Microsoft AZ-600 Exam Updated Dumps – Wise Choise to Pass AZ-600

1. Topic 1, Litware Office



Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview

Existing Environment

Network Environment

The Litware offices and the Fabrikam office connect by using a private circuit. Each office connects directly to the Internet.



Identity Environment

The Litware network contains an Active Directory forest named litwareinc.com. The forest and an Azure Active Directory (Azure AD) tenant named litwareinc.com are integrated by using Active Directory Federation Services (AD FS). Litware has an enterprise certification authority (CA).

The Azure subscriptions of Litware are associated to the litwareic.com Azure AD tenant.

Fabrikam also has an Azure AD tenant.



Azure Stack Hub Environment

Litware has the following two Azure Stack Hub integrated systems:

✑ A fully operational integrated system in Boston that connects to the Internet and has the following configurations:

- Is managed by using an administrator management endpoint of: https://adminportal.eastus.litwareinc.com

- Has an Azure App Service deployment that has two dedicated, large web workers

- Currently uses version 2005 of Azure Stack Hub

✑ A newly delivered integrated system in Chicago that is disconnected from the Internet and will be managed by using an administrator management endpoint of: https://adminportal.northcentralus.litwareinc.com



Datacenter Environment

The Chicago datacenter of Litware contains the infrastructure shown in the following table.







Current Problems

During heavy usage, requests to App Service in Boston fail despite low utilization of the web workers.



Requirements

Planned Changes

Litware plans to implement the following changes:

✑ Deploy an Event Hubs resource provider to the integrated system in Boston.

✑ Make Azure Functions available to Azure Stack Hub users in Boston.

✑ Prepare the integrated system in Chicago to be production-ready.



Technical Requirements

Litware identifies the following technical requirements:

✑ Implement an infrastructure to support Azure Functions on the integrated system in Boston.

✑ Provision the certificates required to deploy the Event Hubs resource provider to the integrated system in Boston.

✑ Configure an identity provider for the integrated system in Chicago.

✑ Locate the IP address of the privileged endpoint (PEP) of the integrated system in Chicago.

✑ Ensure that only operators have control over the creation of subscriptions on the integrated system in Chicago.

✑ Provision a certificate to provide access to the Azure Resource Manager endpoint of the integrated system in Chicago.

✑ Identify which PowerShell setting on CLIENT1 and CLIENT2 must be modified to register the integrated system in Chicago.

✑ Implement a management app that will use Azure Resource Manager to inventory the resources of the integrated system in Chicago.



Security and Compliance Requirements

Litware has the following security and compliance requirements:

✑ All infrastructure software must run the latest version, including hotfixes.

✑ Litware must have control over certificate revocations.

Business Requirements

Litware wants to ensure that the users at Fabrikam have secure access to the workloads on the integrated system in Boston.



Updates and Hotfixes

The current hotfixes and updates available for Azure Stack Hub are:

✑ 2005

✑ 2005 hotfix 1

✑ 2005 hotfix 2

✑ 2005 hotfix 3

✑ 2008

✑ 2008 hotfix 1

✑ 2008 hotfix 2

✑ 2011 (latest version)



You need to identify the PEP information for the integrated system in Chicago. The solution must meet the technical requirements.

What should you use?

2. HOTSPOT

You need to identify the certificate for the integrated system in Chicago. The solution must meet the technical requirements.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

3. HOTSPOT

You need to implement the App Service infrastructure to address the current issues and support the planned changes for Azure Functions in Boston.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

4. HOTSPOT

You need to identify the authentication and authorization process for the integrated system in Chicago. The solution must meet the technical requirements.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. You need to implement the management app. The solution must meet the technical requirements.

What should you use?

6. HOTSPOT

You need to identify the procedure for creating the subscriptions on the integrated system in Chicago. The solution must meet the technical requirements.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

7. HOTSPOT

You need to register the northcentralus region.

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

8. Topic 2, Northwind Traders



Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview

A company named Northwind Traders has a main office and a datacenter. All development occurs at the main office.



Existing Environment

Identity Environment

The network contains an Active Directory forest named northwind.com. The forest and an Azure Active Directory (Azure AD) tenant named northwind.onmicrosoft.com are integrated by using Active Directory Federation Service (AD FS).

All Azure subscriptions use the northwind.onmicrosoft.com Azure AD tenant.

Northwind Traders uses an Enterprise Agreement (EA) subscription.

All operators are global administrators in northwind.onmicrosoft.com.



Azure Stack Hub Environment

Northwind Traders has the following five Azure Stack Hub integrated systems:

✑ One integrated system that connects to an internet-facing network and has the following configurations:

- The region name is int1.

- The operators do not have access to the user subscriptions.

- The integrated system is used for customer and partner applications.

- The partners and customers of NorthWind Traders use guest user accounts to access various user resources.

✑ Two integrated systems that connect to a private network, are accessed only from inside the company, and have the following configurations:

- The integrated systems are dedicated to research and development.

- One integrated system has a region name of priv1, and the other has a region name of priv2.

- The integrated systems are used for various data rendering, AI workloads, inference, and data visualization.

✑ Two integrated systems that are dedicated to application development and have the following configurations:

- The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.

- One integrated system has a region name of dev1, and the other has a region name of dev2.

- Both regions are used only by developers at Northwind Traders.

The external domain name of all the integrated systems is northwind.com. All the integrated systems have Azure App Service and the Azure Kubernetes Service (AKS) engine deployed.

The computer of the operator in each region has all the prerequisite software installed for managing Azure Stack Hub.



Current Problems

You identify the following issues in the current environment:

✑ The priv2 region recently experienced a catastrophic failure.

✑ The developers report high chargeback costs for the dev1 region.

✑ The int1 region runs a high number of Windows virtual machines that use pay-as-you-use images.

✑ The Northwind Traders partners and customers report that use of the guest user accounts is too complex.

✑ Users in the priv1 region recently deployed NCas_v4 virtual machines for various AI workload. The users discover that the virtual machines do not use GPUs.



Requirements

Planned Changes

Northwind Traders plans to implement the following changes:

✑ Remove all guest user accounts.

✑ Change the DNS forwarder of the priv1 region.

✑ Change the billing model and registration name of the int1 region.

✑ After the catastrophic failure, restore the priv2 region to its original state.

✑ Provide each partner with its own dedicated user subscription that will use its own dedicated Azure AD tenant.



Technical Requirements

Northwind Traders identifies the following technical requirements:

✑ Minimize hardware and software costs.

✑ Standardize all datacenter workloads on Azure Stack Hub.

✑ In the priv1 region, implement a disaster recovery plan for App Service.

✑ Whenever possible, implement solutions by using the minimum amount of administrative effort.

✑ In the dev2 region, update the AKS Base Ubuntu image to the latest version in Azure Stack Hub Marketplace.

✑ Whenever possible, implement solutions by using built-in tools, features, and services without acquiring additional third-party tools.

✑ For the users’ virtual machines and the associated resources in the dev1 and dev2 regions, implement a business continuity and disaster recovery plan that includes an automated failback process.

✑ If changes to the Azure Stack Hub infrastructure cause workload downtime outside of planned maintenance windows, notify all users in the region where the downtime occurred and schedule a maintenance window.



DRAG DROP

You need to change the int1 region to use the capacity model. The solution must meet the

technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

9. The priv2 region is redeployed according to the planned changes.

You need to restore App Service.

Which three components should you restore? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

10. HOTSPOT

You are troubleshooting the chargeback issues of the dev1 region.

You need to query the usage for each tenant subscription.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

11. You need to implement disaster recovery for the priv1 region to meet the technical requirements.

Which main components should you include in the disaster recovery plan?

12. As part of the planned changes for the int1 region, you need to remove all the user subscriptions and the associated resources. The solution must meet the technical requirements.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

13. DRAG DROP

You need to change the int1 region to use the capacity model. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

14. You need to change the DNS forwarder of the priv1 region.

Which two actions should you perform? Each correct answer presents part of the solution?

NOTE: Each correct selection is worth one point.

15. You need to recommend a business continuity and disaster recovery plan for the dev1 and dev2 regions that meets the technical requirements.

Which two recommendations should you make? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

16. You remove all the workloads from the int1 region and change the registration model to capacity.

You prepare additional Azure AD tenants for each partner.

You need to configure multitenancy.

Which two actions should you perform for each guest tenant? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

17. DRAG DROP

You schedule a planned maintenance window.

You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

18. You need to resolve the performance issue reported by the users in the priv1 region.

What should you do?

19. DRAG DROP

You need to create the Linux virtual machine image. The solution must support the planned changes.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

20. HOTSPOT

You need to create a certificate for the Event Hubs resource provider. The solution must support the planned changes.

How should you configure the certificate? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

21. DRAG DROP

You need to update the Azure Stack Hub integrated system registration to support the planned changes.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

22. You need to configure name resolution to support the planned changes.

Which PowerShell cmdlet should you run?

23. You need to support the planned changes for User1.

Which service should you include?

24. HOTSPOT

You need to configure the Azure Stack Hub infrastructure backups. The solution must meet the Azure Stack Hub requirements.

What should you do in the Azure Stack Hub administrator portal? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

25. You need to configure the log forwarding. The solution must meet the Azure Stack Hub requirements.

What should you do?

26. HOTSPOT

You need to create the planned changes and meet the business requirements.

Which subscription should you use to host the SQL Server instance, and what should you configure on the instance? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

27. You need to create User2. The solution must support the planned changes.

What should you use?

28. You provision a new certificate to support the planned changes.

You need to validate the certificate.

Which PowerShell module should you install first?

29. Topic 4, Misc. Questions



You have an Azure Stack Hub integrated system.

You unlock the privileged endpoint (PEP).

How long will the PEP session remain unlocked?

30. You have a connected Azure Stack Hub integrated system.

You deploy an Operator Access Workstation (OAW).

You need to sign in to the OAW.

Which account should you use?

31. You and a Microsoft Support Engineer are troubleshooting an Azure Stack Hub integrated system. The security team at your company requires an audit trail whenever management actions are performed on the integrated system.

You unlock the privileged endpoint (PEP) and perform several troubleshooting tasks that resolve the issue.

Which cmdlet should you run next?

32. DRAG DROP

You have an Azure Stack Hub integrated system linked to an Azure AD tenant named contoso.onmicrosoft.com.

You need to allow users in an Azure AD tenant named adatum.onmicrosoft.com to access Azure Stack Hub resources.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

33. DRAG DROP

You plan to deploy a disconnected Azure Stack Hub integrated system that has the following configurations:

✑ FQDN: contoso.local

✑ Region name: region1

✑ Internal domain name: contoso.com

You need to generate a certificate signing request (CSR) for the new deployment. The solution must prevent the common name (CN) value from being included in the certificate subject.

How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all.

You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

34. HOTSPOT

You open the Resource providers blade for a user subscription as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

35. You plan to deploy a highly available Azure App Service resource provider to an Azure Stack Hub integrated system.

You need to ensure that the App Service resource meets the prerequisites. The solution must minimize costs.

Which two resources should you deploy? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

36. HOTSPOT

You have an Azure Stack Hub integrated system.

You need to update the integrated system to use a non-Windows NTP service that has a host name of ntp1.contoso.com.

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

37. DRAG DROP

You have an Azure Stack Hub integrated system.

You install the Azure Gallery Packager (.azpkg) tool on a management workstation.

You need to define a custom Azure Stack Hub Marketplace item that will provision a virtual machine from a base image.

Which file should you configure for each requirement? To answer, drag the appropriate files to the correct requirements. Each file may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

38. DRAG DROP

You deploy an Azure Stack Hub integrated system that contains an Azure App Service deployment. The integrated system uses an Azure Active Directory (Azure AD) identity provider.

You need to provide users with the ability to deploy App Service web apps directly from their GitHub repositories.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

39. DRAG DROP

You have an Azure Stack Hub integrated system.

The retention period for storage accounts is set to 7 days.

A user reports that a storage account named hr12943 was deleted accidentally two days ago.

You need to restore hr12943.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

40. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Stack Hub integrated system that connects to the Internet.

You need to update the Azure Event Hubs service.

Solution: From the Updates blade of the administrator portal, you select the latest update in the infrastructure section.

Does this meet the goal?

41. You have an Azure Stack Hub integrated system.

The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).

You need to create the list.

Solution: From a privileged endpoint (PEP) session, you run the Get-CloudAdMinUserList cmcHet.

Does this meet the goal?

42. You have an Azure Stack Hub integrated system.

You plan to install the Event Hubs resource provider.

You purchase a public wildcard certificate that has a subject name of

*.eventhub.chicago.contoso.com. The path to the certificate is C:Certificatesssl.pfx.

You need to validate whether the certificate meets the requirements of Azure Event Hubs.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

43. HOTSPOT

You have a Windows Server-based certification authority (CA) and a disconnected Azure Stack Hub integrated system.

You need to issue a certificate that will be used to authenticate a service principal when the service principal accesses Azure Stack Hub resources.

How should you configure the certificate? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

44. You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.

You have a computer that runs Windows 10. You use the computer to manage the integrated system.

You create a custom marketplace item on the computer.

You need to publish the item to Azure Stack Hub Marketplace.

You create a storage account.

What should you create next?

45. You have an Azure Stack Hub integrated system and an offer to which users can subscribe.

You need to prevent users and operators from creating new user subscriptions based on the offer without affecting the existing user subscriptions.

What should you do?

46. You have an Azure Slack Hub integrated system that uses the latest version.

You discover an alert for an external certificate that will expire. You obtain new certificates.

You need to validate that all the components required to change the certificates are in a healthy state, and then renew the certificates.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.