Microsoft AZ-600 Exam Dumps - PDF Questions and Testing Engine
Latest AZ-600 Exam Dumps for Pass Guaranteed
Understanding Skills Covered
As the Microsoft AZ-600 is a job-specific exam, its learning is focused on certain skill areas and is quite comprehensive. The entire evaluation is divided into four domains and true to cover a wide range of skills as well as topics. So, here’s a brief outline of them:
- Data Center Integration Deployment
As a learner, here, one can easily gain expertise in Azure Stack Hub-related areas like its deployment, managing infrastructure certificates, and its registration.
- Provide Services
The first objective carries a substantial weightage and explains parts like managing the Azure Stack Hub Marketplace, creating a custom item for the marketplace, managing lifecycle for the items available in the marketplace, etc.
- Identity & Access Management
Managing and disabling multi-tenancy, configuring home as well as the guest tenant directories for the Azure Stack Hub are some of the knowledge areas well-explained in this section.
- Manage Infrastructure
The second exam domain talks about tons of things like managing system health, planning & configuring business continuity, capacity management, infrastructure update, and managing Azure Stack Hub using the privilege endpoints.
How much Exam AZ-600: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub cost
Test AZ-600: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub cost is $250 USD
Successful Azure Stack Hub students have prior experience with operating systems, virtualization, cloud infrastructure, storage structures, and networking:
- Understanding of on-premises virtualization technologies, including VMs and virtual networking
- Understanding of Active Directory concepts, including domains, forests, and domain controllers
- Understanding of network configuration, including TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies
NEW QUESTION 10
Your company is a Cloud Solution Provider (CSP).
You plan to create an Azure subscription for a new Azure Stack Hub integrated system and configure Azure Stack Hub to be available to multiple customers. Your company will also have its own workloads deployed to the Azure Stack Hub.
You need to perform the deployment so that usage data for future customers is directed to their Azure subscription.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create an Azure Partner Shared Services (APSS) subscription.
2 - Register Azure Stack Hub.
3 - Enable multitenant billing.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-add-manage-billing-as-a-csp?view=azs-2008
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-csp-howto-register-tenants?view=azs-2008&tabs=az
NEW QUESTION 11
You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.
You obtain certificates for the deployment.
You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.
Which PowerShell cmdlet should you run?
- A. Test-Certificate
- B. Invoke-AzsHubDeploymentCertificateValidation
- C. Get-PfxCertificate
- D. New-AzsHubDeploymentCertificateSigningRequest
- E. ConvertTo-AzsPFX
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008 To validate certificates for other Azure Stack Hub services, change the value for -CertificateType. For example:
# App Services
Invoke-AzsHubAppServicesCertificateValidation -CertificatePath C:\Certificates\AppServices -pfxPassword
$pfxPassword -RegionName east -FQDN azurestack.contoso.com
# DBAdapter
Invoke-AzsHubDBAdapterCertificateValidation -CertificatePath C:\Certificates\DBAdapter -pfxPassword
$pfxPassword -RegionName east -FQDN azurestack.contoso.com
# EventHubs
Invoke-AzsHubEventHubsCertificateValidation -CertificatePath C:\Certificates
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2108#perform-co
NEW QUESTION 12
You need to implement disaster recovery for the priv1 region to meet the technical requirements.
Which main components should you include in the disaster recovery plan?
- A. Option B
- B. Option C
- C. Option A
- D. Option D
Answer: A
NEW QUESTION 13
You have a multitenant Azure Stack Hub integrated system for a Cloud Solution Provider (CSP). The integrated system is used by several customers.
You hire a new support technician to help manage the integrated system.
You need to configure access for the support technician. The solution must meet the following requirements:
* The technician must be prevented from accessing customer resources.
* The technician must be able to monitor the status of infrastructure backups.
* The technician must be able to create and manage plans, offers, and quotas.
Which built-in role should you assign to the support technician?
- A. Owner
- B. Use Access Administrator
- C. Backup Operator
- D. Reader
- E. Contributor
Answer: E
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-permissions?view=azs-2008
NEW QUESTION 14
You have an Azure Stack Hub integrated system that has 10 user subscriptions. Each subscription contains approximately 50 virtual machines.
You are planning a backup and restore strategy for the integrated system.
You need to identify which type of backup to use to back up specific resources.
What should you identify for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-enable-backup-console?view=azs-2008
NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to install an update to an Azure Stack Hub integrated system.
You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.
Solution: From the administrator management endpoint, you run Test-AzureStack -Group "Default".
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
Correct: Solution: From a privileged endpoint (PEP) session, you run
Test-AzureStack -Group "UpdateReadiness".
Use a privileged endpoint (PEP) session and Test-AzureStack with UpdateReadiness.
Note:
Running the validation tool and accessing results
You can use the PEP to run the validation tool. The tool can take a while to run. The length of the time depends on the number of virtual machines in your system. Each test returns a PASS/FAIL status in the PowerShell window.
Here's an outline of the end-to-end validation testing process:
1. Establish the trust. On an integrated system, run the following command from an elevated Windows PowerShell session to add the PEP as a trusted host on the hardened VM running on the hardware lifecycle host or the Privileged Access Workstation.
2. Access the PEP.
3. Once you're in the PEP, run:
Test-AzureStack
Groups
To improve the operator experience, a Group parameter has been enabled to run multiple test categories at the same time. Currently, there are three groups defined: Default, UpdateReadiness, and SecretRotationReadiness.
UpdateReadiness: A check to see if the Azure Stack Hub instance can be updated. When the UpdateReadiness group is run, warnings are displayed as errors in the console output, and they should be considered as blockers for the update.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic-test?view=azs-2008
NEW QUESTION 16
You need to update the Azure Stack Hub integrated system registration to support the planned changes.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Run Get-AzsRegistrationToken
2 - Run the Register-AszEnvironment cmdlet and specify the -RegistrationToken $Token parameter.
3 - Run the Select-AzSubscription cmdlet and specify the -Subscription 12345678-1234-1234-1234-222222222222 parameter.
4 - Run Set-AszRegistration.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-registration
https://learn.microsoft.com/en-us/azure-stack/mdc/operator/registration-tzl
NEW QUESTION 17
You have a connected Azure Stack Hub integrated system that uses Active Directory Federation Services (AD FS) as the identity provider.
You open a PowerShell session and store the GUID of an Azure subscription in a variable named $SubscriptionlD.
You need to validate the AD FS integration.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-registration
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-adfs
NEW QUESTION 18
You plan to deploy a disconnected Azure Stack Hub integrated system.
You need to identify which type of certificate to use for the deployment and the file format for the certificate.
The solution must meet the following requirements:
* Minimize administrative effort.
* Maximize security.
What should identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Azure Stack Hub public key infrastructure (PKI) certificate requirements Azure Stack Hub has a public infrastructure network using externally accessible public IP addresses assigned to a small set of Azure Stack Hub services and possibly tenant VMs. PKI certificates with the appropriate DNS names for these Azure Stack Hub public infrastructure endpoints are required during Azure Stack Hub deployment.
Box 1: A certificate from an internal certification authority (CA)
Your Azure Stack Hub infrastructure must have network access to the certificate authority's Certificate Revocation List (CRL) location published in the certificate. This CRL must be an http endpoint. Note: for disconnected deployments, certificates issued by a public certificate authority (CA) are not supported, if the CRL endpoint is not accessible.
Features that are impaired or unavailable in disconnected deployments
Azure Stack Hub was designed to work best when connected to Azure, so it's important to note that there are some features and functionality that are either impaired or completely unavailable in the disconnected mode.
Private/internal Certificate Authority (CA)
No impact - In cases where the deployment uses certificates issued by a private CA, such as an internal CA within an organization, only internal network access to the CRL endpoint is required. Internet connectivity is not required, but you should verify that your Azure Stack Hub infrastructure has the required network access to contact the CRL endpoint defined in the certificates CDP extension.
Box 2: PFX
The certificate format must be PFX, as both the public and private keys are required for Azure Stack Hub installation. The private key must have the local machine key attribute set.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs
NEW QUESTION 19
You have an Azure Stack Hub integrated system that has 12 nodes. All the nodes run the latest firmware available from the OEM. The integrated system also has a hot spare node.
You receive an alert concerning the hardware on one of the nodes.
You need to replace the node as soon as possible. The solution must minimize disruptions to user workloads.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From the administrator portal, shut sown the node.
2 - Replace the node.
3 - From the administrator portal, run the Repair action.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-replace-node?view=azs-2008
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-node-actions?view=azs-2008&tabs=az1 d5 Eight hours ago, you received a critical alert for Azure Event Hubs.
A Microsoft Support Engineer requests that you send the Event Hubs logs only from the six hours following the alert.
Which command should you run from a privileged endpoint (PEP) session to collect only the required logs?
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByRole "EventHub"
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByResourceProvider "EventHub"
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByNode "EventHub"
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION 20
You have an Azure Stack Hub integrated system that connects to the internet.
You need to deploy Azure Event Hubs to the integrated system and ensure that users can create Event Hubs resources. The solution must minimize administrative effort.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From Marketplace management - Resource providers, download the packages to the.....
2 - Install the Event Hubs package.
3 - Add Event Hubs to plans, offers, and subscriptions.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-install?view=azs-2008&pivots=state-connected
NEW QUESTION 21
You plan to deploy an Azure Stack Hub integrated system that will be disconnected from the internet. The integrated system region name is region1, and the external domain is name is contoso.local.
You need to ensure that the generated certificate signing request (CSR) has the correct subjects and subject alternative names (SAN).
Which name must you include in the CSR?
- A. graph.region1.contoso.local
- B. *.adminhosting.region 1.azurestack.local
- C. graph.local.azurestack.external
- D. *.hosting.region1.azurestack.local
Answer: B
Explanation:
Explanation
You can deploy and use Azure Stack Hub without a connection to the internet. However, with a disconnected deployment, you're limited to an Active Directory Federation Services (AD FS) identity store and the capacity-based billing model. Because multitenancy requires the use of Azure Active Directory (Azure AD), multitenancy isn't supported for disconnected deployments.
The implementation of Extension Host requires two wild card SSL certificates, one for the Admin portal and one for the Tenant portal.
Note: Certificate requirements
The extension host implements two new domain namespaces to guarantee unique host entries for each portal extension. The new domain namespaces require two additional wildcard certificates to ensure secure communication.
The table shows the new namespaces and the associated certificates:
Table Description automatically generated
Example:
$regionName = 'east' # The region name for your Azure Stack Hub deployment
$externalFQDN = 'azurestack.contoso.com' # The external FQDN for your Azure Stack Hub deployment Starting Certificate Request Process for Deployment CSR generating for following SAN(s):
*.adminhosting.east.azurestack.contoso.com,*.adminvault.east.azurestack.contoso.com,*.blob.east.azurestack.co Present this CSR to your Certificate Authority for Certificate Generation:
CertReq: Request Created Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-extension-host-prepare
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-get-pki-certs
NEW QUESTION 22
You have an Azure Stack Hub integrated system that has 10 user subscriptions. Each subscription contains approximately 50 virtual machines.
You are planning a backup and restore strategy for the integrated system.
You need to identify which type of backup to use to back up specific resources.
What should you identify for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-enable-backup-console?view=azs-2008
NEW QUESTION 23
You have an Azure Stack Hub integrated system linked to an Azure AD tenant named contoso.onmicrosoft.com.
You need to allow users in an Azure AD tenant named adatum.onmicrosoft.com to access Azure Stack Hub resources.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From the Directories blade of the administrator portal, add adatum.onmicrosoft.com as a guest directory.
2 - From the Directories blade of the administrator portal, select Register.
3 - Forward the registration link to a global administrator of the adatum.onmicrosoft.com tenant.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
NEW QUESTION 24
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.
You receive an alert that one or more guest Azure Active Directory (Azure AD) tenants requires updates to support new features.
You need to identify which Azure AD tenants you must update.
Which two options can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. the Gec-AzsDireccoryTenancidentif ier cmdlet
- B. the Get-AzureADTenancDecail cmdlet
- C. the User subscriptions blade of the administrator portal in Azure Stack Hub
- D. the App registrations blade of the public Azure portal
- E. the Gec-AzsHealchReporc cmdlet
- F. the Directories blade of the administrator portal in Azure Stack Hub
- G. the Gec-AzsAlercs cmdlet
Answer: E,F
Explanation:
E: You can determine whether an update is required for home or guest directories by viewing the directories pane in the admin portal. Each directory listing shows the type of directory. The type can be a home or guest directory, and its status is shown.
F: .Synopsis
Gets the health report of identity application in the Azure Stack home and guest directories
.DESCRIPTION
Gets the health report for Azure Stack identity applications in the home directory as well as guest directories of Azure Stack. Any directories with an unhealthy status need to have their permissions updated.
.EXAMPLE
$adminResourceManagerEndpoint = "https://adminmanagement.local.azurestack.external"
$homeDirectoryTenantName = "<homeDirectoryTenant>.onmicrosoft.com"
Get-AzsHealthReport -AdminResourceManagerEndpoint $adminResourceManagerEndpoint `
-DirectoryTenantName $homeDirectoryTenantName -Verbose
Examples.
Example 1: Get details for a tenant
PS C:\>Get-AzureADTenantDetail
ObjectId DisplayName VerifiedDomains
-------- ----------- ---------------
85b5ff1e-0402-400c-9e3c-0f9e965325d1 Coho Vineyard & Winery {class VerifiedDomain {..
Reference:
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/AzureStack.Identity.psm1
NEW QUESTION 25
You have an Azure Slack Hub integrated system and a computer named Computer1 that runs Windows 11. You need to deploy the Azure Stack Hub PowerShell tools to Computer1. What should you do first?
- A. Connect to the privileged endpoint (PEP).
- B. Copy the AzureStack module from the Hardware Lifecycle Host (HLH).
- C. Download AzureStack-Tools from the GitHub repository.
- D. Download the AzureStack module from PowerShell Gallery.
Answer: C
NEW QUESTION 26
You need to update the Azure Stack Hub integrated system registration to support the planned changes.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Run Get-AzsRegistrationToken
2 - Run the Register-AszEnvironment cmdlet and specify the -RegistrationToken $Token parameter.
3 - Run the Select-AzSubscription cmdlet and specify the -Subscription 12345678-1234-1234-1234-222222222222 parameter.
4 - Run Set-AszRegistration.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-registration
https://learn.microsoft.com/en-us/azure-stack/mdc/operator/registration-tzl
NEW QUESTION 27
You need to change the DNS forwarder of the priv1 region.
Which two actions should you perform? Each correct answer presents part of the solution?
NOTE: Each correct selection is worth one point.
- A. Run the Set-AzsDnsForwarder cmdlet
- B. Connect to privileged endpoint (PEP) of the priv1 region
- C. Run the Register-CustomDnsServer cmdlet
- D. Run the Add-DnsServerForwarder cmdlet
- E. Connect to the administrator management endpoint of the priv1 region
Answer: A,B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-configure-dns?view=azs-2008
Topic 2, Litware Office
Existing Environment
Network Environment
The Litware offices and the Fabrikam office connect by using a private circuit. Each office connects directly to the Internet.
Identity Environment
The Litware network contains an Active Directory forest named litwareinc.com. The forest and an Azure Active Directory (Azure AD) tenant named litwareinc.com are integrated by using Active Directory Federation Services (AD FS). Litware has an enterprise certification authority (CA).
The Azure subscriptions of Litware are associated to the litwareic.com Azure AD tenant.
Fabrikam also has an Azure AD tenant.
Azure Stack Hub Environment
Litware has the following two Azure Stack Hub integrated systems:
A fully operational integrated system in Boston that connects to the Internet and has the following configurations:
- Is managed by using an administrator management endpoint of:
https://adminportal.eastus.litwareinc.com
- Has an Azure App Service deployment that has two dedicated, large web workers
- Currently uses version 2005 of Azure Stack Hub
A newly delivered integrated system in Chicago that is disconnected from the Internet and will be managed by using an administrator management endpoint of: https://adminportal.northcentralus.litwareinc.com Datacenter Environment The Chicago datacenter of Litware contains the infrastructure shown in the following table.
Current Problems
During heavy usage, requests to App Service in Boston fail despite low utilization of the web workers.
Requirements
Planned Changes
Litware plans to implement the following changes:
Deploy an Event Hubs resource provider to the integrated system in Boston.
Make Azure Functions available to Azure Stack Hub users in Boston.
Prepare the integrated system in Chicago to be production-ready.
Technical Requirements
Litware identifies the following technical requirements:
Implement an infrastructure to support Azure Functions on the integrated system in Boston.
Provision the certificates required to deploy the Event Hubs resource provider to the integrated system in Boston.
Configure an identity provider for the integrated system in Chicago.
Locate the IP address of the privileged endpoint (PEP) of the integrated system in Chicago.
Ensure that only operators have control over the creation of subscriptions on the integrated system in Chicago.
Provision a certificate to provide access to the Azure Resource Manager endpoint of the integrated system in Chicago.
Identify which PowerShell setting on CLIENT1 and CLIENT2 must be modified to register the integrated system in Chicago.
Implement a management app that will use Azure Resource Manager to inventory the resources of the integrated system in Chicago.
Security and Compliance Requirements
Litware has the following security and compliance requirements:
All infrastructure software must run the latest version, including hotfixes.
Litware must have control over certificate revocations.
Business Requirements
Litware wants to ensure that the users at Fabrikam have secure access to the workloads on the integrated system in Boston.
Updates and Hotfixes
The current hotfixes and updates available for Azure Stack Hub are:
2005
2005 hotfix 1
2005 hotfix 2
2005 hotfix 3
2008
2008 hotfix 1
2008 hotfix 2
2011 (latest version)
NEW QUESTION 28
You need to identify the authentication and authorization process for the integrated system in Chicago. The solution must meet the technical requirements.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-identity?view=azs-2008
NEW QUESTION 29
You plan to deploy an Azure Stack Hub integrated system to a datacenter.
You need to connect the top-of-rack (ToR) switches to the existing border devices. The solution must ensure that routes propagate dynamically between the ToR switches and the border devices.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-border-connectivity
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-network
NEW QUESTION 30
......
Skills measured
- Manage infrastructure (30-35%)
- Provide services (30-35%)
- Manage identity and access (10-15%)
- Implement data center integration (15-20%)
Reliable Azure Stack Hub Operator Associate AZ-600 Dumps PDF Mar 21, 2023 Recently Updated Questions: https://www.passleadervce.com/Azure-Stack-Hub-Operator-Associate/reliable-AZ-600-exam-learning-guide.html
Pass Your Microsoft AZ-600 Exam with Correct 165 Questions and Answers: https://drive.google.com/open?id=1Hy-e60gHyQ9oj_KePNJcpuqs5AkzfYak