Free 2021 Azure Stack Hub Operator Associate AZ-600 dumps are available on Google Drive shared by PassCollection
Welcome to download the newest PassCollection AZ-600 PDF dumps: https://www.passcollection.com/AZ-600_real-exams.html ( 80 Q&As)
NEW QUESTION 40
You have an Azure Stack Hub integrated system.
You plan to install the Event Hubs resource provider.
You purchase a public wildcard certificate that has a subject name of
*.eventhub.chicago.contoso.com. The path to the certificate is C:\Certificates\ssl.pfx.
You need to validate whether the certificate meets the requirements of Azure Event Hubs.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Install the AzureStack.Identity PowerShell module
- B. Convert the Ssl.pfx file to a CER file
- C. Install the Microsoft.AzureStack.ReadinessChecker Powershell module
- D. Run the Invoke-AzsHubDeploymentCertificateValidation cmdlet
- E. Run the Invoke-AzsHubEventHubsCertificateValidation cmdlet
- F. Rename the certificate file as Eventhub.pfx
Answer: C,D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008
NEW QUESTION 41
You have an Azure Stack Hub integrated system.
You need to create a new offer that can be used only by an operator to provision user subscriptions. The solution must simplify the process for users to create resources.
Which type of offer should you create?
- A. public with a base plan only
- B. private with a base plan only
- C. delegated with a base plan only
- D. decommissioned
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-delegated-provider?view=azs-2008
Topic 1, Northwind Traders
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the button to return to the question.
Overview
A company named Northwind Traders has a main office and a datacenter. All development occurs at the main office.
Existing Environment
Identity Environment
The network contains an Active Directory forest named northwind.com. The forest and an Azure Active Directory (Azure AD) tenant named northwind.onmicrosoft.com are integrated by using Active Directory Federation Service (AD FS).
All Azure subscriptions use the northwind.onmicrosoft.com Azure AD tenant.
Northwind Traders uses an Enterprise Agreement (EA) subscription.
All operators are global administrators in northwind.onmicrosoft.com.
Azure Stack Hub Environment
Northwind Traders has the following five Azure Stack Hub integrated systems:
* One integrated system that connects to an internet-facing network and has the following configurations:
- The region name is int1.
- The operators do not have access to the user subscriptions.
- The integrated system is used for customer and partner applications.
- The partners and customers of NorthWind Traders use guest user accounts to access various user resources.
* Two integrated systems that connect to a private network, are accessed only from inside the company, and have the following configurations:
- The integrated systems are dedicated to research and development.
- One integrated system has a region name of priv1, and the other has a region name of priv2.
- The integrated systems are used for various data rendering, AI workloads, inference, and data visualization.
* Two integrated systems that are dedicated to application development and have the following configurations:
- The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.
- One integrated system has a region name of dev1, and the other has a region name of dev2.
- Both regions are used only by developers at Northwind Traders.
The external domain name of all the integrated systems is northwind.com. All the integrated systems have Azure App Service and the Azure Kubernetes Service (AKS) engine deployed.
The computer of the operator in each region has all the prerequisite software installed for managing Azure Stack Hub.
Current Problems
You identify the following issues in the current environment:
* The priv2 region recently experienced a catastrophic failure.
* The developers report high chargeback costs for the dev1 region.
* The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images.
* The Northwind Traders partners and customers report that use of the guest user accounts is too complex.
* Users in the priv1 region recently deployed NCas_v4 virtual machines for various AI workload. The users discover that the virtual machines do not use GPUs.
Requirements
Planned Changes
Northwind Traders plans to implement the following changes:
* Remove all guest user accounts.
* Change the DNS forwarder of the priv1 region.
* Change the billing model and registration name of the int1 region.
* After the catastrophic failure, restore the priv2 region to its original state.
* Provide each partner with its own dedicated user subscription that will use its own dedicated Azure AD tenant.
Technical Requirements
Northwind Traders identifies the following technical requirements:
* Minimize hardware and software costs.
* Standardize all datacenter workloads on Azure Stack Hub.
* In the priv1 region, implement a disaster recovery plan for App Service.
* Whenever possible, implement solutions by using the minimum amount of administrative effort.
* In the dev2 region, update the AKS Base Ubuntu image to the latest version in Azure Stack Hub Marketplace.
* Whenever possible, implement solutions by using built-in tools, features, and services without acquiring additional third-party tools.
* For the users' virtual machines and the associated resources in the dev1 and dev2 regions, implement a business continuity and disaster recovery plan that includes an automated failback process.
* If changes to the Azure Stack Hub infrastructure cause workload downtime outside of planned maintenance windows, notify all users in the region where the downtime occurred and schedule a maintenance window.
NEW QUESTION 42
You have an Azure Stack Hub integrated system.
You need to delegate the management of offers to a user named User1.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-delegated-provider?view=azs-2008
NEW QUESTION 43
You deploy an Azure Stack Hub integrated system that contains an Azure App Service deployment. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to provide users with the ability to deploy App Service web apps directly from their GitHub repositories.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create a GitHub action
2 - Register a GitHub application
3 - Modify the Source control configuration setting of the App Service resource provider Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-configure-deployment-sources?view=azs-2008
NEW QUESTION 44
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to install an update to an Azure Stack Hub integrated system.
You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.
Solution: From the administrator management endpoint, you run
Test-AzureStack -Group "UpdateReadiness".
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic-test?view=azs-2008
NEW QUESTION 45
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
During an update, an error occurs that prevents you from accessing the administrator portal.
While troubleshooting the issue, a Microsoft Support Engineer requests that you collect and send the relevant logs.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION 46
You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.
You obtain certificates for the deployment.
You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.
Which PowerShell cmdlet should you run?
- A. ConvertTo-AzsPFX
- B. Test-Certificate
- C. Invoke-AzsHubDeploymentCertificateValidation
- D. New-AzsHubDeploymentCertificateSigningRequest
- E. Get-PfxCertificate
Answer: C
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008 Manage Identity and Access Testlet 1 Case study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
A company named Northwind Traders has a main office and a datacenter. All development occurs at the main office.
Existing Environment
Identity Environment
The network contains an Active Directory forest named northwind.com. The forest and an Azure Active Directory (Azure AD) tenant named northwind.onmicrosoft.com are integrated by using Active Directory Federation Service (AD FS).
All Azure subscriptions use the northwind.onmicrosoft.com Azure AD tenant.
Northwind Traders uses an Enterprise Agreement (EA) subscription.
All operators are global administrators in northwind.onmicrosoft.com.
Azure Stack Hub Environment
Northwind Traders has the following five Azure Stack Hub integrated systems:
* One integrated system that connects to an internet-facing network and has the following configurations:
- The region name is int1.
- The operators do not have access to the user subscriptions.
- The integrated system is used for customer and partner applications.
- The partners and customers of NorthWind Traders use guest user accounts to access various user resources.
* Two integrated systems that connect to a private network, are accessed only from inside the company, and have the following configurations:
- The integrated systems are dedicated to research and development.
- One integrated system has a region name of priv1, and the other has a region name of priv2.
- The integrated systems are used for various data rendering, AI workloads, inference, and data visualization.
* Two integrated systems that are dedicated to application development and have the following configurations:
- The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.
- One integrated system has a region name of dev1, and the other has a region name of dev2.
- Both regions are used only by developers at Northwind Traders.
The external domain name of all the integrated systems is northwind.com. All the integrated systems have Azure App Service and the Azure Kubernetes Service (AKS) engine deployed.
The computer of the operator in each region has all the prerequisite software installed for managing Azure Stack Hub.
Current Problems
You identify the following issues in the current environment:
* The priv2 region recently experienced a catastrophic failure.
* The developers report high chargeback costs for the dev1 region.
* The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images.
* The Northwind Traders partners and customers report that use of the guest user accounts is too complex.
* Users in the priv1 region recently deployed NCas_v4 virtual machines for various AI workload. The users discover that the virtual machines do not use GPUs.
Requirements
Planned Changes
Northwind Traders plans to implement the following changes:
* Remove all guest user accounts.
* Change the DNS forwarder of the priv1 region.
* Change the billing model and registration name of the int1 region.
* After the catastrophic failure, restore the priv2 region to its original state.
* Provide each partner with its own dedicated user subscription that will use its own dedicated Azure AD tenant.
Technical Requirements
Northwind Traders identifies the following technical requirements:
* Minimize hardware and software costs.
* Standardize all datacenter workloads on Azure Stack Hub.
* In the priv1 region, implement a disaster recovery plan for App Service.
* Whenever possible, implement solutions by using the minimum amount of administrative effort.
* In the dev2 region, update the AKS Base Ubuntu image to the latest version in Azure Stack Hub Marketplace.
* Whenever possible, implement solutions by using built-in tools, features, and services without acquiring additional third-party tools.
* For the users' virtual machines and the associated resources in the dev1 and dev2 regions, implement a business continuity and disaster recovery plan that includes an automated failback process.
* If changes to the Azure Stack Hub infrastructure cause workload downtime outside of planned maintenance windows, notify all users in the region where the downtime occurred and schedule a maintenance window.
NEW QUESTION 47
You plan to deploy an Azure Stack Hub integrated system that will connect to the Internet.
You need to define the public VIP pool.
What is the smallest subnet mask that you can use for the public VIP pool?
- A. /22
- B. /25
- C. /26
- D. /27
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-network?view=azs-2008
NEW QUESTION 48
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
During an update, an error occurs that prevents you from accessing the administrator portal.
While troubleshooting the issue, a Microsoft Support Engineer requests that you collect and send the relevant logs.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Connect to the privileged endpoint(PEP)
2 - Run the Get-AzureStackLog cmdlet and specify a lacal file share to collect the logs of events that occurred during the update period
3 - From a workstation that has internet access, upload the logs to the location specified by the Microsoft Support Engineer Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION 49
You have an Azure Stack Hub integrated system.
You need to update the integrated system to use a non-Windows NTP service that has a host name of ntp1.contoso.com.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-configure-time?view=azs-2008
NEW QUESTION 50
You have an Azure Stack Hub integrated system that connects to the Internet.
You need to enable multitenant billing.
What should you do first?
- A. Create a blob storage account named AzSCommerceStaging that stores CSV usage metadata before you send the metadata to Azure Commerce
- B. Run the New-AzResourcecmdlet
- C. Generate a service principal to connect the Azure Billing API to Azure Commerce
- D. Email the registration subscription ID, resource group name, and registration name to [email protected]
Answer: D
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-csp-howto-register-tenants?view=azs-
2008&tabs=az
NEW QUESTION 51
You have an Azure Stack Hub integrated system that connects to the Internet.
You need to enable multitenant billing.
What should you do first?
- A. Email the registration subscription ID, resource group name, and registration name to
- B. Create a blob storage account named AzSCommerceStaging that stores CSV usage metadata before you send the metadata to Azure Commerce
- C. Run the New-AzResource cmdlet
- D. Generate a service principal to connect the Azure Billing API to Azure Commerce
Answer: A
Explanation:
[email protected]
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-csp-howto-register-tenants?view=azs-2008&tabs=az
NEW QUESTION 52
You plan to deploy an Azure Stack Hub integrated system that will connect to the internet.
You are planning the network design. You plan the address space for the public VIP network and the private network.
Which three additional networks are required for the Azure Stack Hub deployment? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. an infrastructure network
- B. a DNS network
- C. a storage network
- D. a BMC network
- E. a hypervisor network
- F. a switch infrastructure network
Answer: A,D,F
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-network?view=azs-2008
NEW QUESTION 53
Your company is a Cloud Solution Provider (CSP) that provides Azure Stack Hub services to multiple customers in a multitenant environment.
User subscriptions are linked to Azure CSP subscriptions for billing reconciliation.
You need to view the usage of all the customers for the current day and the last seven days.
What should you do?
- A. Query the Azure Stack Hub usage API
- B. From Partner Center, download the daily-rated usage reconciliation CSV
- C. From Partner Center, view the usage associated to the Azure Partner Shared Services (APSS) subscription
- D. Query the Partner Center Usage API
Answer: D
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-provider-resource-api?view=azs-2008
NEW QUESTION 54
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You add OsType: Windows to the Azure Resource Manager template.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION 55
You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-
Topic 2, Litware Office
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the button to return to the question.
Overview
Existing Environment
Network Environment
The Litware offices and the Fabrikam office connect by using a private circuit. Each office connects directly to the Internet.
Identity Environment
The Litware network contains an Active Directory forest named litwareinc.com. The forest and an Azure Active Directory (Azure AD) tenant named litwareinc.com are integrated by using Active Directory Federation Services (AD FS). Litware has an enterprise certification authority (CA).
The Azure subscriptions of Litware are associated to the litwareic.com Azure AD tenant.
Fabrikam also has an Azure AD tenant.
Azure Stack Hub Environment
Litware has the following two Azure Stack Hub integrated systems:
* A fully operational integrated system in Boston that connects to the Internet and has the following configurations:
- Is managed by using an administrator management endpoint of:
https://adminportal.eastus.litwareinc.com
- Has an Azure App Service deployment that has two dedicated, large web workers
- Currently uses version 2005 of Azure Stack Hub
* A newly delivered integrated system in Chicago that is disconnected from the Internet and will be managed by using an administrator management endpoint of:
https://adminportal.northcentralus.litwareinc.com
Datacenter Environment
The Chicago datacenter of Litware contains the infrastructure shown in the following table.
Current Problems
During heavy usage, requests to App Service in Boston fail despite low utilization of the web workers.
Requirements
Planned Changes
Litware plans to implement the following changes:
* Deploy an Event Hubs resource provider to the integrated system in Boston.
* Make Azure Functions available to Azure Stack Hub users in Boston.
* Prepare the integrated system in Chicago to be production-ready.
Technical Requirements
Litware identifies the following technical requirements:
* Implement an infrastructure to support Azure Functions on the integrated system in Boston.
* Provision the certificates required to deploy the Event Hubs resource provider to the integrated system in Boston.
* Configure an identity provider for the integrated system in Chicago.
* Locate the IP address of the privileged endpoint (PEP) of the integrated system in Chicago.
* Ensure that only operators have control over the creation of subscriptions on the integrated system in Chicago.
* Provision a certificate to provide access to the Azure Resource Manager endpoint of the integrated system in Chicago.
* Identify which PowerShell setting on CLIENT1 and CLIENT2 must be modified to register the integrated system in Chicago.
* Implement a management app that will use Azure Resource Manager to inventory the resources of the integrated system in Chicago.
Security and Compliance Requirements
Litware has the following security and compliance requirements:
* All infrastructure software must run the latest version, including hotfixes.
* Litware must have control over certificate revocations.
Business Requirements
Litware wants to ensure that the users at Fabrikam have secure access to the workloads on the integrated system in Boston.
Updates and Hotfixes
The current hotfixes and updates available for Azure Stack Hub are:
* 2005
* 2005 hotfix 1
* 2005 hotfix 2
* 2005 hotfix 3
* 2008
* 2008 hotfix 1
* 2008 hotfix 2
* 2011 (latest version)
NEW QUESTION 56
You need to implement the management app. The solution must meet the technical requirements.
What should you use?
- A. a PowerShell remoting session to the PEP
- B. a PowerShell session to litwareinc.com
- C. a browser session to the administrator portal
- D. a browser session to litwareinc.com
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-portals?view=azs-2008
NEW QUESTION 57
You have an Azure Stack Hub integrated system.
You need to create a new offer that can be used only by an operator to provision user subscriptions. The solution must simplify the process for users to create resources.
Which type of offer should you create?
- A. public with a base plan only
- B. private with a base plan only
- C. delegated with a base plan only
- D. decommissioned
Answer: C
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-delegated-provider?view=azs-2008
NEW QUESTION 58
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to install an update to an Azure Stack Hub integrated system.
You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.
Solution: From a privileged endpoint (PEP) session, you run
Test-AzureStack -Group "UpdateReadiness".
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic-test?view=azs-2008
NEW QUESTION 59
......
Tested Material Used To AZ-600: https://www.passcollection.com/AZ-600_real-exams.html
Following are some new AZ-600 Real Exam Questions!: https://drive.google.com/open?id=1VDDkGM8YFHxeHawjVxqg61p-SrIauaRz
