Microsoft Role-based AZ-600 Questions & Answers

• Question 21:

  DRAG DROP

  You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.

  You have a group named AppGroup1.

  You need to provide an application with the ability to access Azure Stack Hub resources by using AppGroup1.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-create-service-principals?view=azs-2008andtabs=az1%2Caz2andpivots=state-connected

• Question 22:

  DRAG DROP

  You have an Azure Stack Hub integrated system that is disconnected from the Internet.

  You need to collect diagnostic logs, but do not have access to an SMB share.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008

• Question 23:

  DRAG DROP

  You have an Azure Stack Hub integrated system that has syslog forwarding configured.

  You need to remove syslog forwarding and the associated certificate.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security?view=azs-2008

• Question 24:

  DRAG DROP

  You have an Azure Stack Hub integrated system.

  You need to ensure that you can recover managed and unmanaged disks that are deleted from user subscriptions.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts?view=azs-2008

• Question 25:

  DRAG DROP

  You have an Azure Stack Hub integrated system that is disconnected from the Internet.

  During an update, an error occurs that prevents you from accessing the administrator portal.

  While troubleshooting the issue, a Microsoft Support Engineer requests that you collect and send the relevant logs.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008

• Question 26:

  HOTSPOT

  You have an Active Directory federation Services {AD FS) deployment.

  You plan to deploy a disconnected Azure Stack Hub integrated system.

  You install the Azure Stack Hub Readiness Checker tool.

  You need to validate that the AD FS deployment can be used to manage role-based access control (RBAC) roles in Azure Stack Hub.

  how should you complete the command? To answer, select the appropriate options m the answer area

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  

• Question 27:

  HOTSPOT

  You have an Azure Stack Hub Integrated system that has the following configurations:

  Deployment virtual machine (DVM) IP address: 10.30.1.253 First host IP address: 10.30.1.193 Last host IP address: 10.30.1.254 Subnet mask: 255.255.255.192 BMC network: 10.30.1.192/26 Default gateway: 10.30.1.193 NTP: 10.31.1.2 DNS: 8.8.8.8

  You need to deploy an Operator Access Workstation (OAW) to the Hardware Lifecycle Host (HLH) and configure the network settings for the OAW.

  How should you complete the script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: .\New-OAW.ps1

  Create the OAW VM using a script

  The following script prepares the virtual machine as the Operator Access Workstation (OAW), which is used to access Microsoft Azure Stack Hub.

  Sign in to the HLH with your credentials.

  Download OAW.zip and extract the files.

  Open an elevated PowerShell session.

  Navigate to the extracted contents of the OAW.zip file.

  Run the New-OAW.ps1 script.

  Example: Example: Deploy on HLH using a Microsoft Image $oawRootPath = "D:\oawtest"

  $securePassword = Read-Host -Prompt "Enter password for Azure Stack OAW's local administrator" -AsSecureString

  if (Get-ChildItem -Path $oawRootPath -Recurse | Get-Item -Stream Zone* -ErrorAction SilentlyContinue | Select-Object FileName)

  { Write-Host "Execution failed, unblock the script files first" } else { .\New-OAW.ps1 -LocalAdministratorPassword $securePassword }

  Syntax:

  New-OAW

  -LocalAdministratorPassword ` -IPAddress `

  -SubnetMask `

  -DefaultGateway `

  -DNS `

  -TimeServer `

  [-AzureStackCertificatePath ] `

  [-AzSStampInfoFilePath ] `

  [-CertificatePassword ] ` [-ERCSVMIP ] `

  [-ImageFilePath ] `

  [-VirtualMachineName ] `

  [-VirtualMachineMemory ] `

  [-VirtualProcessorCount ] `

  [-VirtualMachineDiffDiskPath ] `

  [-PhysicalAdapterMACAddress ] `

  [-VirtualSwitchName ] `

  [-ReCreate] `

  [-AsJob] `

  [-Passthru] `

  [-WhatIf] `

  [-Confirm] `

  []

  Box 2: 10.30.1.253

  Deployment virtual machine (DVM) IP address: 10.30.1.253

  Note:

  Parameter:

  IPAddress (Required)

  The static IPv4 address to configure TCP/IP on the virtual machine.

• Question 28:

  HOTSPOT

  You have an Azure Stack Hub integrated system that is linked to an Active Directory domain named fabrikam.com by using Active Directory Federation Services (AD FS).

  You have the resources shown in the following table.

  

  You need to ensure that the integrated system can resolve DNS queries for fabrikam.com.

  How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Register-CustomDnsServer

  Resolving external DNS names from Azure Stack Hub To resolve DNS names for endpoints outside Azure Stack Hub (for example:

  www.bing.com), you need to provide DNS servers that Azure Stack Hub can use to forward DNS requests for which Azure Stack Hub isn't authoritative. For deployment, DNS servers that Azure Stack Hub forwards requests to are required in

  the Deployment Worksheet (in the DNS Forwarder field). Provide at least two servers in this field for fault tolerance. Without these values, Azure Stack Hub deployment fails.

  Configure conditional DNS forwarding

  Important

  This only applies to an AD FS deployment.

  To enable name resolution with your existing DNS infrastructure, configure conditional forwarding.

  To add a conditional forwarder, you must use the privileged endpoint.

  For this procedure, use a computer in your datacenter network that can communicate with the privileged endpoint in Azure Stack Hub.

  1.

  Open an elevated Windows PowerShell session (run as administrator), and connect to the IP address of the privileged endpoint. Use the credentials for CloudAdmin authentication.

  $cred=Get-Credential Enter-PSSession -ComputerName -ConfigurationName PrivilegedEndpoint -Credential $cred

  2.

  After you connect to the privileged endpoint, run the following PowerShell command. Substitute the sample values provided with your domain name and IP addresses of the DNS servers you want to use.

  Register-CustomDnsServer -CustomDomainName "contoso.com" - CustomDnsIPAddresses "192.168.1.1","192.168.1.2"

  Box 2: fabrikam.com

  The external DNS zone.

  Box 3: "192.160.20.1", "192.160.20.2",

  The IP addresses for the DNS servers in External DNS zone.

• Question 29:

  HOTSPOT

  You have an Azure Stack Hub integrated system.

  The Volumes list for the integrated system is shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 30:

  HOTSPOT

  You have a connected Azure Stack Hub integrated system that uses Active Directory Federation Services (AD FS) as the identity provider.

  You open a PowerShell session and store the GUID of an Azure subscription in a variable named $SubscriptionlD.

  You need to validate the AD FS integration.

  How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  Box 1: Connect-AzAccount Steps to validate the Azure registration

  

  1.

  Open an elevated PowerShell prompt, and then run the following command to install AzsReadinessChecker:

  Install-Module -Name Az.BootStrapper -Force -AllowPrerelease Install-AzProfile -Profile 2020-09-01-hybrid -Force Install-Module -Name Microsoft.AzureStack.ReadinessChecker

  2.

  From the PowerShell prompt, run the following command to set $subscriptionID as the Azure subscription to use. Replace xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx with your own subscription ID: $subscriptionID = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

  3.

  From the PowerShell prompt, run the following command: Connect-AzAccount -subscription $subscriptionID

  4.

  From the PowerShell prompt, run the following command to start validation of your subscription. Provide your Azure AD administrator and your Azure AD tenant name: Invoke-AzsRegistrationValidation -RegistrationSubscriptionID $subscriptionID Box 2: Microsoft.AzureStack.ReadinessChecker

  Validate AD FS integration

  1.

  On a computer that meets the prerequisites, open an administrative PowerShell prompt and then run the following command to install AzsReadinessChecker: Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease

  2.

  From the PowerShell prompt, run the following command to start validation. Specify the value for -CustomADFSFederationMetadataEndpointUri as the URI for the federation metadata. Invoke-AzsADFSValidation -CustomADFSFederationMetadataEndpointUri https://adfs.cont