Free Microsoft AZ-600 Test Practice Test Questions Exam Dumps
Prepare Top Microsoft AZ-600 Exam Audio Study Guide Practice Questions Edition
Microsoft AZ-600 exam consists of multiple-choice questions that cover various topics such as Azure Stack Hub infrastructure deployment, workload deployment and management, security and identity, and monitoring and troubleshooting. AZ-600 exam is intended for IT professionals who have experience in managing and operating hybrid cloud environments and want to validate their skills and knowledge.
NEW QUESTION # 90
You plan to deploy an Azure Stack Hub integrated system that will use an Azure Active Directory (Azure AD) identity provider.
You obtain certificates for the deployment.
You need to ensure that the certificates meet the prerequisites for Azure Stack Hub.
Which PowerShell cmdlet should you run?
- A. Test-Certificate
- B. ConvertTo-AzsPFX
- C. Invoke-AzsHubDeploymentCertificateValidation
- D. New-AzsHubDeploymentCertificateSigningRequest
- E. Get-PfxCertificate
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2008 To validate certificates for other Azure Stack Hub services, change the value for -CertificateType. For example:
# App Services
Invoke-AzsHubAppServicesCertificateValidation -CertificatePath C:\Certificates\AppServices -pfxPassword
$pfxPassword -RegionName east -FQDN azurestack.contoso.com
# DBAdapter
Invoke-AzsHubDBAdapterCertificateValidation -CertificatePath C:\Certificates\DBAdapter -pfxPassword
$pfxPassword -RegionName east -FQDN azurestack.contoso.com
# EventHubs
Invoke-AzsHubEventHubsCertificateValidation -CertificatePath C:\Certificates
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs?view=azs-2108#perform-co
NEW QUESTION # 91
You have an Azure subscription named sub1 linked to an Azure Active Directory (Azure AD) tenant named contoso.com You have an Azure Stack Hub integrated system that is registered to sub1.
You need to delegate registering the Azure Stack Hub integrated system to an Azure Stack Hub operator. The solution must use the Principle of least privilege.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, email Description automatically generated
Step 1: Create a JSON file that contains the role definition.
Rather than using an account that has Owner permissions in the Azure subscription, you can create a custom role to assign permissions to a less-privileged user account. This account can then be used to register your Azure Stack Hub.
Create a custom role using PowerShell
Use the following JSON template to simplify creation of the custom role. The template creates a custom role that allows the required read and write access for Azure Stack Hub registration.
1. Create a JSON file. For example, C:\CustomRoles\registrationrole.json.
2. Add the following JSON to the file. Replace <SubscriptionID> with your Azure subscription ID.
{
"Name": "Azure Stack Hub registration role",
"Id": null,
"IsCustom": true,
"Description": "Allows access to register Azure Stack Hub",
"Actions": [
"Microsoft.Resources/subscriptions/resourceGroups/write",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.AzureStack/registrations/*",
"Microsoft.AzureStack/register/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleAssignments/write",
"Microsoft.Authorization/roleAssignments/delete",
"Microsoft.Authorization/permissions/read",
"Microsoft.Authorization/locks/read",
"Microsoft.Authorization/locks/write"
],
"NotActions": [
],
"AssignableScopes": [
"/subscriptions/<SubscriptionID>"
]
}
3. In PowerShell, connect to Azure to use Azure Resource Manager. When prompted, authenticate using an account with sufficient permissions such as Owner or User Access Administrator.
Connect-AzAccount
4. To create the custom role, use New-AzRoleDefinition specifying the JSON template file.
New-AzRoleDefinition -InputFile "C:\CustomRoles\registrationrole.json"
Step 2: From Azure Cloud shell, run the New-AzRoleDefinition cmdlet.
Step 3: From the Azure portal, add a role assignment to sub1.
Assign a user to registration role
After the registration custom role is created, assign the role to the user account that will be used for registering Azure Stack Hub.
* Sign in with the account with sufficient permission on the Azure subscription to delegate rights - such as Owner or User Access Administrator.
* In Subscriptions, select Access control (IAM) > Add role assignment.
* In Role, choose the custom role you created: Azure Stack Hub registration role.
* Select the users you want to assign to the role.
* Select Save to assign the selected users to the role.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-registration-role
NEW QUESTION # 92
You have two Azure subscriptions named sub1 and sub2. The subscriptions are linked to an Azure AD tenant named contoso.com.
You deploy on Azure Stack Hub integrated system and register the system with sub1.
You open a new PowerShell session and connect to sub1.
You need to register the Azure Stack Hub integrated system with sub2.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 93
You need to register the northcentralus region.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-registration?view=azs-2008&tabs=az1%2Caz
NEW QUESTION # 94
You have 20 computers that run Linux.
You deploy a disconnected Azure Stack Hub integrated system.
You need to ensure that users on the Linux computers can manage their Azure Stack Hub resources by using Azure Command-Line Interface (CLI).
What should you do first?
- A. Request a new certificate for the integrated system.
- B. Export the root certificate of the integrated system as a P7B file.
- C. Export the root certificate of the integrated system as a CER file.
- D. For each Linux computer, request a certificate from the integrated system.
Answer: C
Explanation:
Explanation
Add certificate
Export and then import Azure Stack Hub certificate for disconnected integrated systems and for the ASDK.
You need the CA root certificate for Azure Stack Hub to use Azure CLI on your development machine.
Export the Azure Stack Hub CA root certificate
Export the CA root certificate. To export the ASDK root certificate in PEM format:
Get the name of your Azure Stack Hub Root Cert:
1. Sign in to the Azure Stack Hub User or Azure Stack Hub Administrator portal.
Select the lock in the browser address bar.
In the pop-up window, select Connection is secure.
In the Certificate window, select the Certification Path tab.
Note down the name of your Azure Stack Hub Root Cert, for example, *.<locale>.<FQDN>
2. Sign in to the VM, open an elevated PowerShell prompt, and then run the following script:
$label = "*.<locale>.<FQDN> from step 1"
Write-Host "Getting certificate from the current user trusted store with subject CN=$label"
$root = Get-ChildItem Cert:\CurrentUser\Root | Where-Object Subject -eq "CN=$label" | select -First 1 if (-not $root)
{
Write-Error "Certificate with subject CN=$label not found"
return
}
Write-Host "Exporting certificate"
Export-Certificate -Type CERT -FilePath root.cer -Cert $root
Write-Host "Converting certificate to PEM format"
certutil -encode root.cer root.pem
Reference:
https://learn.microsoft.com/en-us/azure-stack/asdk/asdk-cli
https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-version-profiles-azurecli2
NEW QUESTION # 95
You have an Azure Stack Hub integrated system that connects to the internet.
You need to deploy Azure Event Hubs to the integrated system and ensure that users can create Event Hubs resources. The solution must minimize administrative effort.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-install?view=azs-2008&pivots=state-conne
NEW QUESTION # 96
You have an Azure Stack Hub integrated system that uses an Azure AD tenant named contoso.com as an identity provider. An Azure Stack Hub operator named Operator1 is a global administrator for the contoso.com Azure AD tenant. Operator1 creates a new user subscription as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point
Answer:
Explanation:
Explanation
NEW QUESTION # 97
You have an Azure Stack Hub integrated system that is configured as shown in the following table.
You need to generate certificate signing requests (CSRs) for certificate renewal.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 98
You have an Azure Stack Hub integrated system. That uses the Azure App Service resource provider.
You plan to rotate the App Service certificates. The new certificates are stored in a folder named c:\certificates\Appservices.
You need to validate the new certificates.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 99
You need to change the DNS forwarder of the priv1 region.
Which two actions should you perform? Each correct answer presents part of the solution?
NOTE: Each correct selection is worth one point.
- A. Run the Register-CustomDnsServer cmdlet
- B. Connect to privileged endpoint (PEP) of the priv1 region
- C. Connect to the administrator management endpoint of the priv1 region
- D. Run the Set-AzsDnsForwarder cmdlet
- E. Run the Add-DnsServerForwarder cmdlet
Answer: B,D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-configure-dns?view=azs-2008
NEW QUESTION # 100
You have a connected Azure Stack Hub integrated system.
You need to offer users the Azure Kubernetes Service (AKS) engine for production workloads. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A. Add a Docker extension to Azure Stack Hub Marketplace.
- B. From the Azure Active Directory admin center, create a user-assigned managed identify.
- C. Add a custom script extension to Azure Stack Hub Marketplace.
- D. From the Azure Active Directory admin center, create a service principal.
- E. Add an ubuntu Server image to Azure Stack Hub Marketplace.
- F. Add an AKS base image to Azure Stack Hub Marketplace.
Answer: D,E,F
NEW QUESTION # 101
You need to create the planned changes and meet the business requirements.
Which subscription should you use to host the SQL Server instance, and what should you configure on the instance? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Box 1: The Default Provider Subscription
A default Microsoft SQL Server instance will host the database of the App Service resource provider.
In Azure Stack Hub Subscriptions, select the Default Provider Subscription. Azure App Service on Azure Stack Hub must be deployed in the Default Provider Subscription.
Box 2:
Enter the SQL Server details for the server instance used to host the App Service resource provider database and then select Next. The installer validates the SQL connection properties.
Graphical user interface, website Description automatically generated
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-deploy
NEW QUESTION # 102
You plan to deploy a disconnected Azure Stack Hub integrated system that has the following configurations:
FQDN: contoso.local
Region name: region1
Internal domain name: contoso.com
You need to generate a certificate signing request (CSR) for the new deployment. The solution must prevent the common name (CN) value from being included in the certificate subject.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 103
You deploy an Azure Stack Hub integrated system that contains an Azure App Service deployment. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to provide users with the ability to deploy App Service web apps directly from their GitHub repositories.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-configure-deployment-sources?vi
NEW QUESTION # 104
You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy. The integrated system is configured as shown in the following table.
You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.
How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 105
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.
The integrated system has the following domains enabled for multitenancy:
fabrikam.onmicrosoft.com
contoso.onmicrosoft.com
fabrikam.com
contoso.com
You need to disable multitenancy for contoso.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008
NEW QUESTION # 106
You have an Azure Stack Hub integrated system that has several Azure Active Directory (Azure AD) tenants onboarded for various departments at your company. Each department uses a specific tag for every resource it creates.
You need to generate a report to help the finance department perform a chargeback to each department.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/mdc/operator/analyze-usage-tzl?tabs=az1
NEW QUESTION # 107
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You add OsType: Windows to the Azure Resource Manager template.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 108
You have an Azure Stack Hub integrated system.
The retention period for storage accounts is set to 7 days.
A user reports that a storage account named hr12943 was deleted accidentally two days ago.
You need to restore hr12943.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: Connect to the administrator portal
Find a storage account
The list of storage accounts in the region can be viewed in Azure Stack Hub by following these steps:
1. Sign in to the administrator portal https://adminportal.local.azurestack.external.
2. Select All services > Storage > Storage accounts.
By default, the first 10 accounts are displayed. You can choose to fetch more by clicking the Load more link at the bottom of the list.
Step 2: Open the Storage accounts blade.
Step 3: Select hr12943.
Once you've located the accounts you're interested in viewing, you can select the particular account to view certain details. A new pane opens with the account details. These details include the kind of account, creation time, location, and so on.
Step 4: Select Recover.
Recover a deleted account
You may be in a situation where you need to recover a deleted account.
In Azure Stack Hub, there's a simple way to do that:
* Browse to the storage accounts list. For more information, see Find a storage account at the top of this article.
* Locate that particular account in the list. You may need to filter.
* Check the state of the account. It should say Deleted.
* Select the account, which opens the account details pane. (Step 3 above)
* On top of this pane, locate the Recover button and select it. (Step 4)
* Select Yes to confirm.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts
NEW QUESTION # 109
......
The Microsoft AZ-600 exam is designed to test the candidate's ability to deploy and manage Azure Stack Hub, integrate it with Azure services, and configure and manage hybrid scenarios. AZ-600 exam covers a range of topics, including infrastructure deployment, security, networking, identity, storage, and monitoring. Candidates are expected to have a thorough understanding of these topics and how they relate to hybrid cloud environments.
Go to AZ-600 Questions - Try AZ-600 dumps pdf: https://www.braindumpsvce.com/AZ-600_exam-dumps-torrent.html
Dumps Practice Exam Questions Study Guide for the AZ-600 Exam: https://drive.google.com/open?id=1XtOL3C_eMA8bN5__DOLeFrNC2Nk0O4wQ