Home / Microsoft / AZ-600

Microsoft AZ-600 Practice Test - Questions Answers, Page 17

Question list

List of questions

Question 161

(0)

You need to change the DNS forwarder of the priv1 region. Which two actions should you perform? Each correct answer presents part of the solution? NOTE: Each correct selection is worth one point.

Question 162

(0)

The priv2 region is redeployed according to the planned changes. You need to restore App Service. Which three components should you restore? Each correct answer presents part of the solution. NOT

Question 163

(0)

You need to implement disaster recovery for the priv1 region to meet the technical requirements. Which main components should you include in the disaster recovery plan?

Question 164

(0)

As part of the planned changes for the int1 region, you need to remove all the user subscriptions and the associated resources. The solution must meet the technical requirements. Which two actions s

Question 165

(0)

DRAG DROP You schedule a planned maintenance window. You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements. Which three actions shoul

Question 166

(0)

DRAG DROP You need to change the int1 region to use the capacity model. The solution must meet the technical requirements. Which three actions should you perform in sequence? To answer, move the a

Question 167

(0)

HOTSPOT You are troubleshooting the chargeback issues of the dev1 region. You need to query the usage for each tenant subscription. What should you do? To answer, select the appropriate options i

Question 168

(0)

DRAG DROP You need to change the int1 region to use the capacity model. The solution must meet the technical requirements. Which three actions should you perform in sequence? To answer, move the ap

Question 169

(0)

Case study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sect

Question 170

(0)

You need to create User2. The solution must support the planned changes. What should you use?

Related questions

You have an Azure Stack Hub integrated system. You perform infrastructure backups twice daily. User workloads are protected by using Azure Site Recovery. The architect of the user workloads is planning a business continuity disaster recovery (BCDR) strategy. You need to recommend to the architect which resources to include in the BCDR strategy. Which two resources should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Topic 2, Northwind Traders Case study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Qbutton to return to the question. Overview A company named Northwind Traders has a main office and a datacenter. All development occurs at the main office. Existing Environment Identity Environment The network contains an Active Directory forest named northwind.com. The forest and an Azure Active Directory (Azure AD) tenant named northwind.onmicrosoft.com are integrated by using Active Directory Federation Service (AD FS). All Azure subscriptions use the northwind.onmicrosoft.com Azure AD tenant. Northwind Traders uses an Enterprise Agreement (EA) subscription. All operators are global administrators in northwind.onmicrosoft.com. Azure Stack Hub Environment Northwind Traders has the following five Azure Stack Hub integrated systems: One integrated system that connects to an internet-facing network and has the following configurations: - The region name is int1. - The operators do not have access to the user subscriptions. - The integrated system is used for customer and partner applications. - The partners and customers of NorthWind Traders use guest user accounts to access various user resources. Two integrated systems that connect to a private network, are accessed only from inside the company, and have the following configurations: - The integrated systems are dedicated to research and development. - One integrated system has a region name of priv1, and the other has a region name of priv2. - The integrated systems are used for various data rendering, AI workloads, inference, and data visualization. Two integrated systems that are dedicated to application development and have the following configurations: - The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access. - One integrated system has a region name of dev1, and the other has a region name of dev2. - Both regions are used only by developers at Northwind Traders. The external domain name of all the integrated systems is northwind.com. All the integrated systems have Azure App Service and the Azure Kubernetes Service (AKS) engine deployed. The computer of the operator in each region has all the prerequisite software installed for managing Azure Stack Hub. Current Problems You identify the following issues in the current environment: The priv2 region recently experienced a catastrophic failure. The developers report high chargeback costs for the dev1 region. The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images. The Northwind Traders partners and customers report that use of the guest user accounts is too complex. Users in the priv1 region recently deployed NCas_v4 virtual machines for various AI workload. The users discover that the virtual machines do not use GPUs. Requirements Planned Changes Northwind Traders plans to implement the following changes: Remove all guest user accounts. Change the DNS forwarder of the priv1 region. Change the billing model and registration name of the int1 region. After the catastrophic failure, restore the priv2 region to its original state. Provide each partner with its own dedicated user subscription that will use its own dedicated Azure AD tenant. Technical Requirements Northwind Traders identifies the following technical requirements: Minimize hardware and software costs. Standardize all datacenter workloads on Azure Stack Hub. In the priv1 region, implement a disaster recovery plan for App Service. Whenever possible, implement solutions by using the minimum amount of administrative effort. In the dev2 region, update the AKS Base Ubuntu image to the latest version in Azure Stack Hub Marketplace. Whenever possible, implement solutions by using built-in tools, features, and services without acquiring additional third-party tools. For the users’ virtual machines and the associated resources in the dev1 and dev2 regions, implement a business continuity and disaster recovery plan that includes an automated failback process. If changes to the Azure Stack Hub infrastructure cause workload downtime outside of planned maintenance windows, notify all users in the region where the downtime occurred and schedule a maintenance window.

You plan to deploy an Azure Stack Hub integrate system. You need to configure network connectivity for datacenter network integration. Which two routing methods can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

You have an Azure Stack Hub integrated system that is disconnected from the internet. The integrated system has an Azure App Service resource provider. You generate a new certificate. You need to rotate the certificate of the App Service identity application to use the new certificate. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have an Azure Stack Hub integrated system that has the following configurations: A deployment prefix of AzS A physical prefix of AzP You need to renew the certificates for the integrated system. To which virtual machine should you establish a PowerShell session?

You need to resolve the performance issue reported by the users in the priv1 region. What should you do?

You plan to install an update to an Azure Stack Hub integrated system. You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible. Solution: From the administrator management endpoint, you run Test-AzureStack –Group "UpdateReadiness". Does this meet the goal?

You plan to install an update to an Azure Stack Hub integrated system. You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible. Solution: From a privileged endpoint (PEP) session, you run TesT-AzureStack -Group "Default". Does this meet the goal?

DRAG DROP You have an Azure Stack Hub integrated system. You install the Azure Gallery Packager (.azpkg) tool on a management workstation. You need to define a custom Azure Stack Hub Marketplace item that will provision a virtual machine from a base image. Which file should you configure for each requirement? To answer, drag the appropriate files to the correct requirements. Each file may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

DRAG DROP You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table. You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system. How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. A. Answer: A

Question 161

You need to change the DNS forwarder of the priv1 region.

Which two actions should you perform? Each correct answer presents part of the solution?

NOTE: Each correct selection is worth one point.

Run the Register-CustomDnsServer cmdlet

Run the Add-DnsServerForwarder cmdlet

Run the Set-AzsDnsForwarder cmdlet

Connect to the administrator management endpoint of the priv1 region

Connect to privileged endpoint (PEP) of the priv1 region

Show Answer Comment (0)

Question 162

The priv2 region is redeployed according to the planned changes.

You need to restore App Service.

Which three components should you restore? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

the App Service roles and services

the file server share content

the infrastructure backup

the worker role virtual machine

the App Service databases

the default domain certificate

Show Answer Comment (0)

Question 163

You need to implement disaster recovery for the priv1 region to meet the technical requirements.

Which main components should you include in the disaster recovery plan?

Option A

Option B

Option C

Option D

Show Answer Comment (0)

As part of the planned changes for the int1 region, you need to remove all the user subscriptions and the associated resources. The solution must meet the technical requirements. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Run the Set-AzsuserSubscription cmdlet against to the administrator management endpoint.

From the Azure portal, remove all the guest user accounts.

From the administrator portal, delete all the user subscriptions.

From the user portal delete all the resources in the user subscriptions.

Show Answer Comment (0)

Question 165

DRAG DROP

You schedule a planned maintenance window.

You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Show Answer Comment (0)

Question 166

DRAG DROP

You need to change the int1 region to use the capacity model. The solution must meet the technical requirements. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Show Answer Comment (0)

Question 167

HOTSPOT

You are troubleshooting the chargeback issues of the dev1 region.

You need to query the usage for each tenant subscription.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Explanation:

Box 1: Administrator management endpoint

Note: The developers report high chargeback costs for the dev1 region.

Two integrated systems that are dedicated to application development and have the following configurations:

The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access. One integrated system has a region name of dev1, and the other has a region name of dev2.

Both regions are used only by developers at Northwind Traders.

The request gets consumption details for the requested subscriptions and for the requested time frame. There is no request body. This usage API is a provider API, so the caller must be assigned an Owner, Contributor, or Reader role in the provider's subscription. Method, Request URI

GET

https://{armendpoint}/subscriptions/{subId}/providers/Microsoft.Commerce.Admin/subscriberUsageAggregates?reportedStartTime={reportedStartTime}&reportedEndTime={reportedEndTime}&aggregationGranularity={granularity} &subscriberId={sub1.1}&api-version=2015-06-01-preview&continua

Arguments

*armendpointAzure Resource Manager endpoint of your Azure Stack Hub environment. The Azure Stack Hub convention is that the name of the Azure Resource Manager endpoint is in the format https://adminmanagement.{domain-name}. For example, for the Azure Stack Development Kit (ASDK), if the domain name is local.azurestack.external, then the Resource Manager endpoint is https://adminmanagement.local.azurestack.external.

* subId

Subscription ID of the user who makes the call.

* Etc.

Box 2: Get-AzsSubscriberUsage

Retrieve usage information

PowerShell

To generate the usage data, you should have resources that are running and actively using the system; for example, an active virtual machine (VM), or a storage account containing some dat a. If you're not sure whether you have any resources running in the Azure Stack Hub Marketplace, deploy a VM, and verify the VM monitoring blade to make sure it's running. Use the following PowerShell cmdlets to view the usage data:

Install PowerShell for Azure Stack Hub.

Configure the Azure Stack Hub user or the Azure Stack Hub operator PowerShell environment.

To retrieve the usage data, call the Get-AzsSubscriberUsage PowerShell cmdlet:

Get-AzsSubscriberUsage -ReportedStartTime "2017-09-06T00:00:00Z"

Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-provider-resourceapi

Question 168

DRAG DROP

Show Answer Comment (0)

Question 169

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements.

If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Qbutton to return to the question.

Overview

General overview

Trey Research is a pharmaceutical company that has an office in Boston.

Existing environment

Identity Environment

The on-premises network contains an Active Directory forest named treyresearch.net. The forest contains a user named User1.

The forest syncs to an Azure AD tenant named treyresearch.net by using Azure AD Connect.

Trey Research has an internal certification authority (CA).

Compute Environment

The datacenter in the Boston office contains a computer named CLIENT1 that runs Windows 10.

CLIENT1 is an administrative workstation that connects directly to the Azure Stack Hub integrated system.

Planned changes and requirements

Planned changes

Trey Research identifies the following planned changes:

Change the Azure Stack Hub integrated system registration to use an Azure subscription named Subscription3 that has a GUID of 12345678-1234-1234-1234-222222222222.

Configure the integrated system to resolve external names by using a DNS Server that has an IP address of 10.100.100.100.

Implement the App Service resource provider and the Event Hubs resource provider on the integrated system/ Publish a custom cloud-init built image of a Linux virtual machine to Azure Stack Hub Marketplace on the integrated system.

Create a new cloudadmin user named User2.

Assign the delegated provider role to User1.

Azure Stack Hub Requirements

Trey Research identifies the following Azure Stack Hub requirements:

Azure Stack Hub integrated system logs must be forwarded to an external security information and event management (SIEM) system named SIEM1. SIEM1 requires TCP with mutual authentication and TLS 1.2 encryption.

A default Microsoft SQL Server instance will host the database of the App Service resource provider.

The infrastructure of the integrated system must be backed up as frequently as possible.

The integrated system backups must be retained for 28 days.

Business Requirements

Minimize software and licensing costs.

Show Answer Comment (0)