ExamGecko
Home Home / Microsoft / AZ-600

Microsoft AZ-600 Practice Test - Questions Answers, Page 13

Question list
Search
Search

List of questions

Search

Related questions


Topic 2, Northwind Traders Case study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Qbutton to return to the question. Overview A company named Northwind Traders has a main office and a datacenter. All development occurs at the main office. Existing Environment Identity Environment The network contains an Active Directory forest named northwind.com. The forest and an Azure Active Directory (Azure AD) tenant named northwind.onmicrosoft.com are integrated by using Active Directory Federation Service (AD FS). All Azure subscriptions use the northwind.onmicrosoft.com Azure AD tenant. Northwind Traders uses an Enterprise Agreement (EA) subscription. All operators are global administrators in northwind.onmicrosoft.com. Azure Stack Hub Environment Northwind Traders has the following five Azure Stack Hub integrated systems: One integrated system that connects to an internet-facing network and has the following configurations: - The region name is int1. - The operators do not have access to the user subscriptions. - The integrated system is used for customer and partner applications. - The partners and customers of NorthWind Traders use guest user accounts to access various user resources. Two integrated systems that connect to a private network, are accessed only from inside the company, and have the following configurations: - The integrated systems are dedicated to research and development. - One integrated system has a region name of priv1, and the other has a region name of priv2. - The integrated systems are used for various data rendering, AI workloads, inference, and data visualization. Two integrated systems that are dedicated to application development and have the following configurations: - The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access. - One integrated system has a region name of dev1, and the other has a region name of dev2. - Both regions are used only by developers at Northwind Traders. The external domain name of all the integrated systems is northwind.com. All the integrated systems have Azure App Service and the Azure Kubernetes Service (AKS) engine deployed. The computer of the operator in each region has all the prerequisite software installed for managing Azure Stack Hub. Current Problems You identify the following issues in the current environment: The priv2 region recently experienced a catastrophic failure. The developers report high chargeback costs for the dev1 region. The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images. The Northwind Traders partners and customers report that use of the guest user accounts is too complex. Users in the priv1 region recently deployed NCas_v4 virtual machines for various AI workload. The users discover that the virtual machines do not use GPUs. Requirements Planned Changes Northwind Traders plans to implement the following changes: Remove all guest user accounts. Change the DNS forwarder of the priv1 region. Change the billing model and registration name of the int1 region. After the catastrophic failure, restore the priv2 region to its original state. Provide each partner with its own dedicated user subscription that will use its own dedicated Azure AD tenant. Technical Requirements Northwind Traders identifies the following technical requirements: Minimize hardware and software costs. Standardize all datacenter workloads on Azure Stack Hub. In the priv1 region, implement a disaster recovery plan for App Service. Whenever possible, implement solutions by using the minimum amount of administrative effort. In the dev2 region, update the AKS Base Ubuntu image to the latest version in Azure Stack Hub Marketplace. Whenever possible, implement solutions by using built-in tools, features, and services without acquiring additional third-party tools. For the users’ virtual machines and the associated resources in the dev1 and dev2 regions, implement a business continuity and disaster recovery plan that includes an automated failback process. If changes to the Azure Stack Hub infrastructure cause workload downtime outside of planned maintenance windows, notify all users in the region where the downtime occurred and schedule a maintenance window.









DRAG DROP

You have an Azure Stack Hub integrated system that is enabled for multi-tenancy and contains a user subscription. The subscription contains a user named User1. The integrated system has the following configurations:

Region name: region1

Fully qualified domain name (FQDN): contoso.com

You need to identify which gallery endpoint URI User1 must use.

How should you complete the script? To answer, drag the appropriate values to the correct targets.

Each value may be used once, more than once, or net at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


Question 121
Correct answer: Question 121

Explanation:

Box 1: portal.

A DNS entry is created for each endpoint in the external DNS zone that's specified at deployment time. For example, the user portal is assigned the DNS host entry of portal.<region>.<fqdn>. * Portal (user)

Portal.<region>.<fqdn>

Box 2: region1.

Note: Once your item has been successfully published to the marketplace, you can delete the content from the storage account. All default gallery artifacts and your custom gallery artifacts are now accessible without authentication under the following URLs:

https://galleryartifacts.adminhosting.[Region].[externalFQDN]/artifact/20161101/[TemplateName]/DeploymentTemplates/Template.json https://galleryartifacts.hosting.[Region].[externalFQDN]/artifact/20161101/[TemplateName]/DeploymentTemplates/Template.json

Reference:

https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-endpoints

https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and-publishmarketplace-item

DRAG DROP

You have a connected Azure Stack Hub integrated system.

You need to deploy an Operator Access Workstation (OAW) virtual machine image.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


Question 122
Correct answer: Question 122

Explanation:

Step 1: Connect to the Hardware Lifecycle Host (HLH)

Create the OAW VM using a script

The following script prepares the virtual machine as the Operator Access Workstation (OAW), which is used to access Microsoft Azure Stack Hub. Sign in to the HLH with your credentials. (Step 1)

Download OAW.zip and extract the files. (Step 2)

Open an elevated PowerShell session. (Step 3)

Navigate to the extracted contents of the OAW.zip file.

Run the New-OAW.ps1 script.

Step 2: From microsoft.com, download the OAW.zip file and extract the contents

Download files

Because of the stateless nature of the solution, there are no updates for the OAW VM. For each milestone, a new version of the VM image file is released. Use the latest version to create a new OAW VM. The image file is based on the latest Windows Server 2019 version. After installation, you can apply updates, including any critical updates, using Windows Update. Validate the hash of the downloaded OAW.zip file to make sure it hasn't been modified before using it to create the OAW VM. Step 3: From an elevated PowerShell session, run the New-OAW.ps1 script.

Reference:

https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation

DRAG DROP

You plan to deploy a disconnected Azure Stack Hub integrated system that has the following configurations:

FQDN: contoso.local

Region name: region1

Internal domain name: contoso.com

You need to generate a certificate signing request (CSR) for the new deployment. The solution must prevent the common name (CN) value from being included in the certificate subject. How should you complete the script? To answer, drag the appropriate values to the correct targets.

Each value may be used once, more than once, or not at all.

You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.


Question 123
Correct answer: Question 123

HOTSPOT

You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com. An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.


Question 124
Correct answer: Question 124

Explanation:

Box 1: 30 days

We cannot tell for sure without the exhibit. It would likely be either 30 or 90 days.

The Azure Stack Hub root certificate is provisioned during deployment with an expiration of five years. Starting with 2108, internal secret rotation also rotates the root certificate. The standard secret expiration alert identifies the expiry of the root certificate and generates alerts at both 90 (warning) and 30 (critical) days.

Note: Manual remediation

If the Repair option is not supported, be sure to follow the complete set of remediation instructions provided in the alert. As an example, the internal certificate expiration remediation steps will guide you through the process of secret rotation:

Box 2: running the Start-SecreatRotation –Internal PowerShell cmdlet from the priveged endpoint (PEP) session Start-SecretRotation cmdlet rotates the infrastructure secrets of an Azure Stack Hub system. This cmdlet can only be executed against the Azure Stack Hub privileged endpoint, by using an Invoke- Command script block passing the PEP session in the -Session parameter. By default, it rotates only the certificates of all external network infrastructure endpoints.

Reference:

https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-rotate-secrets

https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-monitor-health

You have an Azure Stack Hub integrated system that uses the latest version.

You discover an alert for an external certificate that will expire. You obtain new certificates.

You need to validate that all the components required to change the certificates are in a healthy state, and then renew the certificates.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.
Run the Start-SecretRotation and specify the PfxFilePath parameter.
A.
Run the Start-SecretRotation and specify the PfxFilePath parameter.
Answers
B.
Run Start-SecretRotation cmdlet and specify the Internal parameter.
B.
Run Start-SecretRotation cmdlet and specify the Internal parameter.
Answers
C.
Copy the certificates to Azure Blob storage.
C.
Copy the certificates to Azure Blob storage.
Answers
D.
Run the Test-AzureStack cmdlet and specify the -Group UpdateReadiness parameter.
D.
Run the Test-AzureStack cmdlet and specify the -Group UpdateReadiness parameter.
Answers
Suggested answer: B, D

You have a connected Azure Stack Hub integrated system.

You need to the validate the configuration of the integrated system by using the Test-AzureStack Include AzsScenarios command. Which additional parameter should you specify?

A.
-ServiceAdminCredential
A.
-ServiceAdminCredential
Answers
B.
-ConfigurationName
B.
-ConfigurationName
Answers
C.
-ComputerName
C.
-ComputerName
Answers
D.
-SessionOption
D.
-SessionOption
Answers
Suggested answer: C

You have a connected Azure Stack Hub integrated system.

You plan to deploy Azure Site Recovery to the integrated system.

Which two scenarios will be supported? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.
fallback to Azure
A.
fallback to Azure
Answers
B.
fallback to Azure Stack Hub
B.
fallback to Azure Stack Hub
Answers
C.
failover to Azure Stack HCI
C.
failover to Azure Stack HCI
Answers
D.
failover to Azure
D.
failover to Azure
Answers
E.
failover to Azure Stack Hub
E.
failover to Azure Stack Hub
Answers
Suggested answer: A, D

DRAG DROP

You have an Azure Stack Hub integrated system.

You install the Azure Gallery Packager (.azpkg) tool on a management workstation.

You need to define a custom Azure Stack Hub Marketplace item that will provision a virtual machine from a base image. Which file should you configure for each requirement? To answer, drag the appropriate files to the correct requirements. Each file may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.


Question 128
Correct answer: Question 128

You back up VM1 .

You restore VM1 to the integrated system.

You need to ensure that VM1 will start successfully and that users can connect to share!

Which three actions should you perform after restoring VM1 from the backup? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A.
Modify the disk layout.
A.
Modify the disk layout.
Answers
B.
Set the hostname.
B.
Set the hostname.
Answers
C.
Set the password of the local administrator.
C.
Set the password of the local administrator.
Answers
D.
Set the IP address.
D.
Set the IP address.
Answers
E.
Validate the MAC address.
E.
Validate the MAC address.
Answers
Suggested answer: B, D

HOTSPOT

You have an Azure Stack Hub integrated system.

The Volumes list for the integrated system is shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.


Question 130
Correct answer: Question 130
Total 179 questions
Go to page: of 18