2023 Verified AZ-600 dumps Q&As on your Azure Stack Hub Operator Associate Exam Questions Certain Success!
AZ-600 Exam Dumps - 100% Marks In AZ-600 Exam!
Microsoft AZ-600 exam is designed for IT professionals who are interested in configuring and operating a hybrid cloud with Microsoft Azure Stack Hub. Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub certification exam measures the candidate's ability to manage and deploy Azure Stack Hub, including infrastructure, services, and management tools. AZ-600 exam also tests the candidate's knowledge of Azure and Azure Stack Hub integration, hybrid networking, storage, and identity management.
Microsoft AZ-600 exam is designed to test the candidate's skills and knowledge in configuring and operating a hybrid cloud with Microsoft Azure Stack Hub. AZ-600 exam is intended for professionals who have expertise in implementing and managing Azure Stack Hub and its associated services. AZ-600 exam covers various topics such as Azure Stack Hub architecture, implementation, management, and monitoring of hybrid cloud environments.
NEW QUESTION # 60
You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table.
You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.
How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 61
You have an Azure Stack Hub integrated system that has the App Service resource provider. You have the App Service Environment (ASE) shown in the following table.
You need to ensure that web apps and function apps remain available during upgrades and maintenance events.
What is the minimum number of additional worker nodes you should deploy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
D:\mudassar\Untitled.jpg
NEW QUESTION # 62
You have a disconnected Azure Stack Hub integrated system.
You deploy an Operator Access Workstation (OAW) virtual machine image.
Which management tool should be installed manually on the image?
- A. AzureStack-Tools
- B. AzCopy
- C. Azure Storage Explorer
- D. Windows Admin Center
Answer: D
Explanation:
Windows Admin Center is a new, locally-deployed, browser-based management tool set that lets you manage your Windows Servers with no Azure or cloud dependency. Windows Admin Center gives you full control over all aspects of your server infrastructure and is particularly useful for managing servers on private networks that are not connected to the Internet.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation
NEW QUESTION # 63
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.
The integrated system has the following domains enabled for multitenancy:
fabrikam.onmicrosoft.com
contoso.onmicrosoft.com
fabrikam.com
contoso.com
You need to disable multitenancy for contoso.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008
NEW QUESTION # 64
You need to identify the authentication and authorization process for the integrated system in Chicago. The solution must meet the technical requirements.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-identity?view=azs-2008
NEW QUESTION # 65
You have a connected Azure Stack Hub integrated system.
You need to deploy an Operator Access Workstation (OAW) virtual machine image.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Connect to the Hardware Lifecycle Host (HLH)
2 - From microsoft.com, download the OAW.zip file and extract the contents
3 - From an elevated PowerShell session, run the New-OAW.ps1 script.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation
NEW QUESTION # 66
You deploy an Azure Stack Hub integrated system that contains an Azure App Service deployment. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to provide users with the ability to deploy App Service web apps directly from their GitHub repositories.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-configure-deployment-sources?vi
NEW QUESTION # 67
Which command should you run from a privileged endpoint (PEP) session to collect only the required logs?
- A. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>" - B. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByRole "EventHub" - C. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByResourceProvider "EventHub" - D. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByNode "EventHub"
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION # 68
You have an Azure Stack Hub integrated system that is linked to an Active Directory domain named fabrikam.com by using Active Directory Federation Services (AD FS).
You have the resources shown in the following table.
You need to ensure that the integrated system can resolve DNS queries for fabrikam.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Register-CustomDnsServer
Resolving external DNS names from Azure Stack Hub
To resolve DNS names for endpoints outside Azure Stack Hub (for example: www.bing.com), you need to provide DNS servers that Azure Stack Hub can use to forward DNS requests for which Azure Stack Hub isn't authoritative. For deployment, DNS servers that Azure Stack Hub forwards requests to are required in the Deployment Worksheet (in the DNS Forwarder field). Provide at least two servers in this field for fault tolerance. Without these values, Azure Stack Hub deployment fails.
Configure conditional DNS forwarding
Important
This only applies to an AD FS deployment.
To enable name resolution with your existing DNS infrastructure, configure conditional forwarding.
To add a conditional forwarder, you must use the privileged endpoint.
For this procedure, use a computer in your datacenter network that can communicate with the privileged endpoint in Azure Stack Hub.
1. Open an elevated Windows PowerShell session (run as administrator), and connect to the IP address of the privileged endpoint. Use the credentials for CloudAdmin authentication.
$cred=Get-Credential
Enter-PSSession -ComputerName <IP Address of ERCS> -ConfigurationName PrivilegedEndpoint
-Credential $cred
2. After you connect to the privileged endpoint, run the following PowerShell command. Substitute the sample values provided with your domain name and IP addresses of the DNS servers you want to use.
Register-CustomDnsServer -CustomDomainName "contoso.com" -CustomDnsIPAddresses
"192.168.1.1","192.168.1.2"
Box 2: fabrikam.com
The external DNS zone.
Box 3: "192.160.20.1", "192.160.20.2",
The IP addresses for the DNS servers in External DNS zone.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-dns
NEW QUESTION # 69
You provision a new certificate to support the planned changes.
You need to validate the certificate.
Which PowerShell module should you install first?
- A. AzureRM.TemplateValidator
- B. AzureStack
- C. Microsoft.AzureStack.ReadinessChecker
- D. Az.Websites
Answer: C
Explanation:
Explanation
Use the Azure Stack Hub Readiness Checker tool to validate that generated public key infrastructure (PKI) certificates which are suitable for pre-deployment. Validate certificates by leaving enough time to test and reissue certificates if necessary.
The Readiness Checker tool performs the following certificate validations:
* Parse PFX
Checks for valid PFX file, correct password, and whether the public information is protected by the password.
* Expiry Date
Checks for minimum validity of seven days.
* Signature algorithm
Checks that the signature algorithm isn't SHA1.
* Private Key
Checks that the private key is present and is exported with the local machine attribute.
* Etc.
Note: Perform core services certificate validation
Use these steps to validate the Azure Stack Hub PKI certificates for deployment and secret rotation:
1. Install AzsReadinessChecker from a PowerShell prompt (5.1 or above) by running the following cmdlet:
Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease
2. Create the certificate directory structure.
3. Etc.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs
NEW QUESTION # 70
You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com.
An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: 30 days
We cannot tell for sure without the exhibit. It would likely be either 30 or 90 days.
The Azure Stack Hub root certificate is provisioned during deployment with an expiration of five years.
Starting with 2108, internal secret rotation also rotates the root certificate. The standard secret expiration alert identifies the expiry of the root certificate and generates alerts at both 90 (warning) and 30 (critical) days.
Note: Manual remediation
If the Repair option is not supported, be sure to follow the complete set of remediation instructions provided in the alert. As an example, the internal certificate expiration remediation steps will guide you through the process of secret rotation:
Graphical user interface, text, application Description automatically generated
Box 2: running the Start-SecreatRotation -Internal PowerShell cmdlet from the priveged endpoint (PEP) session Start-SecretRotation cmdlet rotates the infrastructure secrets of an Azure Stack Hub system. This cmdlet can only be executed against the Azure Stack Hub privileged endpoint, by using an Invoke-Command script block passing the PEP session in the -Session parameter. By default, it rotates only the certificates of all external network infrastructure endpoints.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-rotate-secrets
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-monitor-health
NEW QUESTION # 71
You are planning an Azure Slack Hub deployment for an enterprise customer.
You need to identify an appropriate identity model for the customer. The solution must use capacity-based billing. Which two identity providers can you use for the customer? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
- A. Azure Active Directory (Azure AD) in a Cloud Solution Provider (CSP) subscription
- B. Active Directory Federation Services (AD FS) in a Cloud Solution Provider (CSP) subscription
- C. Azure Active Directory (Azure AD) in an Enterprise Agreement (EA)
- D. Active Directory Federation Services (AD FS) in an Enterprise Agreement (EA)
Answer: A,B
Explanation:
Choose an identity store
With a connected deployment, you can choose between Azure AD or AD FS for your identity store. A disconnected deployment, with no internet connectivity, can only use AD FS.
Capacity-based billing
If you decide to use the capacity billing model, you must purchase an Azure Stack Hub Capacity Plan SKU based on the capacity of your system. You need to know the number of physical cores in your Azure Stack Hub to purchase the correct quantity.
Capacity billing requires an Enterprise Agreement (EA) Azure subscription for registration. The reason is that registration sets up the availability of items in the Marketplace, which requires an Azure subscription. The subscription isn't used for Azure Stack Hub usage.
NEW QUESTION # 72
Eight hours ago, you received a critical alert for Azure Event Hubs.
A Microsoft Support Engineer requests that you send the Event Hubs logs only from the six hours following the alert.
Which command should you run from a privileged endpoint (PEP) session to collect only the required logs?
- A. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>" - B. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByRole "EventHub" - C. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByResourceProvider "EventHub" - D. Get-AzureStacklog -FromDate (Get-Date).AddHours(-8)
-Todate (Get-Date).AddHours(-2) -OutputSasUri "<SasUri>"
-FilterByNode "EventHub"
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION # 73
You have two Azure subscriptions named sub1 and sub2. The subscriptions are linked to an Azure AD tenant named contoso.com.
You deploy on Azure Stack Hub integrated system and register the system with sub1.
You open a new PowerShell session and connect to sub1.
You need to register the Azure Stack Hub integrated system with sub2.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 74
You have an Azure Stack Hub integrated system that contains 20 subscriptions. The subscriptions use custom storage and compute quotas.
You need to delete the custom quotas.
Which three Azure Stack Hub objects should you delete in sequence before you can delete the quotas? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: user subscriptions
If you want to delete a quota, you must work back through any plans and offers that use that quota. Starting with the offers, ensure they have no subscriptions, delete each offer, then delete the plans that use the quota, and so on.
Step 2: offers
Deleting an offer is only possible if there are no subscriptions that belong to that offer.
Step 3: plans
You can't delete a quota if there are any current plans that use it. You must first delete the plan that references the quota.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-delete-offer
NEW QUESTION # 75
You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table.
You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.
How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 76
You are planning an Azure Slack Hub deployment for an enterprise customer.
You need to identify an appropriate identity model for the customer. The solution must use capacity-based billing. Which two identity providers can you use for the customer? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
- A. Active Directory Federation Services (AD FS) in a Cloud Solution Provider (CSP) subscription
- B. Active Directory Federation Services (AD FS) in an Enterprise Agreement (EA)
- C. Azure Active Directory (Azure AD) in a Cloud Solution Provider (CSP) subscription
- D. Azure Active Directory (Azure AD) in an Enterprise Agreement (EA)
Answer: B,D
Explanation:
Explanation
Choose an identity store
With a connected deployment, you can choose between Azure AD or AD FS for your identity store. A disconnected deployment, with no internet connectivity, can only use AD FS.
Capacity-based billing
If you decide to use the capacity billing model, you must purchase an Azure Stack Hub Capacity Plan SKU based on the capacity of your system. You need to know the number of physical cores in your Azure Stack Hub to purchase the correct quantity.
Capacity billing requires an Enterprise Agreement (EA) Azure subscription for registration. The reason is that registration sets up the availability of items in the Marketplace, which requires an Azure subscription. The subscription isn't used for Azure Stack Hub usage.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-connected-deployment
NEW QUESTION # 77
You have three Azure Stack Hub integrated systems that use the same Azure Active Directory (Azure AD) tenant named contoso.com as their identity provider. The integrated systems are deployed in Chicago, New York, and Seattle. The region name of each integrated system corresponds to the city in which the system is deployed.
When reviewing alerts in the integrated system in Chicago, you receive an alert indicating that the home directory requires an update.
From the Azurestack-tools-master/identity folder, you import the AzureStack.Identity.psm1 module.
How should you complete the command to update the home directory? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Reference:
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md
NEW QUESTION # 78
You have an Azure Stack Hub integrated system.
You install the Azure Gallery Packager (.azpkg) tool on a management workstation.
You need to define a custom Azure Stack Hub Marketplace item that will provision a virtual machine from a base image.
Which file should you configure for each requirement? To answer, drag the appropriate files to the correct requirements. Each file may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Explanation:
NEW QUESTION # 79
You plan to install an update to an Azure Stack Hub integrated system.
You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.
Solution: From a privileged endpoint (PEP) session, you run TesT-AzureStack -Group "Default".
Does this meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION # 80
You have a disconnected Azure Stack Hub integrated system that contains a user named User1.
You need to ensure that User1 can assign role-based access control (RBAC) roles in Azure Stack Hub. The solution must use the principle of least privilege.
Which Azure Stack Hub built-in role should you assign to User1?
- A. Owner
- B. User Access Administrator
- C. Managed Identity Contributor
- D. Security Admin
Answer: B
Explanation:
User Access Administrator
Lets you manage user access to Azure resources.
*/read Read resources of all types, except secrets.
Microsoft.Authorization/* Manage authorization
Microsoft.Support/* Create and update a support ticket
Reference:
https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
NEW QUESTION # 81
You have a connected Azure Stack Hub integrated system that uses Active Directory Federation Services (AD FS) as the identity provider.
You open a PowerShell session and store the GUID of an Azure subscription in a variable named $SubscriptionlD.
You need to validate the AD FS integration.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-registration
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-adfs
NEW QUESTION # 82
You have an Azure Slack Hub integrated system and a computer named Computer1 that runs Windows 11. You need to deploy the Azure Stack Hub PowerShell tools to Computer1. What should you do first?
- A. Connect to the privileged endpoint (PEP).
- B. Download AzureStack-Tools from the GitHub repository.
- C. Copy the AzureStack module from the Hardware Lifecycle Host (HLH).
- D. Download the AzureStack module from PowerShell Gallery.
Answer: B
Explanation:
Download Azure Stack Hub tools from GitHub
AzureStack-Tools is a GitHub repository that hosts PowerShell modules for managing and deploying resources to Azure Stack Hub. If you're planning to establish VPN connectivity, you can download these PowerShell modules to the Azure Stack Development Kit (ASDK), or to a Windows-based external client.
NEW QUESTION # 83
......
Pass Your AZ-600 Exam Easily With 100% Exam Passing Guarantee: https://www.real4dumps.com/AZ-600_examcollection.html
Exam Dumps Use Real Azure Stack Hub Operator Associate Dumps With 179 Questions: https://drive.google.com/open?id=1ZC0gkym-06oSQ6TBuci6A0_37KQquIZe
