Microsoft Microsoft Certified: Azure Stack Hub Operator Associate AZ-600 Free Dumps 2023

1. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system.

The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).

You need to create the list.

Solution: You connect to the administrator portal and view the users who are assigned the Owner role for the default provider subscription.

Does this meet the goal?

2. You are planning the deployment of two Azure Stack Hub integrated systems that will be located in Seattle and Redmond, respectively.

Workloads will run on infrastructure as a service (IaaS) virtual machines that have a static IIS web front-end and a Microsoft SQL Server 2019 cluster backend for database storage.

You plan to leverage Azure Traffic Manager to direct DNS requests to the integrated system in Seattle by default and use the Redmond integrated system in the event of a disaster.

What should you use to replicate application consistent database changes to the Redmond site?

3. DRAG DROP

You have a connected Azure Stack Hub integrated system.

You need to deploy an Operator Access Workstation (OAW) virtual machine image.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

4. As part of the planned changes for the int1 region, you need to remove all the user subscriptions and the associated resources. The solution must meet the technical requirements.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

5. You plan to install an update to an Azure Stack Hub integrated system.

You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.

Solution: From the administrator management endpoint, you run Test-AzureStack CGroup "UpdateReadiness".

Does this meet the goal?

6. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system that connects to the Internet.

You need to update the Azure Event Hubs service.

Solution: From the Updates blade of the administrator portal, you trigger the installation of the latest update listed in the Infrastructure section.

Does this meet the goal?

7. You have an Azure Stack Hub integrated system.

You need to add GPUs to the integrated system. The solution must minimize downtime of the existing Azure Stack Hub workloads.

Which PowerShell cmdlet should you run first?

8. HOTSPOT

You plan to deploy a disconnected Azure Stack Hub integrated system named eastus.azurestack.contoso.com. Azure Stack Hub clients will be isolated from the internet.

You need to identify which certificates and certificate type to use for the deployment.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

9. HOTSPOT

You have an Azure Stack Hub integrated system that connects to the Internet.

You attempt to download an image as shown in the Add from Azure exhibit. (Click the Add from Azure tab.)





The Marketplace item blade for [smalldisk] Windows Server 2019 Datacenter-Pay as you go is shown in the item exhibit. (Click the Item tab.)





The marketplace items are shown in the Marketplace Items exhibit. (Click the Marketplace Items tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

10. You have an Azure Stack Hub integrated system.

You unlock the privileged endpoint (PEP).

How long will the PEP session remain unlocked?

11. HOTSPOT

You have a disconnected Azure Stack Hub integrated system that will be used in production.

You need to obtain a token to register the integrated system.

How should you complete the PowerShell script? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

12. Topic 3, Trey Research



Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview

General overview

Trey Research is a pharmaceutical company that has an office in Boston.



Existing environment

Identity Environment

The on-premises network contains an Active Directory forest named treyresearch.net. The forest contains a user named User1.

The forest syncs to an Azure AD tenant named treyresearch.net by using Azure AD Connect.

Trey Research has an internal certification authority (CA).



Compute Environment

The datacenter in the Boston office contains a computer named CLIENT1 that runs Windows 10. CLIENT1 is an administrative workstation that connects directly to the Azure

Stack Hub integrated system.



Planned changes and requirements

Planned changes

Trey Research identifies the following planned changes:

✑ Change the Azure Stack Hub integrated system registration to use an Azure subscription named Subscription3 that has a GUID of 12345678-1234-1234-1234-222222222222.

✑ Configure the integrated system to resolve external names by using a DNS Server that has an IP address of 10.100.100.100.

✑ Implement the App Service resource provider and the Event Hubs resource provider on the integrated system/

✑ Publish a custom cloud-init built image of a Linux virtual machine to Azure Stack Hub Marketplace on the integrated system.

✑ Create a new cloudadmin user named User2.

✑ Assign the delegated provider role to User1.



Azure Stack Hub Requirements

Trey Research identifies the following Azure Stack Hub requirements:

✑ Azure Stack Hub integrated system logs must be forwarded to an external security information and event management (SIEM) system named SIEM1. SIEM1 requires TCP with mutual authentication and TLS 1.2 encryption.

✑ A default Microsoft SQL Server instance will host the database of the App Service resource provider.

✑ The infrastructure of the integrated system must be backed up as frequently as possible.

✑ The integrated system backups must be retained for 28 days.



Business Requirements

Minimize software and licensing costs.



HOTSPOT

You need to configure the Azure Stack Hub infrastructure backups. The solution must meet the Azure Stack Hub requirements.

What should you do in the Azure Stack Hub administrator portal? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

13. HOTSPOT

You have an Azure Stack Hub integrated system.

You need to update the integrated system to use a non-Windows NTP service that has a host name of ntp1.contoso.com.

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

14. HOTSPOT

You have an Active Directory federation Services {AD FS) deployment.

You plan to deploy a disconnected Azure Stack Hub integrated system.

You install the Azure Stack Hub Readiness Checker tool.

You need to validate that the AD FS deployment can be used to manage role-based

access control (RBAC) roles in Azure Stack Hub.

how should you complete the command? To answer, select the appropriate options m the answer area NOTE: Each correct selection is worth one point.

15. DRAG DROP

You have an Azure Stack Hub integrated system that is enabled for multi-tenancy and contains a user subscription. The subscription contains a user named User1.

The integrated system has the following configurations:

✑ Region name: region1

✑ Fully qualified domain name (FQDN): contoso.com

You need to identify which gallery endpoint URI User1 must use.

How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or net at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

16. You have an Azure Stack Hub integrated system.

You perform infrastructure backups twice daily.

User workloads are protected by using Azure Site Recovery.

The architect of the user workloads is planning a business continuity disaster recovery (BCDR) strategy.

You need to recommend to the architect which resources to include in the BCDR strategy.

Which two resources should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

17. You plan to deploy a highly available Azure App Service resource provider to an Azure

Stack Hub integrated system.

You need to ensure that the App Service resource meets the prerequisites. The solution must minimize costs.

Which two resources should you deploy? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

18. DRAG DROP

You have an Azure Stack Hub integrated system that contains a user named User1.

You have a JSON file that contains the definition of the Reader role.

You need to create a custom role to enable User1 to manage updates for the integrated system.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

19. You have an Azure Stack Hub integrated system.

A scale unit node has a hardware failure.

You replace the physical server based on the field replacement unit (FRU) documentation of the OEM hardware vendor.

You need to reintroduce the node to the scale unit.

Which PowerShell cmdlet should you run?

20. DRAG DROP

You have an Azure Stack Hub integrated system that is disconnected from the internet.

A new Microsoft update package is released.

You need to apply the update.

Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

21. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system that connects to the Internet.

You need to update the Azure Event Hubs service.

Solution: From a privileged endpoint (PEP) session, you run the Install-AzsUpdate cmdlet.

Does this meet the goal?

22. You have an Azure Slack Hub integrated system that uses the latest version.

You discover an alert for an external certificate that will expire. You obtain new certificates.

You need to validate that all the components required to change the certificates are in a healthy state, and then renew the certificates.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

23. You have an Azure Stack Hub integrated system that has the following configurations:

✑ A deployment prefix of AzS

✑ A physical prefix of AzP

You need to renew the certificates for the integrated system.

To which virtual machine should you establish a PowerShell session?

24. You have a connected Azure Stack Hub integrated system.

You need to offer users the Azure Kubernetes Service (AKS) engine for production workloads.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

25. DRAG DROP

You need to change the int1 region to use the capacity model. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

26. You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Azure Active Directory (Azure AD) identity provider.

You need to update the Azure App Service resource provider.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

27. DRAG DROP

You have an Azure Stack Hub integrated system.

The retention period for storage accounts is set to 7 days.

A user reports that a storage account named hr12943 was deleted accidentally two days ago.

You need to restore hr12943.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

28. DRAG DROP

You have an Azure Stack Hub integrated system that is enabled for mufti-tenancy.

The integrated system is configured as shown in the following table.





You need lo onboard fabrikam.com as a guest Azure AD tenant to the integrated system.

How should you complete the Power Shell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

29. DRAG DROP

You have an Azure Stack Hub integrated system that contains 20 subscriptions. The subscriptions use custom storage and compute quotas.

You need to delete the custom quotas.

Which three Azure Stack Hub objects should you delete in sequence before you can delete the quotas? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

30. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system that connects to the Internet.

You need to update the Azure Event Hubs service.

Solution: From the Updates blade of the administrator portal, you select the latest update in the infrastructure section.

Does this meet the goal?

31. DRAG DROP

You have an Azure Stack Hub integrated system that is registered to an Azure Active Directory (Azure AD) tenant named contoso.com. The integrated system region name is region1.

You need to retrieve only critical infrastructure alerts from the integrated system by using the REST API.

Which URI query should you use? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

32. HOTSPOT

You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.

The integrated system has the following domains enabled for multitenancy:

✑ fabrikam.onmicrosoft.com

✑ contoso.onmicrosoft.com

✑ fabrikam.com

✑ contoso.com

You need to disable multitenancy for contoso.com.

How should you complete the PowerShell script? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

33. You have a disconnected Azure Stack Hub integrated system.

You plan to implement an app named App1.

You need to create a new service principal for App1. The solution must maximize security.

What should you do first?

34. You plan to deploy an Azure Stack Hub integrated system that will connect to the Internet.

You need to define the public VIP pool.

What is the smallest subnet mask that you can use for the public VIP pool?

35. DRAG DROP

You plan to deploy a disconnected Azure Stack Hub integrated system that has the following configurations:

✑ FQDN: contoso.local

✑ Region name: region1

✑ Internal domain name: contoso.com

You need to generate a certificate signing request (CSR) for the new deployment. The solution must prevent the common name (CN) value from being included in the certificate subject.

How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all.

You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

36. You have 20 computers that run Linux.

You deploy a disconnected Azure Stack Hub integrated system.

You need to ensure that users on the Linux computers can manage their Azure Stack Hub resources by using Azure Command-Line Interface (CLI).

What should you do first?

37. HOTSPOT

You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com.

An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

38. You have an Azure Stack Hub integrated system.

You need to give a new operator access to the privileged endpoint (PEP) as soon as possible.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

39. DRAG DROP

You have an Azure Stack Hub integrated system that is disconnected from the Internet.

You need to make a new image available in Azure Stack Hub Marketplace in the disconnected environment.

From a computer that has Internet access, you download all the required tools.

Which four actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

40. HOTSPOT

You have an Azure Stack Hub integrated system that is linked to an Active Directory domain named fabrikam.com by using Active Directory Federation Services (AD FS).

You have the resources shown in the following table.





You need to ensure that the integrated system can resolve DNS queries for fabrikam.com.

How should you complete the PowerShell script? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

41. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to install an update to an Azure Stack Hub integrated system.

You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.

Solution: From a privileged endpoint (PEP) session, you run

Test-AzureStack CGroup "UpdateReadiness".

Does this meet the goal?

42. DRAG DROP

You have an Azure Stack Hub integrated system that is disconnected from the Internet.

You need to collect diagnostic logs, but do not have access to an SMB share.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

43. You need to support the planned changes for User1.

Which service should you include?

44. HOTSPOT

You plan to deploy a disconnected Azure Stack Hub integrated system.

You need to identify which type of certificate to use for the deployment and the file format for the certificate.

The solution must meet the following requirements:

• Minimize administrative effort.

• Maximize security.

What should identify? To answer, select the appropriate options in the answer area. NOTE:

Each correct selection is worth one point.

45. DRAG DROP

You need to update the Azure Stack Hub integrated system registration to support the planned changes.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

46. You have a disconnected Azure Stack Hub integrated system.

You deploy an Operator Access Workstation (OAW) virtual machine image.

Which management tool should be installed manually on the image?

47. HOTSPOT

You have an Azure Stack Hub integrated system that is enabled for multi-tenancy and contains a tenant.

The integrated system is configured as shown in the following table.





You need to configure the URI that will be used by the tenant to query the subscription usage.

How should you complete the URI? To answer, select the appropriate options in the answer area.

48. You have an Azure Stack Hub integrated system that is disconnected from the internet.

The integrated system has an Azure App Service resource provider.

You generate a new certificate.

You need to rotate the certificate of the App Service identity application to use the new certificate.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

49. DRAG DROP

You have an Azure Stack Hub integrated system.

You need to ensure that you can recover managed and unmanaged disks that are deleted from user subscriptions.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.