LATEST NOTICE: Exam AZ-600: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub (Retired July 31, 2023, at 11:59 PM CST)!
There is no relevant news to indicate that there is any replacement product!
So, if you and your friends are preparing for the AZ-600 exam, get ready before the deadline! Also recommend using the latest exam materials provided by Lead4Pass: AZ-600 dumps: https://www.leads4pass.com/az-600.html (167 Q&A).
Lead4Pass az-600 dumps are really effective exam materials edited and corrected by a team of Microsoft experts! They are very rigorous in organizing, editing, correcting and actually verifying each process, ensuring that you can pass the exam 100% successfully!
And provide your most used AZ-600 dumps PDF and AZ-600 dumps VCE: https://www.leads4pass.com/az-600.html to help you learn easily.
More importantly, some free AZ-600 dumps test questions are shared online for free
| From | Number of exam questions | Associated certification | Online Download | Last updated |
| Lead4Pass | 14 | Role-based | AZ-600 PDF | AZ-600 exam questions |
NEW QUESTION 1:
You plan to deploy an Azure Stack Hub integrated system that will connect to the Internet.
You need to define the public VIP pool.
What is the smallest subnet mask that you can use for the public VIP pool?
A. /22
B. /25
C. /26
D. /27
Correct Answer: C
Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-network?view=azs-2008
NEW QUESTION 2:
You have a disconnected Azure Stack Hub integrated system.
You plan to implement an app named App1.
You need to create a new service principal for App1. The solution must maximize security.
What should you do first?
A. Create an app registration in Azure AD.
B. Create a group-managed service account (gMSA)
C. Generate an Azure Key Vault secret.
D. Generate an X.509 certificate.
Correct Answer: D
You start by creating a new app registration in your directory, which creates an associated service principal object to represent the app\’s identity within the directory.
Your choice of either Azure AD or AD FS is determined by the mode in which you deploy Azure Stack Hub:
When you deploy it in a connected mode, you can use either Azure AD or AD FS. When you deploy it in a disconnected mode, without a connection to the internet, only AD FS is supported.
Manage an AD FS app
If you deployed Azure Stack Hub with AD FS as your identity management service, you must use PowerShell to manage your app\’s identity. The following examples demonstrate both an X509 certificate and a client secret credential.
Once you have a certificate, use a PowerShell script to register your app and sign in using the app\’s identity.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/give-app-access-to-resources
NEW QUESTION 3:
You plan to deploy a highly available Azure App Service resource provider to an Azure Stack Hub integrated system.
You need to ensure that the App Service resource meets the prerequisites. The solution must minimize costs.
Which two resources should you deploy? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. a highly available Microsoft SQL Server 2019 instance in the default provider subscription
B. a highly available file server in a dedicated user subscription
C. a highly available file server in the default provider subscription
D. a highly available Microsoft SQL Server 2019 instance in a dedicated user subscription
E. a single file server in the default provider subscription
F. a single Microsoft SQL Server 2019 instance in the default provider subscription
Correct Answer: AC
NEW QUESTION 4:
You need to create the Linux virtual machine image. The solution must support the planned changes.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Step 1: Create a config. file and save the file as a Sloud-init.txt file.
Publish a custom cloud-init-built image of a Linux virtual machine to Azure Stack Hub Marketplace on the integrated system.
Add Linux images to the Azure Stack Hub Marketplace
1: Create a cloud-init.txt file with your cloud-config
Step 2: Upload the file to the Azure Stack Hub storage account.
2: Reference cloud-init.txt during the Linux VM deployment
Upload the file to an Azure storage account, Azure Stack Hub storage account, or GitHub repository reachable by your Azure Stack Hub Linux VM.
Step 3: Provision on Azure Stack Hub virtual machine by using the Az PowerShell model.
You can create an Ubuntu Server 16.04 LTS virtual machine (VM) by using Azure Stack Hub PowerShell.
Make sure to reference the cloud-init.txt as a part of the -CustomData flag:
$VirtualMachine =Set-AzVMOperatingSystem -VM $VirtualMachine -Linux
-ComputerName “MainComputer” `
-Credential $cred -CustomData “#include
https://cloudinitstrg.blob.core.windows.net/strg/cloud-init.txt”
NEW QUESTION 5:
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You remove the licensee section from the Azure Resource Manager template.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
NEW QUESTION 6:
You have an Azure Stack Hub integrated system.
You need to give a new operator access to the privileged endpoint (PEP) as soon as possible.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Run the New-CloudAdminUser cmdlet.
B. Run the New-AzureADUser cmdlet.
C. Connect to the PEP.
D. Connect to and unlock the PEP.
E. Connect to the administrator management endpoint.
Correct Answer: AC
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-privileged- endpoint?view=azs-2008
NEW QUESTION 7:
DRAG DROP
You have an Azure Stack Hub integrated system that is registered to an Azure Active Directory (Azure AD) tenant named contoso.com. The integrated system region name is region1.
You need to retrieve only critical infrastructure alerts from the integrated system by using the REST API.
Which URI query should you use? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure-stack/user/azure-stack-rest-api-use?view=azs-2008
NEW QUESTION 8:
You have a connected Azure Stack Hub integrated system.
You need to offer users the Azure Kubernetes Service (AKS) engine for production workloads. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Add an AKS base image to Azure Stack Hub Marketplace.
B. Add a Docker extension to Azure Stack Hub Marketplace.
C. From the Azure Active Directory admin center, create a service principal.
D. Add an Ubuntu Server image to Azure Stack Hub Marketplace.
E. Add a custom script extension to Azure Stack Hub Marketplace.
F. From the Azure Active Directory admin center, create a user-assigned managed identity.
Correct Answer: CD
NEW QUESTION 9:
You need to support the planned changes for User1. Which service should you include?
A. Microsoft.Subscriptions
B. Microsoft.KeyVault
C. Microsoft.Storage
D. Microsoft. Compute
Correct Answer: A
Assign the delegated provider role to User1.
Delegation steps
There are two steps to setting up delegation:
1.
Create a delegated provider subscription: Subscribe a user to an offer containing only the subscription service. Users who subscribe to this offer can then extend the delegated offers to other users by signing them up for those offers.
2.
Delegate an offer to the delegated provider: This offer enables the delegated provider to create subscriptions or extend the offer to their users. The delegated provider can now take the offer and extend it to other users.
Note:
Move subscriptions between delegated providers
If needed, a subscription can be moved between new or existing delegated provider subscriptions that belong to the same directory tenant. You can move them using the PowerShell cmdlet Move-AzsSubscription.
Moving subscriptions is useful when:
*
You onboard a new team member that will take on the delegated provider role and you want to assign to this team member user subscriptions that were previously created in the default provider subscription.
*
You have multiple delegated provider subscriptions in the same directory tenant (Azure AD) and need to move user subscriptions between them. This scenario could occur when a team member moves between teams and their subscription must be allocated to the new team.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-delegated-provider
NEW QUESTION 10:
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You add licenseType: Windows_Server to the Azure Resource Manager template.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
NEW QUESTION 11:
DRAG DROP
You have an Azure Stack Hub integrated system.
You need to delegate the management of offers to a user named User1.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-delegated-provider?view=azs-2008
NEW QUESTION 12:
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.
You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.
You need to ensure that Windows Server is licensed by using the bring-your-own-license model.
Solution: You add OsType: Windows to the Azure Resource Manager template.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
NEW QUESTION 13:
You have an Azure Slack Hub integrated system that uses the latest version.
You discover an alert for an external certificate that will expire. You obtain new certificates.
You need to validate that all the components required to change the certificates are in a healthy state, and then renew the certificates.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Run the Start -Sec ret Rot at Ion and specify the PfxFilePath parameter.
B. Copy the certificates to Azure Blob storage.
C. Copy the certificates to an SMB file share that is accessible from the privileged endpoint (PEP).
D. Run the Test-AzureStack cmdlet and Specify the -Group UpdateReadiness parameter.
E. Run the Test-AzureStaek cmdlet and Specify the -Group SecretRotationReadiness parameter.
F. Run the Start-SecretRotation cmdlet and Specify the Internal parameter.
Correct Answer: CEF
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-rotate-secrets
…
Tips after successful AZ-600 certification (*):
- The AZ-600 exam is one of Microsoft’s role-based certifications that are valid for one (1) year from the date you complete all requirements to earn that certification.
- Renewal, after the certification expires, is free just make sure you pass the online assessment before the certification expires.
- Take the renewal assessment through Microsoft Learn at any time within the six-month eligibility window. Once approved, your certification will be extended for one year from the expiration date.
- Assessments focus on recent technology and industry updates, so they are shorter than the original exams and are open-book. You can take the assessment as many times as you want, as long as you pass before the certification expires.
- Lead4Pass az-600 dumps come with free updates for one year
Summarize:
The AZ-600 exam is one of the most popular exams for Microsoft role-based certification, and passing it will help you earn even more!
Lead4Pass az-600 dumps are really effective exam materials, exam questions, and answers are updated throughout the year, convenient for you who are busy and want to improve! Help you pass the exam 100%.
Download AZ-600 dumps with PDF and VCE: https://www.leads4pass.com/az-600.html, which can help you save more study time and really get easy!
