Microsoft Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub - AZ-600 Exam Practice Test
You have an Azure Stack Hub integrated system that is enabled for multitenancy.
The Directories list for the integrated system is shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
The Directories list for the integrated system is shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation
Box 1: 3
3 registered, and one in need of an update.
Note: Update the Azure Stack Hub directories
When an Azure Stack Hub directory update is required, a status of Update Required is shown. For example:
Graphical user interface, application Description automatically generated
To update the directory, select the Directory name checkbox, and then select Update.
Box 2: global administrator of ITHCSubAS2021.onmicrosoft.com
The guest directory ITHCSubAS2021.onmicrosoft.com needs an update.
Update the guest directory
An Azure Stack Hub operator should also inform the guest directory owner that they need to update their directory by using the URL shared for registration.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
You plan to deploy a highly available Azure App Service resource provider to an Azure Stack Hub integrated system.
You need to ensure that the App Service resource meets the prerequisites. The solution must minimize costs.
Which two resources should you deploy? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You need to ensure that the App Service resource meets the prerequisites. The solution must minimize costs.
Which two resources should you deploy? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Correct Answer: A,B
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You have a disconnected Azure Stack Hub integrated system that contains a user named User1.
You need to ensure that User1 can assign role-based access control (RBAC) roles in Azure Stack Hub. The solution must use the principle of least privilege.
Which Azure Stack Hub built-in role should you assign to User1?
You need to ensure that User1 can assign role-based access control (RBAC) roles in Azure Stack Hub. The solution must use the principle of least privilege.
Which Azure Stack Hub built-in role should you assign to User1?
Correct Answer: D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You have an Azure Stack Hub integrated system.
A scale unit node has a hardware failure.
You replace the physical server based on the field replacement unit (FRU) documentation of the OEM hardware vendor.
You need to reintroduce the node to the scale unit.
Which PowerShell cmdlet should you run?
A scale unit node has a hardware failure.
You replace the physical server based on the field replacement unit (FRU) documentation of the OEM hardware vendor.
You need to reintroduce the node to the scale unit.
Which PowerShell cmdlet should you run?
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You have an Azure subscription named sub1 linked to an Azure Active Directory (Azure AD) tenant named contoso.com You have an Azure Stack Hub integrated system that is registered to sub1.
You need to delegate registering the Azure Stack Hub integrated system to an Azure Stack Hub operator. The solution must use the Principle of least privilege.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in correct order.
You need to delegate registering the Azure Stack Hub integrated system to an Azure Stack Hub operator. The solution must use the Principle of least privilege.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in correct order.
Correct Answer:
Explanation
Graphical user interface, text, application, email Description automatically generated
Step 1: Create a JSON file that contains the role definition.
Rather than using an account that has Owner permissions in the Azure subscription, you can create a custom role to assign permissions to a less-privileged user account. This account can then be used to register your Azure Stack Hub.
Create a custom role using PowerShell
Use the following JSON template to simplify creation of the custom role. The template creates a custom role that allows the required read and write access for Azure Stack Hub registration.
1. Create a JSON file. For example, C:\CustomRoles\registrationrole.json.
2. Add the following JSON to the file. Replace <SubscriptionID> with your Azure subscription ID.
{
"Name": "Azure Stack Hub registration role",
"Id": null,
"IsCustom": true,
"Description": "Allows access to register Azure Stack Hub",
"Actions": [
"Microsoft.Resources/subscriptions/resourceGroups/write",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.AzureStack/registrations/*",
"Microsoft.AzureStack/register/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleAssignments/write",
"Microsoft.Authorization/roleAssignments/delete",
"Microsoft.Authorization/permissions/read",
"Microsoft.Authorization/locks/read",
"Microsoft.Authorization/locks/write"
],
"NotActions": [
],
"AssignableScopes": [
"/subscriptions/<SubscriptionID>"
]
}
3. In PowerShell, connect to Azure to use Azure Resource Manager. When prompted, authenticate using an account with sufficient permissions such as Owner or User Access Administrator.
Connect-AzAccount
4. To create the custom role, use New-AzRoleDefinition specifying the JSON template file.
New-AzRoleDefinition -InputFile "C:\CustomRoles\registrationrole.json"
Step 2: From Azure Cloud shell, run the New-AzRoleDefinition cmdlet.
Step 3: From the Azure portal, add a role assignment to sub1.
Assign a user to registration role
After the registration custom role is created, assign the role to the user account that will be used for registering Azure Stack Hub.
Sign in with the account with sufficient permission on the Azure subscription to delegate rights - such as Owner or User Access Administrator.
In Subscriptions, select Access control (IAM) > Add role assignment.
In Role, choose the custom role you created: Azure Stack Hub registration role.
Select the users you want to assign to the role.
Select Save to assign the selected users to the role.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-registration-role
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to update the Azure App Service resource provider.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You need to update the Azure App Service resource provider.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Correct Answer: D,E
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.
You receive an alert that one or more guest Azure Active Directory (Azure AD) tenants requires updates to support new features.
You need to identify which Azure AD tenants you must update.
Which two options can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
You receive an alert that one or more guest Azure Active Directory (Azure AD) tenants requires updates to support new features.
You need to identify which Azure AD tenants you must update.
Which two options can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Correct Answer: A,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You need to identify the certificate for the integrated system in Chicago. The solution must meet the technical requirements.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation
When deploying Azure Stack Hub in disconnected mode it is recommended to use certificates issued by an enterprise certificate authority. This is important because clients accessing Azure Stack Hub endpoints must be able to contact the certificate revocation list (CRL).
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs?view=azs-2008
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy and contains a user subscription. The subscription contains a user named User1.
The integrated system has the following configurations:
Region name: region1
Fully qualified domain name (FQDN): contoso.com
You need to identify which gallery endpoint URI User1 must use.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or net at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
The integrated system has the following configurations:
Region name: region1
Fully qualified domain name (FQDN): contoso.com
You need to identify which gallery endpoint URI User1 must use.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or net at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation
Box 1: portal.
A DNS entry is created for each endpoint in the external DNS zone that's specified at deployment time. For example, the user portal is assigned the DNS host entry of portal.<region>.<fqdn>.
* Portal (user)
Portal.<region>.<fqdn>
Box 2: region1.
Note: Once your item has been successfully published to the marketplace, you can delete the content from the storage account.
All default gallery artifacts and your custom gallery artifacts are now accessible without authentication under the following URLs:
https://galleryartifacts.adminhosting.[Region].[externalFQDN]/artifact/20161101/[TemplateName]/DeploymentT
https://galleryartifacts.hosting.[Region].[externalFQDN]/artifact/20161101/[TemplateName]/DeploymentTempla Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-endpoints
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and-publish-marketplace-item
You have a disconnected Azure Stack Hub integrated system.
You plan to implement an app named App1.
You need to create a new service principal for App1. The solution must maximize security.
What should you do first?
You plan to implement an app named App1.
You need to create a new service principal for App1. The solution must maximize security.
What should you do first?
Correct Answer: D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You have a connected Azure Stack Hub integrated system.
You need to the validate the configuration of the integrated system by using the Test-AzureStack -Include AzsScenarios command.
Which additional parameter should you specify?
You need to the validate the configuration of the integrated system by using the Test-AzureStack -Include AzsScenarios command.
Which additional parameter should you specify?
Correct Answer: D
You need to change the DNS forwarder of the priv1 region.
Which two actions should you perform? Each correct answer presents part of the solution?
NOTE: Each correct selection is worth one point.
Which two actions should you perform? Each correct answer presents part of the solution?
NOTE: Each correct selection is worth one point.
Correct Answer: D,E
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).