Microsoft Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub - AZ-600 Exam Questions
QUESTION NO: 1
You have an Azure Stack Hub integrated system that connects to the Internet.
You are migrating several Hyper-V workloads to Azure Stack Hub. Billing for the workloads is consumption-based.
You need to predict the ongoing Microsoft subscription charges for the workloads.
You run an Azure Migrate assessment and receive the output shown in the following table.
The values from which three columns affect the ongoing Microsoft subscription charges? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
You have an Azure Stack Hub integrated system that connects to the Internet.
You are migrating several Hyper-V workloads to Azure Stack Hub. Billing for the workloads is consumption-based.
You need to predict the ongoing Microsoft subscription charges for the workloads.
You run an Azure Migrate assessment and receive the output shown in the following table.
The values from which three columns affect the ongoing Microsoft subscription charges? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Correct Answer: A,E,F
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 2
You need to implement disaster recovery for the priv1 region to meet the technical requirements.
Which main components should you include in the disaster recovery plan?
You need to implement disaster recovery for the priv1 region to meet the technical requirements.
Which main components should you include in the disaster recovery plan?
Correct Answer: A
QUESTION NO: 3
You have a connected Azure Stack Hub integrated system that contains a user named User1.
You need to ensure that User1 can onboard a new guest tenant directory. The solution must use the principle of least privilege.
Which role should you assign to User1?
You have a connected Azure Stack Hub integrated system that contains a user named User1.
You need to ensure that User1 can onboard a new guest tenant directory. The solution must use the principle of least privilege.
Which role should you assign to User1?
Correct Answer: A
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 4
You have an Azure Stack Hub integrated system that has syslog forwarding configured.
You need to remove syslog forwarding and the associated certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You have an Azure Stack Hub integrated system that has syslog forwarding configured.
You need to remove syslog forwarding and the associated certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security?view=azs-2008
QUESTION NO: 5
You need to configure the log forwarding. The solution must meet the Azure Stack Hub requirements.
What should you do?
You need to configure the log forwarding. The solution must meet the Azure Stack Hub requirements.
What should you do?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 6
You have an Azure Stack Hub integrated system that has 12 nodes. All the nodes run the latest firmware available from the OEM. The integrated system also has a hot spare node.
You receive an alert concerning the hardware on one of the nodes.
You need to replace the node as soon as possible. The solution must minimize disruptions to user workloads.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You have an Azure Stack Hub integrated system that has 12 nodes. All the nodes run the latest firmware available from the OEM. The integrated system also has a hot spare node.
You receive an alert concerning the hardware on one of the nodes.
You need to replace the node as soon as possible. The solution must minimize disruptions to user workloads.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-replace-node?view=azs-2008
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-node-actions?view=azs-2008&tabs=az1 d5 Eight hours ago, you received a critical alert for Azure Event Hubs.
QUESTION NO: 7
You have a Windows Server-based certification authority (CA) and a disconnected Azure Stack Hub integrated system.
You need to issue a certificate that will be used to authenticate a service principal when the service principal accesses Azure Stack Hub resources.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Windows Server-based certification authority (CA) and a disconnected Azure Stack Hub integrated system.
You need to issue a certificate that will be used to authenticate a service principal when the service principal accesses Azure Stack Hub resources.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation
Box 1: Microsoft legacy Cryptographic Service Provider (CSP) key provider Give an app access to Azure Stack Hub resources An application that deploys or configures resources through Azure Resource Manager must be represented by its own identity, known as a security principal. Just as a user is represented by a user principal, an app is represented by a service principal.
Create an app registration that uses a certificate credential
When creating a certificate credential, the following requirements must be met:
* The cryptographic provider must be specified as a Microsoft legacy Cryptographic Service Provider (CSP) key provider.
* The certificate format must be in PFX file, as both the public and private keys are required. Windows servers use .pfx files that contain the public key file (TLS/SSL certificate file) and the associated private key file.
* Etc.
Box 2: .pfx
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/give-app-access-to-resources
QUESTION NO: 8
You need to create a certificate for the Event Hubs resource provider. The solution must support the planned changes.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to create a certificate for the Event Hubs resource provider. The solution must support the planned changes.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation
Box 1: Subject Alternative Name
Implement the App Service resource provider and the Event Hubs resource provider on the integrated system/ Only the Subject Alternative Name is used.
Box 2: DNS Name = =*.eventhub.east.azurestack.treyresearch.net
Event Hubs prerequisites
Procure public key infrastructure (PKI) SSL certificates for Event Hubs. The Subject Alternative Name (SAN) must adhere to the following naming pattern: CN=*.eventhub.<region>.<fqdn>. Subject Name may be specified, but it's not used by Event Hubs when handling certificates. Only the Subject Alternative Name is used. See PKI certificate requirements for the full list of detailed requirements.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-prerequisites
QUESTION NO: 9
You plan to deploy an Azure Stack Hub integrated system that will connect to the Internet.
You need to define the public VIP pool.
What is the smallest subnet mask that you can use for the public VIP pool?
You plan to deploy an Azure Stack Hub integrated system that will connect to the Internet.
You need to define the public VIP pool.
What is the smallest subnet mask that you can use for the public VIP pool?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
