You have an Azure Stack Hub integrated system that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The Azure Stack Hub portals are configured as shown in the following table. You register a guest Azure AD tenant named adatum.onmicrosoft.com that contains a user named user1@fabrikam.com. User1 needs to subscribe to art Azure Stack Hub integrated system offer. Which URL should User1 use?

https //portal eastus.contoso.com/adatum.onmicrosoft.com

https://portal.eastus.contoso.com/

https://portal.eastus.contoso.com/fabrikam.com

https://adminportal.eastus.contoso.com/fabnkam.com

https //portal eastus.contoso.com/adatum.onmicrosoft.com

You have an Azure Slack Hub integrated system.You receive the following alert: "One or more guest Azure AD tenants must be configured." You need to identify which Azure AD tenants require configuration. Which PowerShell cmdlet should you run?

Get-AzsDirectoryTenantidcntifier

You are troubleshooting an Azure Stack Hub integrated system.A Microsoft Support Engineer needs to review automatically uploaded logs.What should you provide to the Microsoft Support Engineer?

the Microsoft Partner Network (MPN) number

the default service provider subscription ID

You are planning an Azure Slack Hub deployment for an enterprise customer.You need to identify an appropriate identity model for the customer. The solution must use capacitybased billing. Which two identity providers can you use for the customer? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Active Directory Federation Services (AD FS) in an Enterprise Agreement (EA)

Azure Active Directory (Azure AD) in an Enterprise Agreement (EA)

Active Directory Federation Services (AD FS) in an Enterprise Agreement (EA)

Azure Active Directory (Azure AD) in a Cloud Solution Provider (CSP) subscription

Azure Active Directory (Azure AD) in an Enterprise Agreement (EA)

Active Directory Federation Services (AD FS) in a Cloud Solution Provider (CSP) subscription

You have an Azure Slack Hub integrated system that uses the latest version.You discover an alert for an external certificate that will expire. You obtain new certificates.You need to validate that all the components required to change the certificates are in a healthy state, and then renew the certificates. Which three actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Copy the certificates to an SMB file share that is accessible from the privilege endpoint (PEP).

Run the Test-AzureStaek cmdlet and Specify the -Group SecretRotationReadiness parameter.

Run Start-SecretRotation cmdlet and Specify the Internal parameter.

Run the Start -Sec ret Rot at Ion and specify the PfxFilePath parameter.

Copy the certificates to Azure Blob storage.

Copy the certificates to an SMB file share that is accessible from the privilege endpoint (PEP).

Run the Test-AzureStack cmdlet and Specify the -Group UpdateReadiness parameter.

Run the Test-AzureStaek cmdlet and Specify the -Group SecretRotationReadiness parameter.

Run Start-SecretRotation cmdlet and Specify the Internal parameter.

You have 20 computers that run Linux.You deploy a disconnected Azure Stack Hub integrated system.You need to ensure that users on the Linux computers can manage their Azure Stack Hub resources by using Azure Command-Line Interface (CLI). What should you do first?

Export the root certificate of the integrated system as a CER file.

Request a new certificate for the integrated system.

For each Linux computer, request a certificate from the integrated system.

Export the root certificate of the integrated system as a P7B file.

Export the root certificate of the integrated system as a CER file.

You have an Azure Slack Hub integrated system and a computer named Computer1 that runs Windows 11. You need to deploy the Azure Stack Hub PowerShell tools to Computer1. What should you do first?

Download AzureStack-Tools from the GitHub repository.

Connect to the privileged endpoint (PEP).

Copy the AzureStack module from the Hardware Lifecycle Host (HLH).

Download AzureStack-Tools from the GitHub repository.

Download the AzureStack module from PowerShell Gallery.

You have an Azure Stack Hub integrated system.You plan to deploy an Event Hubs resource provider that has the following requirements:• Provides a 1 CU Azure Event Hubs cluster that requires a duster of 5x D11_V2 virtual machines• Scales linearly as additional CUs are deployedAt a minimum, which other management resources are required for the Event Hubs resource provider?

a 1x D2_V2 virtual machine for management that does not scale as Event Hubs clusters are added

a cluster of ix D2_V2 virtual machines for management that does not scale as Event Hubs clusters are added

a 1x D2_V2 virtual machine for management that scales linearly to a maximum of 10 nodes as Event Hubs clusters are added

a 1x D2_V2 virtual machine for management that does not scale as Event Hubs clusters are added

a cluster of 3x D2_V2 virtual machines for management that scales linearly to a maximum of 10 as Event Hubs clusters are added

You have a disconnected Azure Stack Hub integrated system.You plan to implement an app named App1.You need to create a new service principal for App1. The solution must maximize security.What should you do first?

Create an app registration in Azure AD.

Create a group managed service account (gMSA)

Generate an Azure Key Vault secret.

You have an Azure Stack Hub integrated system linked to an Azure AD tenant.You need to back up virtual machines in user subscriptions. The solution must meet the following requirements:Back up running virtual machines.Maximize resiliency.What should you use?

Microsoft System Center Data Protection Manager (DPM)

You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.You receive an alert that one or more guest Azure Active Directory (Azure AD) tenants requires updates to support new features. You need to identify which Azure AD tenants you must update.Which two options can you use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

the Directories blade of the administrator portal in Azure Stack Hub

the App registrations blade of the public Azure portal

the Get-AzureADTenancDecail cmdlet

the User subscriptions blade of the administrator portal in Azure Stack Hub

the Gec-AzsDireccoryTenancidentif ier cmdlet

the Directories blade of the administrator portal in Azure Stack Hub

You have an Azure Stack Hub integrated system.You need to add GPUs to the integrated system. The solution must minimize downtime of the existing Azure Stack Hub workloads. Which PowerShell cmdlet should you run first?

Resec-DacacencerlncegrationConfiguration

Rescarc-AzsInfrascruccureRolelnscance

You have an Azure Stack Hub integrated system that is disconnected from the internet. The integrated system contains an Azure App Service deployment. You anticipate a major increase in new App Service workloads. The integrated system has the required hardware to handle the increased demand. You need to ensure that App Service can support the increased workloads.Which three actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Increase the user subscription quotas.

Add an additional scale unit node.

From the administrator portal, increase workers in App Service.

Increase the user subscription quotas.

Add an additional scale unit node.

From the user portal, increase workers in App Service.

Enable new identity and access management roles for the user subscription.

From the administrator portal, increase workers in App Service.

You have an Azure Stack Hub integrated system that is disconnected from the internet. The integrated system has an Azure App Service resource provider. You generate a new certificate.You need to rotate the certificate of the App Service identity application to use the new certificate. Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

From a privileged endpoint (PEP) session, run the New-Objecc cmdlet, and then run the Sec- GraphApplicacion cmdlet

From the administrator portal, get the value of the AzureStack-AppService object ID.

From the administrator portal, get the value of the default provider subscription object ID.

From a privileged endpoint (PEP) session, run the Export-Cercificace cmdlet. and then run the Import-Certificace cmdlet

From a privileged endpoint (PEP) session, run the New-Object cmdlet. and then run the import- PfxCertificace cmdlet

From a privileged endpoint (PEP) session, run the New-Objecc cmdlet, and then run the Sec- GraphApplicacion cmdlet

From the administrator portal, get the value of the AzureStack-AppService object ID.

You plan to deploy an Azure Stack Hub integrated system that will be disconnected from the internet. The integrated system region name is region1, and the external domain is name is contoso.local.You need to ensure that the generated certificate signing request (CSR) has the correct subjects and subject alternative names (SAN). Which name must you include in the CSR?

*.adminhosting.region 1.azurestack.local

graph.local.azurestack.external

*.hosting.region1.azurestack.local

*.adminhosting.region 1.azurestack.local

You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.You deploy a new computer named Computer1 that runs Windows 11.You need to connect to the Azure Stack Hub Resource Manager (user) endpoint from Computer1 by using PowerShell. Which command should you run?

Add-AzEnvironment –Name “AzureStackUser” –ArmEndpoint“https://management.region1.fabrikam.com”Connect-AzureRmAccount –EnvironmentName “AzureStackUser”

Add-AzEnvironment –Name “AzureStackUser” –ArmEndpoint“https://adminmanagement.region1.fabrikam.com”Connect-AzAccount –EnvironmentName “AzureStackUser”

Add-AzEnvironment –Name “AzureStackUser” –ArmEndpoint“https://management.region1.fabrikam.com”Connect-AzureRmAccount –EnvironmentName “AzureStackUser”

Add-AzEnvironment –Name “AzureStackUser” –ArmEndpoint“https://portal.region1.fabrikam.com”Connect-AzAccount –EnvironmentName “AzureStackUser”

Add-AzureEnvironment –Name “AzureStackUser” –ArmEndpoint“https://adminmanagement.region1.fabrikam.com”Connect-AzureRmAccount –EnvironmentName “AzureStackUser”