = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack
$location = "local"
Register-AzsGuestDirectoryTenant -AdminResourceManagerEndpoint $adminARMEndpoint `
-DirectoryTenantName $azureStackDirectoryTenant `
-GuestDirectoryTenantName $guestDirectoryTenantToBeOnboarded `
-ResourceGroupName "system.local" `
-Location $location
With this step, the work of the Azure Stack administrator is done.
Guest Directory Tenant Administrator
Step 2: Registering Azure Stack applications with the Guest Directory
Execute the following cmdlet as the administrator of the directory that needs to be onboarded, replacing
$guestDirectoryTenantName with your directory domain name
$tenantARMEndpoint = "https://management.<region>.<domain>"
$guestDirectoryTenantName = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack Register-AzsWithMyDirectoryTenant -TenantResourceManagerEndpoint $tenantARMEndpoint `
-DirectoryTenantName $guestDirectoryTenantName
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
NEW QUESTION # 84
You have an Azure Stack Hub integrated system that connects to the Internet.
You are migrating several Hyper-V workloads to Azure Stack Hub. Billing for the workloads is consumption-based.
You need to predict the ongoing Microsoft subscription charges for the workloads.
You run an Azure Migrate assessment and receive the output shown in the following table.
The values from which three columns affect the ongoing Microsoft subscription charges? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Disk 1 write ops (operations per second)
- B. Cores
- C. Memory (In MB)
- D. Network throughput (MB per second)
- E. Disk 1 read ops (operations per second)
- F. OS name
- G. Disk 1 size (In GB)
Answer: B,C,G
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-usage-related-faq?view=azs-2008
NEW QUESTION # 85
You have an Azure Stack Hub integrated system that has 10 user subscriptions. Each subscription contains approximately 50 virtual machines.
You are planning a backup and restore strategy for the integrated system.
You need to identify which type of backup to use to back up specific resources.
What should you identify for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-enable-backup-console?view=azs-200
NEW QUESTION # 86
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to make a new image available in Azure Stack Hub Marketplace in the disconnected environment.
From a computer that has Internet access, you download all the required tools.
Which four actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Sign in to the Azure subscription used to register Azure Stack Hub
2 - Run the Install-Module -Nme Azs.Syndication.Admin command
3 - Run the select-AzsMarketplaceItem cmdlt
4 - Run the Export-AzsMarketplaceItem cmdlt
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-2008&tabs=az1%2Caz2&pivots=state-disconnected
NEW QUESTION # 87
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.
The integrated system has the following domains enabled for multitenancy:
* fabrikam.onmicrosoft.com
* contoso.onmicrosoft.com
* fabrikam.com
* contoso.com
You need to disable multitenancy for contoso.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008
NEW QUESTION # 88
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.
You have a computer that runs Windows 10. You use the computer to manage the integrated system.
You create a custom marketplace item on the computer.
You need to publish the item to Azure Stack Hub Marketplace.
You create a storage account.
What should you create next?
- A. a file share that has the performance tier set to
- B. a container that has a public access level of blob
- C. a container that has a public access level of private
- D. a file share that has the performance tier set to
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and-publish-marketplace-item?view=az
NEW QUESTION # 89
......
Passing the Microsoft AZ-600 Exam demonstrates that the candidate has the necessary skills and knowledge to configure and operate a hybrid cloud with Microsoft Azure Stack Hub. Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub certification is valuable for IT professionals who want to advance their careers in cloud computing and demonstrate their expertise in Azure Stack Hub. Additionally, the certification shows that the candidate is committed to continuous learning and development, which is essential in the fast-paced world of cloud computing.
Microsoft AZ-600 exam is an excellent way to demonstrate your expertise in configuring and operating a hybrid cloud with Microsoft Azure Stack Hub. AZ-600 exam covers a range of topics related to hybrid cloud computing, and passing it is a great way to advance your career in the IT industry. By taking AZ-600 exam, you will develop the skills you need to succeed in a hybrid cloud environment and demonstrate your expertise to employers around the world.
Microsoft AZ-600 certification exam is a comprehensive exam that tests the candidate's understanding of hybrid cloud environments with Azure Stack Hub. AZ-600 exam measures the candidate's ability to deploy and manage Azure Stack Hub solutions, including configuring infrastructure components, managing resource providers, and monitoring and troubleshooting Azure Stack Hub environments. Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub certification is designed to validate the candidate's skills and knowledge in operating a hybrid cloud with Microsoft Azure Stack Hub.
Ultimate Guide to the AZ-600 - Latest Edition Available Now: https://ucertify.examprepaway.com/Microsoft/braindumps.AZ-600.ete.file.html