VCE4Plus AZ-600 Real Exam Question Answers Updated [Dec 08, 2021]
Easily To Pass New Microsoft AZ-600 Dumps with 80 Questions
Understanding useful and specialized parts of Manage Identity and Access
The accompanying will be examined in MICROSOFT AZ-600 dumps:
- Update visitor occupant registry
- Recommend a consent model
- Manage multi-tenure
- Provision a help head for Azure Stack Hub
- Register the visitor occupant catalog with Azure Stack Hub
- Identify a fitting strategy for access (administration head, clients, gatherings)
- Create a custom job
- Manage access
- Disable multi-tenure
- Configure Azure Stack Hub home registry
- Configure access in Azure Stack Hub
NEW QUESTION 18
You have an Azure Stack Hub integrated system.
You are an operator, and you have read access to a user subscription named Fabrikam1.
Users in Fabrikam1 request help creating a custom role-based access control (RBAC) role based on an existing built-in Azure role.
You connect to the Azure subscription, create the respective role definition, and save the role definition as a JSON file.
Which three actions should you perform to create the custom role? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Modify the custom role definition to include the target default provider subscription ID as an AssignableScope, set the IsCustom field to true, and set Id to Null.
- B. Request owner access to the user subscription.
- C. Connect to the user management endpoint and run the
New-AzureRmRoleDefinition cmdlet. - D. Connect to the administrator management endpoint and run the
New-AzureRmRoleDefinition cmdlet. - E. Modify the custom role definition to include the target subscription ID as an AssignableScope, set the IsCustom field to true, and set Id to Null.
Answer: B,C,E
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell
NEW QUESTION 19
You have an Azure Stack Hub integrated system that has syslog forwarding configured.
You need to remove syslog forwarding and the associated certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Connect to the privileged endpoint(PEL)
2 - Run the Set-SyslogServer cmdlet
3 - Run the Set-SyslogClient cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security?view=azs-2008
NEW QUESTION 20
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to collect diagnostic logs, but do not have access to an SMB share.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION 21
You need to implement the management app. The solution must meet the technical requirements.
What should you use?
- A. a browser session to litwareinc.com
- B. a browser session to the administrator portal
- C. a PowerShell remoting session to the PEP
- D. a PowerShell session to litwareinc.com
Answer: B
NEW QUESTION 22
You need to identify the PEP information for the integrated system in Chicago. The solution must meet the technical requirements.
What should you use?
- A. the Get-AzsRegistrationTokencmdlet
- B. the Help + support blade of the administrator portal
- C. Properties on the Region management blade of the administrator portal
- D. the HLH configuration file
Answer: C
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-privileged-endpoint?view=azs-2008 Manage Infrastructure Question Set 3
NEW QUESTION 23
You have an Azure Stack Hub integrated system.
You need to create a new offer that can be used only by an operator to provision user subscriptions. The solution must simplify the process for users to create resources.
Which type of offer should you create?
- A. decommissioned
- B. private with a base plan only
- C. public with a base plan only
- D. delegated with a base plan only
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-delegated-provider?view=azs-2008
Topic 1, Northwind Traders
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the button to return to the question.
Overview
A company named Northwind Traders has a main office and a datacenter. All development occurs at the main office.
Existing Environment
Identity Environment
The network contains an Active Directory forest named northwind.com. The forest and an Azure Active Directory (Azure AD) tenant named northwind.onmicrosoft.com are integrated by using Active Directory Federation Service (AD FS).
All Azure subscriptions use the northwind.onmicrosoft.com Azure AD tenant.
Northwind Traders uses an Enterprise Agreement (EA) subscription.
All operators are global administrators in northwind.onmicrosoft.com.
Azure Stack Hub Environment
Northwind Traders has the following five Azure Stack Hub integrated systems:
* One integrated system that connects to an internet-facing network and has the following configurations:
- The region name is int1.
- The operators do not have access to the user subscriptions.
- The integrated system is used for customer and partner applications.
- The partners and customers of NorthWind Traders use guest user accounts to access various user resources.
* Two integrated systems that connect to a private network, are accessed only from inside the company, and have the following configurations:
- The integrated systems are dedicated to research and development.
- One integrated system has a region name of priv1, and the other has a region name of priv2.
- The integrated systems are used for various data rendering, AI workloads, inference, and data visualization.
* Two integrated systems that are dedicated to application development and have the following configurations:
- The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.
- One integrated system has a region name of dev1, and the other has a region name of dev2.
- Both regions are used only by developers at Northwind Traders.
The external domain name of all the integrated systems is northwind.com. All the integrated systems have Azure App Service and the Azure Kubernetes Service (AKS) engine deployed.
The computer of the operator in each region has all the prerequisite software installed for managing Azure Stack Hub.
Current Problems
You identify the following issues in the current environment:
* The priv2 region recently experienced a catastrophic failure.
* The developers report high chargeback costs for the dev1 region.
* The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images.
* The Northwind Traders partners and customers report that use of the guest user accounts is too complex.
* Users in the priv1 region recently deployed NCas_v4 virtual machines for various AI workload. The users discover that the virtual machines do not use GPUs.
Requirements
Planned Changes
Northwind Traders plans to implement the following changes:
* Remove all guest user accounts.
* Change the DNS forwarder of the priv1 region.
* Change the billing model and registration name of the int1 region.
* After the catastrophic failure, restore the priv2 region to its original state.
* Provide each partner with its own dedicated user subscription that will use its own dedicated Azure AD tenant.
Technical Requirements
Northwind Traders identifies the following technical requirements:
* Minimize hardware and software costs.
* Standardize all datacenter workloads on Azure Stack Hub.
* In the priv1 region, implement a disaster recovery plan for App Service.
* Whenever possible, implement solutions by using the minimum amount of administrative effort.
* In the dev2 region, update the AKS Base Ubuntu image to the latest version in Azure Stack Hub Marketplace.
* Whenever possible, implement solutions by using built-in tools, features, and services without acquiring additional third-party tools.
* For the users' virtual machines and the associated resources in the dev1 and dev2 regions, implement a business continuity and disaster recovery plan that includes an automated failback process.
* If changes to the Azure Stack Hub infrastructure cause workload downtime outside of planned maintenance windows, notify all users in the region where the downtime occurred and schedule a maintenance window.
NEW QUESTION 24
You plan to deploy two Azure Stack Hub integrated systems named AZStack1 and AZStack2.
AZStack1 must meet the following requirements:
* Connect to the Internet.
* Have minimal capital expenditures.
* Use the minimum number of on-premises servers for identity.
* Have no existing licenses for Windows virtual machines deployed.
AZStack2 must meet the following requirements:
* Be disconnected from the Internet.
* Use the minimum number of on-premises servers for identity.
* Support the syndication of Azure Stack Hub Marketplace items.
Which identity provider and licensing model should you use for each integrated system? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-connected-deployment?view=azs-2008
NEW QUESTION 25
You need to register the northcentralus region.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-registration?view=azs-2008&tabs=az1%2Caz
NEW QUESTION 26
You need to recommend a business continuity and disaster recovery plan for the dev1 and dev2 regions that meets the technical requirements.
Which two recommendations should you make? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Implement the Infrastructure Backup Service
- B. Implement Azure Site Recovery
- C. Use Infrastructure as Code (IaC) by using Azure Resource Manager templates
- D. Use an Azure Marketplace backup tool in each region to protect the virtual machines that run in the other region
Answer: C,D
NEW QUESTION 27
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.
You have a computer that runs Windows 10. You use the computer to manage the integrated system.
You create a custom marketplace item on the computer.
You need to publish the item to Azure Stack Hub Marketplace.
You create a storage account.
What should you create next?
- A. a container that has a public access level of private
- B. a container that has a public access level of blob
- C. a file share that has the performance tier set to
- D. a file share that has the performance tier set to
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and-publish-marketplace-item?view=az
NEW QUESTION 28
You deploy an Azure Stack Hub integrated system that contains an Azure App Service deployment. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to provide users with the ability to deploy App Service web apps directly from their GitHub repositories.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-configure-deployment-sources?vi
NEW QUESTION 29
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.
You have a computer that runs Windows 10. You use the computer to manage the integrated system.
You create a custom marketplace item on the computer.
You need to publish the item to Azure Stack Hub Marketplace.
You create a storage account.
What should you create next?
- A. a file share that has the performance tier set to Hot
- B. a container that has a public access level of private
- C. a file share that has the performance tier set to Transaction optimized
- D. a container that has a public access level of blob
Answer: D
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-create-and-publish-marketplace-item?
view=azs-2008&tabs=az#publish-a-marketplace-item
NEW QUESTION 30
You have an Azure Stack Hub integrated system.
The retention period for storage accounts is set to 10 days.
In a user subscription, a user deletes a virtual machine that has four 500-GB unmanaged disks attached.
How will the storage be reclaimed?
- A. The deleted storage will be reclaimed automatically in 10 hours.
- B. The deleted storage can be reclaimed immediately by using the administrator portal.
- C. The deleted storage can be reclaimed only after 10 days.
- D. The deleted storage can be reclaimed immediately by using the user portal.
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts?view=azs-2008
NEW QUESTION 31
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to collect diagnostic logs, but do not have access to an SMB share.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From the administrator portal, create an Azure Storage account and a container
2 - Create a shared access signature (SAS)
3 - Connect to the privilleged endpoint(PEP)
4 - Run the Get-AzureStackLog cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
NEW QUESTION 32
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You add licenseType: Windows_Server to the Azure Resource Manager template.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION 33
You have an Azure Stack Hub integrated system that has 10 user subscriptions. Each subscription contains approximately 50 virtual machines.
You are planning a backup and restore strategy for the integrated system.
You need to identify which type of backup to use to back up specific resources.
What should you identify for each resource? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-enable-backup-console?view=azs-2008
NEW QUESTION 34
You remove all the workloads from the int1 region and change the registration model to capacity.
You prepare additional Azure AD tenants for each partner.
You need to configure multitenancy.
Which two actions should you perform for each guest tenant? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Run the Register-AzSWithMyDirectoryTenantcmdlet and specify https:// management.int1. northwind.comas the endpoint.
- B. Run the Register-AzSWithMyDirectoryTenantcmdlet and specify https:// adminmanagement.int1. northwind.comas the endpoint.
- C. Run the Register-AzSGuestDirectoryTenantcmdlet and specify https://
adminmanagement.int1. northwind.comas the endpoint. - D. Change the registration model to pay-as-you-use.
- E. Run the Register-AzSGuestDirectoryTenantcmdlet and specify https://
management.int1. northwind.comas the endpoint.
Answer: A,C
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008 Manage Identity and Access Question Set 2
NEW QUESTION 35
You have an Azure Stack Hub integrated system that uses an Active Directory Federation Services (AD FS) identity provider and capacity-based billing.
You have a plan named Plan1 that has the following quota configurations for Microsoft.Compute:
* Maximum number of Availability Sets: 10
* Maximum number of virtual machines: 50
* Maximum number of virtual machine cores: 100
* Maximum number of virtual machine scale sets: 10
You link two offers named Offer1 and Offer2 to Plan1.
Two user subscriptions named Customer1 and Customer2 are created based on Offer1. A user subscription named Customer3 is created based on Offer2.
Customer1 receives a warning that it provisioned 50 virtual machines.
You need to ensure that Customer1 can provision an additional 25 virtual machines within its existing subscription. The solution must NOT affect the quotas of the other user subscriptions.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Create a new offer named Offer3 based on Plan1 and create a new user subscription for Customer1 by using Offer3
- B. Add NewPlan to the Customer1 user subscription
- C. Add NewPlan as an add-on to Offer1
- D. Create a new plan named NewPlan that has the maximum number of virtual machines quota set to 25
- E. Update the quota for Microsoft.Compute in Plan1 to have the maximum number of virtual machines set to 75
- F. Create a new plan named NewPlan that has the maximum number of virtual machines quota set to 75
Answer: C,D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/service-plan-offer-subscription-overview?view=azs-2008
https://docs.microsoft.com/en-us/azure-stack/operator/create-add-on-plan?view=azs-2008
NEW QUESTION 36
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to install an update to an Azure Stack Hub integrated system.
You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.
Solution: From a privileged endpoint (PEP) session, you run
Test-AzureStack -Group "Default".
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic-test?view=azs-2008
NEW QUESTION 37
Your company is a Cloud Solution Provider (CSP).
You are planning the deployment of a multitenant Azure Stack Hub integrated system that will host internal company workloads and customer workloads.
You need to register the integrated system.
Which type of Azure subscription should you use for the registration?
- A. Azure Partner Shared Services (APSS)
- B. CSP
- C. Pay-As-You-Go (PAYG)
- D. Enterprise Agreement (EA)
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-add-manage-billing-as-a-csp?view=azs-2008
NEW QUESTION 38
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet.
You need to update the Azure Event Hubs service.
Solution: From the Updates blade of the administrator portal, you select the latest update in the infrastructure section.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/resource-provider-apply-updates?view=azs-2008
NEW QUESTION 39
You plan to deploy an Azure Stack Hub integrated system that will connect to the internet.
You are planning the network design. You plan the address space for the public VIP network and the private network.
Which three additional networks are required for the Azure Stack Hub deployment? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. a DNS network
- B. an infrastructure network
- C. a hypervisor network
- D. a switch infrastructure network
- E. a BMC network
- F. a storage network
Answer: B,D,E
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-network?view=azs-2008
NEW QUESTION 40
You have an Azure Stack Hub integrated system that was recently moved to a new datacenter and powered on.
You need to verify whether the infrastructure components are fully operational.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Run the Test-AzureStack cmdlet
- B. Connect to the administrator portal
- C. Connect to the privileged endpoint (PEP)
- D. Run the Start-AzureStack cmdlet
- E. Run the Get-AzureStackStampInformation cmdlet
Answer: A,C,D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-diagnostic-test?view=azs-2008
NEW QUESTION 41
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com as an identity provider.
You need to ensure that users from an Azure AD tenant named fabrikam.onmicrosoft.com can authenticate to the integrated system.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008
NEW QUESTION 42
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You remove the licenseType section from the Azure Resource Manager template.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION 43
......
Concluding Words
The Microsoft AZ-600 is exploring a new skill area and allows Azure specialists to gain expertise in a novel operational arena. Plus, such an exam is professionally designed and testifies a wide range of competencies. However, the test journey would be a little bit tedious as there are not many resources to help you out. One thing so sure - exam-takers can take the help of useful study guides available online. Amazon, for example, can be a good help as there are some dependable self-study resources that will shed light on all the tested domains of the final exam and will make you nail this test in one go.
Understanding useful and specialized parts of Implement Data Center Integration
The accompanying will be examined in MICROSOFT AZ-600 dumps:
- Recommend a name goal system
- Manage foundation declarations for Azure Stack Hub
- Recommend a server farm firewall coordination technique
- Recommend a public and inward IP procedure
- Validate the endorsements
- Recommend a character supplier
- Recommend an enrollment model
- Recommend an endorsement technique
- Manage Azure Stack Hub enrollment
- Register in a disengaged climate
- Configure the Time Server (NTP)
- Register in an associated climate
- Prepare for Azure Stack Hub organization
- Re-register
- Validate character supplier combination
- Run secret turn PowerShell cmdlet for outside authentications
Latest AZ-600 Study Guides 2021 - With Test Engine PDF: https://www.vce4plus.com/Microsoft/AZ-600-valid-vce-dumps.html
Get New AZ-600 Practice Test Questions Answers : https://drive.google.com/open?id=1FcV3ZU_96-l-DG2YcfMQFmweM7QrK1NG