Microsoft AZ-600 Practice Test - Questions Answers, Page 11
List of questions
Question 101
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
HOTSPOT
You have a connected Azure Stack Hub integrated system that uses Active Directory Federation Services (AD FS) as the identity provider. You open a PowerShell session and store the GUID of an Azure subscription in a variable named $SubscriptionlD. You need to validate the AD FS integration.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Explanation:
Box 1: Connect-AzAccount
Steps to validate the Azure registration
1. Open an elevated PowerShell prompt, and then run the following command to install AzsReadinessChecker:
Install-Module -Name Az.BootStrapper -Force -AllowPrerelease
Install-AzProfile -Profile 2020-09-01-hybrid -Force
Install-Module -Name Microsoft.AzureStack.ReadinessChecker
2. From the PowerShell prompt, run the following command to set $subscriptionID as the Azure subscription to use. Replace xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx with your own subscription ID:
$subscriptionID = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
3. From the PowerShell prompt, run the following command:
Connect-AzAccount -subscription $subscriptionID
4. From the PowerShell prompt, run the following command to start validation of your subscription.
Provide your Azure AD administrator and your Azure AD tenant name:
Invoke-AzsRegistrationValidation -RegistrationSubscriptionID $subscriptionID Box 2: Microsoft.AzureStack.ReadinessChecker Validate AD FS integration 1. On a computer that meets the prerequisites, open an administrative PowerShell prompt and then run the following command to install AzsReadinessChecker:
Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease 2. From the PowerShell prompt, run the following command to start validation. Specify the value for -CustomADFSFederationMetadataEndpointUri as the URI for the federation metadata.
Invoke-AzsADFSValidation -CustomADFSFederationMetadataEndpointUri https://adfs.cont
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-registration
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-adfs
Question 102
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
DRAG DROP
You have an Azure Stack Hub integrated system that contains a user named User1.
User1 creates a new virtual machine named VM01.
You need to grant User1 console access to VM01.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Question 103
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
DRAG DROP
You have two Azure subscriptions named sub1 and sub2. The subscriptions are linked to an Azure AD tenant named contoso.com. You deploy on Azure Stack Hub integrated system and register the system with sub1.
You open a new PowerShell session and connect to sub1.
You need to register the Azure Stack Hub integrated system with sub2.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Question 104
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
HOTSPOT
You have a connected Azure Stack Hub integrated system.
You perform the following tasks:
• On a server named SERVER1. you create a file share named AzSHLogs.
• You create a PowerShell remoting session to the privileged endpoint (PEP) of the integrated system. • In a variable named $Session, you store a reference to the session.
• In a variable named $AdHinCredentials. you store a reference to the credentials required to write to AzSHLogs. You need to collect the Hyper-V event logs for all the cluster hosts and copy the logs to the AzSHLogs share. How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
Explanation:
Box 1: $using:AdminCredentials
Box 2: Storage
Send Azure Stack Hub diagnostic logs by using the privileged endpoint (PEP)
To run Get-AzureStackLog on an integrated system, you need to have access to the privileged endpoint (PEP). Here's an example script you can run using the PEP to collect logs. $ipAddress = "<IP ADDRESS OF THE PEP VM>" # You can also use the machine name instead of IP here. $password = ConvertTo-SecureString "<CLOUD ADMIN PASSWORD>" -AsPlainText –Force
$cred = New-Object -TypeName System.Management.Automation.PSCredential ("<DOMAIN NAME>\CloudAdmin", $password) $shareCred = Get-Credential
$session = New-PSSession -ComputerName $ipAddress -ConfigurationName PrivilegedEndpoint - Credential $cred -SessionOption (New-PSSessionOption -Culture en-US -UICulture en-US) $fromDate = (Get-Date).AddHours(-8)
$toDate = (Get-Date).AddHours(-2) # Provide the time that includes the period for your issue
Invoke-Command -Session $session { Get-AzureStackLog -OutputSharePath "<EXTERNAL SHARE ADDRESS>" -OutputShareCredential $using:shareCred -FilterByRole Storage -FromDate $using:fromDate -ToDate $using:toDate} if ($session) {
Remove-PSSession -Session $session
}
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog
Question 105
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
HOTSPOT
You have an Azure Stack Hub Integrated system.
Outbound traffic from the Azure Stack Hub integrated system is controlled by a third-party firewall. You need to implement the Infrastructure Backup Service.
Which storage location should you use for the backup, and which network port is required to perform the backup? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Question 106
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
HOTSPOT
You plan to deploy a disconnected Azure Stack Hub integrated system.
You need to identify which type of certificate to use for the deployment and the file format for the certificate. The solution must meet the following requirements:
• Minimize administrative effort.
• Maximize security.
What should identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Explanation:
Azure Stack Hub public key infrastructure (PKI) certificate requirements Azure Stack Hub has a public infrastructure network using externally accessible public IP addresses assigned to a small set of Azure Stack Hub services and possibly tenant VMs. PKI certificates with the appropriate DNS names for these Azure Stack Hub public infrastructure endpoints are required during Azure Stack Hub deployment. Box 1: A certificate from an internal certification authority (CA)
Your Azure Stack Hub infrastructure must have network access to the certificate authority's Certificate Revocation List (CRL) location published in the certificate. This CRL must be an http endpoint. Note: for disconnected deployments, certificates issued by a public certificate authority (CA) are not supported, if the CRL endpoint is not accessible. Features that are impaired or unavailable in disconnected deployments Azure Stack Hub was designed to work best when connected to Azure, so it's important to note that there are some features and functionality that are either impaired or completely unavailable in the disconnected mode.
Private/internal Certificate Authority (CA)
No impact - In cases where the deployment uses certificates issued by a private CA, such as an internal CA within an organization, only internal network access to the CRL endpoint is required. Internet connectivity is not required, but you should verify that your Azure Stack Hub infrastructure has the required network access to contact the CRL endpoint defined in the certificates CDP extension. Box 2: PFX
The certificate format must be PFX, as both the public and private keys are required for Azure Stack Hub installation. The private key must have the local machine key attribute set.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs
Question 107
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
DRAG DROP
You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table.
You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.
How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
A.
Answer: A
Question 108
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
DRAG DROP
You have an Azure Stack Hub integrated system that contains 20 subscriptions. The subscriptions use custom storage and compute quotas. You need to delete the custom quotas.
Which three Azure Stack Hub objects should you delete in sequence before you can delete the quotas? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Explanation:
Step 1: user subscriptions
If you want to delete a quota, you must work back through any plans and offers that use that quot a. Starting with the offers, ensure they have no subscriptions, delete each offer, then delete the plans that use the quota, and so on. Step 2: offers
Deleting an offer is only possible if there are no subscriptions that belong to that offer.
Step 3: plans
You can't delete a quota if there are any current plans that use it. You must first delete the plan that references the quota.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-delete-offer
Question 109
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
HOTSPOT
You deploy an App Service resource provider to an Azure Stack Hub integrated system.
You need to create an offer to deploy an Azure Functions app by using the resource provider.
Which resource provider should you specify in the offer, and which type of subscription should you use to test the functionality of the offer? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Explanation:
Box 1: Microsoft.Web
Resource providers for Azure services
Match resource provider to service (Resource provider namespace, Azure service) * Microsoft.Web App Service Azure Functions Box 2: Default Provider Subscription In Azure Stack Hub Subscriptions, select the Default Provider Subscription. Azure App Service on Azure Stack Hub must be deployed in the Default Provider Subscription.
Reference:
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-servicesresource-providers#match-resource-provider-to-service https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-deploy
Question 110
![Export Export](https://examgecko.com/assets/images/icon-download-24.png)
HOTSPOT
You have a disconnected Azure Stack Hub integrated system that will be used in production.
You need to obtain a token to register the integrated system.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point.
Explanation:
Box 1: $false
Get-AzsRegistrationToken generates a registration token from the input parameters.
Parameter: UsageReportingEnabled True/False
Azure Stack Hub reports usage metrics by default. Operators with capacity uses or supporting a disconnected environment need to turn off usage reporting. Allowed values for this parameter are:
True, False.
Box 2: Capacity
BillingModel String
The billing model that your subscription uses. Allowed values for this parameter are: Capacity, PayAsYouUse, and Development. With a disconnected deployment, you're limited to an Active Directory Federation Services (AD FS) identity store and the capacity-based billing model.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-registration
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
Question