Microsoft Role-based AZ-600 Questions & Answers

• Question 151:

  HOTSPOT

  You have a Windows Server-based certification authority (CA) and a disconnected Azure Stack Hub integrated system.

  You need to issue a certificate that will be used to authenticate a service principal when the service principal accesses Azure Stack Hub resources.

  How should you configure the certificate? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Microsoft legacy Cryptographic Service Provider (CSP) key provider Give an app access to Azure Stack Hub resources An application that deploys or configures resources through Azure Resource Manager must be represented by its own identity, known as a security principal. Just as a user is represented by a user principal, an app is represented by a service principal. Create an app registration that uses a certificate credential When creating a certificate credential, the following requirements must be met:

  *

  The cryptographic provider must be specified as a Microsoft legacy Cryptographic Service Provider (CSP) key provider.

  *

  The certificate format must be in PFX file, as both the public and private keys are required. Windows servers use .pfx files that contain the public key file (TLS/SSL certificate file) and the associated private key file.

  *

  Etc. Box 2: .pfx

• Question 152:

  HOTSPOT

  Your company is a Cloud Solution Provider (CSP) named contoso.com.

  The company has an Azure Stack Hub integrated system enabled for multitenancy.

  You plan to add a new customer. For the customer, you already created an Azure user subscription that uses an Azure AD tenant named the fabrikam.com.

  You collect the following information:

  Customer subscription ID: Q7daa8e5-f301-4$65-99c3-dUae36620df

  Registration subscription IB 52949927-abbe-4bb0-ae2a-dfe8f9636899

  Registration resource group name: AzureStack

  Registration name: AzureStack-id9de6l0-9Oc4-48ff-b455-d6ad9eb1b7a4

  Vou need to ensure that the fabrAam.com user subscription is billed separately from other user subscriptions. How should you complete the powerShell script? To answer select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 153:

  HOTSPOT

  You have an Azure Stack Hub integrated system that uses an Azure AD tenant named contoso.com as an identity provider. An Azure Stack Hub operator named Operator1 is a global administrator for the contoso.com Azure AD tenant. Operator1 creates a new user subscription as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

• Question 154:

  HOTSPOT

  You have a disconnected Azure Stack Hub integrated system that will be used in production.

  You need to obtain a token to register the integrated system.

  How should you complete the PowerShell script? To answer, select the appropriate options in the answer area

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: $false

  Get-AzsRegistrationToken generates a registration token from the input parameters.

  Parameter: UsageReportingEnabled True/False

  Azure Stack Hub reports usage metrics by default. Operators with capacity uses or supporting a disconnected environment need to turn off usage reporting. Allowed values for this parameter are: True, False.

  Box 2: Capacity

  BillingModel String

  The billing model that your subscription uses. Allowed values for this parameter are:

  Capacity, PayAsYouUse, and Development.

  With a disconnected deployment, you're limited to an Active Directory Federation Services (AD FS) identity store and the capacity-based billing model.

• Question 155:

  HOTSPOT

  You have an Azure Stack Hub integrated system that is configured as shown in the following table.

  

  You need to generate certificate signing requests (CSRs) for certificate renewal.

  How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 156:

  HOTSPOT

  You have an Azure Stack Hub integrated system that is enabled for multi-tenancy and contains a tenant. The integrated system is configured as shown in the following table.

  

  You need to configure the URI that will be used by the tenant to query the subscription usage. How should you complete the URI? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

  Box 1: https://management.contoso.com

  Do not include the region1 in the URI.

  Use management not adminmanagentment (see below).

  Note: Tenant resource usage API reference

  A tenant can use the tenant APIs to view the tenant's own resource usage data. These APIs are consistent with the Azure usage APIs.

  You can use the Windows PowerShell cmdlet Get-UsageAggregates to get usage data, just like in Azure.

  API call

  Request

  The request gets consumption details for the requested subscriptions and for the requested time frame. There is no request body.

  Method Request URI

  GET

  https://{armendpoint}/subscriptions/{subId}/providers/Microsoft.Commerce/usageAggregate s?reportedStartTime={reportedStartTime}andreportedEndTime={reportedEndTime}andaggregat ionGranularity={granularity}andapi-version=2015-06-01previewandcontinuationToken={token- value}

  Parameters

  * Armendpoint Azure Resource Manager endpoint of your Azure Stack Hub environment. The Azure Stack Hub convention is that the name of Azure Resource Manager endpoint is in the format https://management.{domain-name}. For example, for the development kit, the domain name is local.azurestack.external, then the Resource Manager endpoint is https://management.local.azurestack.external.

  Box 2: 22f2d01-...

  Use the tenant subscription identifier.

  Parameters continued

  * subId

  Subscription ID of the user who is making the call. You can use this API only to query for a single subscription's usage. Providers can use the provider resource usage API to query usage for all tenants.

• Question 157:

  HOTSPOT

  You have an Azure Stack Hub integrated system that connects to the Internet.

  You attempt to download an image as shown in the Add from Azure exhibit. (Click the Add from Azure tab.)

  

  The Marketplace item blade for [smalldisk] Windows Server 2019 Datacenter-Pay as you go is shown in the item exhibit. (Click the Item tab.)

  

  The marketplace items are shown in the Marketplace Items exhibit. (Click the Marketplace Items tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-windows-server-faq?view=azs-2102andtabs=az1%2Caz2

• Question 158:

  HOTSPOT

  You open the Resource providers blade for a user subscription as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-services-resource-providers

• Question 159:

  HOTSPOT

  You have three Azure Stack Hub integrated systems that use the same Azure Active Directory (Azure AD) tenant named contoso.com as their identity provider. The integrated systems are deployed in Chicago, New York, and Seattle. The

  region name of each integrated system corresponds to the city in which the system is deployed.

  When reviewing alerts in the integrated system in Chicago, you receive an alert indicating that the home directory requires an update.

  From the Azurestack-tools-master/identity folder, you import the AzureStack.Identity.psm1 module.

  How should you complete the command to update the home directory? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md

• Question 160:

  HOTSPOT

  You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is

  fabrikam.com.

  The integrated system has the following domains enabled for multitenancy:

  1.

  fabrikam.onmicrosoft.com

  2.

  contoso.onmicrosoft.com

  3.

  fabrikam.com

  4.

  contoso.com

  You need to disable multitenancy for contoso.com.

  How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008