Microsoftは2023年最新のAZ-600サンプル問題は信頼され続けるAZ-600テストエンジン
無料お試しMicrosoft AZ-600問題集PDFは必ずベストの問題集オプションを使おう
質問 # 40
You have an Azure Slack Hub integrated system.
You receive the following alert: "One or more guest Azure AD tenants must be configured." You need to identify which Azure AD tenants require configuration.
Which PowerShell cmdlet should you run?
- A. Get-AzsAlerts
- B. Get-AzsHealthReport
- C. Get-AzureADTenantDetail
- D. Get-AzsDirectoryTenantidcntifier
正解：B
解説：
.Synopsis
Gets the health report of identity application in the Azure Stack home and guest directories
.DESCRIPTION
Gets the health report for Azure Stack identity applications in the home directory as well as guest directories of Azure Stack. Any directories with an unhealthy status need to have their permissions updated.
.EXAMPLE
$adminResourceManagerEndpoint = "https://adminmanagement.local.azurestack.external"
$homeDirectoryTenantName = "<homeDirectoryTenant>.onmicrosoft.com"
Get-AzsHealthReport -AdminResourceManagerEndpoint $adminResourceManagerEndpoint `
-DirectoryTenantName $homeDirectoryTenantName -Verbose
Reference:
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md
質問 # 41
You have an Azure Stack Hub integrated system.
You need to ensure that you can recover managed and unmanaged disks that are deleted from user subscriptions.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-manage-storage-accounts?view=azs-2008
質問 # 42
You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to collect diagnostic logs, but do not have access to an SMB share.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
1 - From the administrator portal, create an Azure Storage account and a container
2 - Create a shared access signature (SAS)
3 - Connect to the privileged endpoint (PEP)
4 - Run the Get-AzureStackLog cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008
質問 # 43
You have an Azure Stack Hub integrated system that has several Azure Active Directory (Azure AD) tenants onboarded for various departments at your company. Each department uses a specific tag for every resource it creates.
You need to generate a report to help the finance department perform a chargeback to each department.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
1 - Connect to the administrator management endpoint.
2 - Run the Get-AzureSubscriberUsage cmdlet.
3 - Send the output to the finance department for the department to parse based on tags....
Reference:
https://docs.microsoft.com/en-us/azure-stack/mdc/operator/analyze-usage-tzl?tabs=az1
質問 # 44
You have 20 computers that run Linux.
You deploy a disconnected Azure Stack Hub integrated system.
You need to ensure that users on the Linux computers can manage their Azure Stack Hub resources by using Azure Command-Line Interface (CLI).
What should you do first?
- A. Export the root certificate of the integrated system as a CER file.
- B. For each Linux computer, request a certificate from the integrated system.
- C. Export the root certificate of the integrated system as a P7B file.
- D. Request a new certificate for the integrated system.
正解：A
解説：
Explanation
Add certificate
Export and then import Azure Stack Hub certificate for disconnected integrated systems and for the ASDK.
You need the CA root certificate for Azure Stack Hub to use Azure CLI on your development machine.
Export the Azure Stack Hub CA root certificate
Export the CA root certificate. To export the ASDK root certificate in PEM format:
Get the name of your Azure Stack Hub Root Cert:
1. Sign in to the Azure Stack Hub User or Azure Stack Hub Administrator portal.
Select the lock in the browser address bar.
In the pop-up window, select Connection is secure.
In the Certificate window, select the Certification Path tab.
Note down the name of your Azure Stack Hub Root Cert, for example, *.<locale>.<FQDN>
2. Sign in to the VM, open an elevated PowerShell prompt, and then run the following script:
$label = "*.<locale>.<FQDN> from step 1"
Write-Host "Getting certificate from the current user trusted store with subject CN=$label"
$root = Get-ChildItem Cert:\CurrentUser\Root | Where-Object Subject -eq "CN=$label" | select -First 1 if (-not $root)
{
Write-Error "Certificate with subject CN=$label not found"
return
}
Write-Host "Exporting certificate"
Export-Certificate -Type CERT -FilePath root.cer -Cert $root
Write-Host "Converting certificate to PEM format"
certutil -encode root.cer root.pem
Reference:
https://learn.microsoft.com/en-us/azure-stack/asdk/asdk-cli
https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-version-profiles-azurecli2
質問 # 45
You have a connected Azure Stack Hub integrated system that uses Active Directory Federation Services (AD FS) as the identity provider.
You open a PowerShell session and store the GUID of an Azure subscription in a variable named $SubscriptionlD.
You need to validate the AD FS integration.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-registration
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-adfs
質問 # 46
You and a Microsoft Support Engineer are troubleshooting an Azure Stack Hub integrated system.
The security team at your company requires an audit trail whenever management actions are performed on the integrated system.
You unlock the privileged endpoint (PEP) and perform several troubleshooting tasks that resolve the issue.
Which cmdlet should you run next?
- A. Get-AzureStackLog
- B. Exit-PSSession
- C. Invoke-AzureStackOnDemandLog
- D. Close-PrivilegedEndpoint
正解：D
解説：
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-privileged-endpoint?view=azs-2008
質問 # 47
You have an Azure Stack Hub integrated system that contains a user named User1.
User1 creates a new virtual machine named VM01.
You need to grant User1 console access to VM01.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation
Graphical user interface, application Description automatically generated
質問 # 48
You have an Azure Stack Hub integrated system that uses an Azure AD tenant named contoso.com as an identity provider. An Azure Stack Hub operator named Operator1 is a global administrator for the contoso.com Azure AD tenant. Operator1 creates a new user subscription as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point
正解：
解説：
Explanation
質問 # 49
You are troubleshooting the chargeback issues of the dev1 region.
You need to query the usage for each tenant subscription.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Box 1: Administrator management endpoint
Note: The developers report high chargeback costs for the dev1 region.
Two integrated systems that are dedicated to application development and have the following configurations:
The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.
One integrated system has a region name of dev1, and the other has a region name of dev2.
Both regions are used only by developers at Northwind Traders.
The request gets consumption details for the requested subscriptions and for the requested time frame. There is no request body.
This usage API is a provider API, so the caller must be assigned an Owner, Contributor, or Reader role in the provider's subscription.
Method, Request URI
GET
https://{armendpoint}/subscriptions/{subId}/providers/Microsoft.Commerce.Admin/subscriberUsageAggregates Arguments
* armendpoint
Azure Resource Manager endpoint of your Azure Stack Hub environment. The Azure Stack Hub convention is that the name of the Azure Resource Manager endpoint is in the format
https://adminmanagement.{domain-name}. For example, for the Azure Stack Development Kit (ASDK), if the domain name is local.azurestack.external, then the Resource Manager endpoint is
https://adminmanagement.local.azurestack.external.
* subId
Subscription ID of the user who makes the call.
* Etc.
Box 2: Get-AzsSubscriberUsage
Retrieve usage information
PowerShell
To generate the usage data, you should have resources that are running and actively using the system; for example, an active virtual machine (VM), or a storage account containing some data. If you're not sure whether you have any resources running in the Azure Stack Hub Marketplace, deploy a VM, and verify the VM monitoring blade to make sure it's running. Use the following PowerShell cmdlets to view the usage data:
Install PowerShell for Azure Stack Hub.
Configure the Azure Stack Hub user or the Azure Stack Hub operator PowerShell environment.
To retrieve the usage data, call the Get-AzsSubscriberUsage PowerShell cmdlet:
Get-AzsSubscriberUsage -ReportedStartTime "2017-09-06T00:00:00Z"
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-provider-resource-api
Topic 3, Trey Research
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
General overview
Trey Research is a pharmaceutical company that has an office in Boston.
Existing environment
Identity Environment
The on-premises network contains an Active Directory forest named treyresearch.net. The forest contains a user named User1.
The forest syncs to an Azure AD tenant named treyresearch.net by using Azure AD Connect.
Trey Research has an internal certification authority (CA).
Compute Environment
The datacenter in the Boston office contains a computer named CLIENT1 that runs Windows 10. CLIENT1 is an administrative workstation that connects directly to the Azure Stack Hub integrated system.
Planned changes and requirements
Planned changes
Trey Research identifies the following planned changes:
Change the Azure Stack Hub integrated system registration to use an Azure subscription named Subscription3 that has a GUID of 12345678-1234-1234-1234-222222222222.
Configure the integrated system to resolve external names by using a DNS Server that has an IP address of 10.100.100.100.
Implement the App Service resource provider and the Event Hubs resource provider on the integrated system/ Publish a custom cloud-init built image of a Linux virtual machine to Azure Stack Hub Marketplace on the integrated system.
Create a new cloudadmin user named User2.
Assign the delegated provider role to User1.
Azure Stack Hub Requirements
Trey Research identifies the following Azure Stack Hub requirements:
Azure Stack Hub integrated system logs must be forwarded to an external security information and event management (SIEM) system named SIEM1. SIEM1 requires TCP with mutual authentication and TLS 1.2 encryption.
A default Microsoft SQL Server instance will host the database of the App Service resource provider.
The infrastructure of the integrated system must be backed up as frequently as possible.
The integrated system backups must be retained for 28 days.
Business Requirements
Minimize software and licensing costs.
質問 # 50
You have an Azure Stack Hub integrated system that contains a guest Azure AD tenant named fabrikam.com.
You need to unregister fabrikam.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation
Step 1: Connect to the Azure Resource Manager (ARM) endpoint
Compare to the steps in the note below.
Use https://adminmanagement.<region>.<domain>
Azure Resource Manager (administrator)
Adminmanagement.<region>.<fqdn>
Azure Resource Manager (user)
Management.<region>.<fqdn>
Step 2: Run the -Unregister-AzSGuestDirectoryTenant cmdlet.
Unregister a guest directory
If you no longer want to allow sign-ins to Azure Stack Hub services from a guest directory tenant, you can unregister the directory. Again, both the home Azure Stack Hub directory and guest directory need to be configured.
Configure guest directory
Step 3: Instruct the global administrator of fabrikam.com to run the -unregister- AzsWithMyDirectoryTenant cmdlet.
Configure guest directory
Note: Enabling AAD Multi-Tenancy in Azure Stack
Allowing users and service principals from multiple AAD directory tenants to sign in and create resources on Azure Stack. There are two personas involved in implementing this scenario.
1. The Administrator of the Azure Stack installation
2. The Directory Tenant Administrator of the directory that needs to be onboarded to Azure Stack Step 1: Onboard the Guest Directory Tenant to Azure Stack This step will let Azure Resource manager know that it can accept users and service principals from the guest directory tenant.
$adminARMEndpoint = "https://adminmanagement.<region>.<domain>"
$azureStackDirectoryTenant = "<homeDirectoryTenant>.onmicrosoft.com" # this is the primary tenant Azure Stack is registered to
$guestDirectoryTenantToBeOnboarded = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack
$location = "local"
Register-AzsGuestDirectoryTenant -AdminResourceManagerEndpoint $adminARMEndpoint `
-DirectoryTenantName $azureStackDirectoryTenant `
-GuestDirectoryTenantName $guestDirectoryTenantToBeOnboarded `
-ResourceGroupName "system.local" `
-Location $location
With this step, the work of the Azure Stack administrator is done.
Guest Directory Tenant Administrator
Step 2: Registering Azure Stack applications with the Guest Directory
Execute the following cmdlet as the administrator of the directory that needs to be onboarded, replacing
$guestDirectoryTenantName with your directory domain name
$tenantARMEndpoint = "https://management.<region>.<domain>"
$guestDirectoryTenantName = "<guestDirectoryTenant>.onmicrosoft.com" # this is the new tenant that needs to be onboarded to Azure Stack Register-AzsWithMyDirectoryTenant -TenantResourceManagerEndpoint $tenantARMEndpoint `
-DirectoryTenantName $guestDirectoryTenantName
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md
https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
質問 # 51
You need to implement disaster recovery for the priv1 region to meet the technical requirements.
Which main components should you include in the disaster recovery plan?
- A. Option B
- B. Option C
- C. Option A
- D. Option D
正解：A
質問 # 52
You need to configure the Azure Stack Hub infrastructure backups. The solution must meet the Azure Stack Hub requirements.
What should you do in the Azure Stack Hub administrator portal? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Box 1: 4
The infrastructure of the integrated system must be backed up as frequently as possible.
Enable backup for Azure Stack Hub from the administrator portal
The frequency in hours determines how often backups are created. The default value is 12. Scheduler supports a maximum of 12 and a minimum of 4.
Box 2: Azure key vault
The integrated system backups must be retained for 28 days.
Online retention policy. This specifies the time period during which daily, weekly, monthly, and yearly backups are retained in the Azure Site Recovery vault that's associated with the local MABS instance.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-enable-backup-console
https://learn.microsoft.com/en-us/azure/architecture/hybrid/azure-stack-backup
質問 # 53
You have an Azure Stack Hub integrated system that is disconnected from the internet. The integrated system contains an Azure App Service deployment.
You anticipate a major increase in new App Service workloads. The integrated system has the required hardware to handle the increased demand.
You need to ensure that App Service can support the increased workloads.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Enable new identity and access management roles for the user subscription.
- B. Increase the user subscription quotas.
- C. From the administrator portal, increase workers in App Service.
- D. From the user portal, increase workers in App Service.
- E. Add an additional scale unit node.
正解：B、C、E
解説：
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-add-worker-roles?view=azs-2008&tabs=az
質問 # 54
You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider. The integrated system region name is region1, and the external domain name is fabrikam.com.
The integrated system has the following domains enabled for multitenancy:
* fabrikam.onmicrosoft.com
* contoso.onmicrosoft.com
* fabrikam.com
* contoso.com
You need to disable multitenancy for contoso.com.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Graphical user interface, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008
質問 # 55
Which three components are required to configure an Azure Stack Hub infrastructure backup? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. an SMB file share in Azure
- B. an Azure Blob storage account
- C. an encryption certificate
- D. credentials that have write access to storage
- E. an SMB file share in the trusted network perimeter
正解：C、D、E
解説：
Explanation/Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-backup-reference?view=azs-2008
質問 # 56
You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-download-azure-marketplace-item?view=azs-
Topic 2, Litware Office
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the button to return to the question.
Overview
Existing Environment
Network Environment
The Litware offices and the Fabrikam office connect by using a private circuit. Each office connects directly to the Internet.
Identity Environment
The Litware network contains an Active Directory forest named litwareinc.com. The forest and an Azure Active Directory (Azure AD) tenant named litwareinc.com are integrated by using Active Directory Federation Services (AD FS). Litware has an enterprise certification authority (CA).
The Azure subscriptions of Litware are associated to the litwareic.com Azure AD tenant.
Fabrikam also has an Azure AD tenant.
Azure Stack Hub Environment
Litware has the following two Azure Stack Hub integrated systems:
* A fully operational integrated system in Boston that connects to the Internet and has the following configurations:
- Is managed by using an administrator management endpoint of:
https://adminportal.eastus.litwareinc.com
- Has an Azure App Service deployment that has two dedicated, large web workers
- Currently uses version 2005 of Azure Stack Hub
* A newly delivered integrated system in Chicago that is disconnected from the Internet and will be managed by using an administrator management endpoint of:
https://adminportal.northcentralus.litwareinc.com
Datacenter Environment
The Chicago datacenter of Litware contains the infrastructure shown in the following table.
Current Problems
During heavy usage, requests to App Service in Boston fail despite low utilization of the web workers.
Requirements
Planned Changes
Litware plans to implement the following changes:
* Deploy an Event Hubs resource provider to the integrated system in Boston.
* Make Azure Functions available to Azure Stack Hub users in Boston.
* Prepare the integrated system in Chicago to be production-ready.
Technical Requirements
Litware identifies the following technical requirements:
* Implement an infrastructure to support Azure Functions on the integrated system in Boston.
* Provision the certificates required to deploy the Event Hubs resource provider to the integrated system in Boston.
* Configure an identity provider for the integrated system in Chicago.
* Locate the IP address of the privileged endpoint (PEP) of the integrated system in Chicago.
* Ensure that only operators have control over the creation of subscriptions on the integrated system in Chicago.
* Provision a certificate to provide access to the Azure Resource Manager endpoint of the integrated system in Chicago.
* Identify which PowerShell setting on CLIENT1 and CLIENT2 must be modified to register the integrated system in Chicago.
* Implement a management app that will use Azure Resource Manager to inventory the resources of the integrated system in Chicago.
Security and Compliance Requirements
Litware has the following security and compliance requirements:
* All infrastructure software must run the latest version, including hotfixes.
* Litware must have control over certificate revocations.
Business Requirements
Litware wants to ensure that the users at Fabrikam have secure access to the workloads on the integrated system in Boston.
Updates and Hotfixes
The current hotfixes and updates available for Azure Stack Hub are:
* 2005
* 2005 hotfix 1
* 2005 hotfix 2
* 2005 hotfix 3
* 2008
* 2008 hotfix 1
* 2008 hotfix 2
* 2011 (latest version)
質問 # 57
You schedule a planned maintenance window.
You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-updates?view=azs-2008
質問 # 58
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.
You receive an alert that one or more guest Azure Active Directory (Azure AD) tenants requires updates to support new features.
You need to identify which Azure AD tenants you must update.
Which two options can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. the Gec-AzsHealchReporc cmdlet
- B. the Gec-AzsAlercs cmdlet
- C. the Gec-AzsDireccoryTenancidentif ier cmdlet
- D. the App registrations blade of the public Azure portal
- E. the Get-AzureADTenancDecail cmdlet
- F. the User subscriptions blade of the administrator portal in Azure Stack Hub
- G. the Directories blade of the administrator portal in Azure Stack Hub
正解：A、G
解説：
Explanation
E: You can determine whether an update is required for home or guest directories by viewing the directories pane in the admin portal. Each directory listing shows the type of directory. The type can be a home or guest directory, and its status is shown.
F: .Synopsis
Gets the health report of identity application in the Azure Stack home and guest directories DESCRIPTION Gets the health report for Azure Stack identity applications in the home directory as well as guest directories of Azure Stack. Any directories with an unhealthy status need to have their permissions updated.
EXAMPLE
$adminResourceManagerEndpoint = "https://adminmanagement.local.azurestack.external"
$homeDirectoryTenantName = "<homeDirectoryTenant>.onmicrosoft.com"
Get-AzsHealthReport -AdminResourceManagerEndpoint $adminResourceManagerEndpoint `
-DirectoryTenantName $homeDirectoryTenantName -Verbose
Examples.
Example 1: Get details for a tenant
PS C:\>Get-AzureADTenantDetail
ObjectId DisplayName VerifiedDomains
-------- ----------- ---------------
85b5ff1e-0402-400c-9e3c-0f9e965325d1 Coho Vineyard & Winery {class VerifiedDomain {..
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/enable-multitenancy
https://github.com/Azure/AzureStack-Tools/blob/master/Identity/AzureStack.Identity.psm1
質問 # 59
You have an Azure Stack Hub integrated system that is registered to an Azure Active Directory (Azure AD) tenant named contoso.com. The integrated system region name is region1.
You need to retrieve only critical infrastructure alerts from the integrated system by using the REST API.
Which URI query should you use? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure-stack/user/azure-stack-rest-api-use?view=azs-2008
質問 # 60
You have an Azure Slack Hub integrated system and a computer named Computer1 that runs Windows 11.
You need to deploy the Azure Stack Hub PowerShell tools to Computer1. What should you do first?
- A. Download AzureStack-Tools from the GitHub repository.
- B. Connect to the privileged endpoint (PEP).
- C. Download the AzureStack module from PowerShell Gallery.
- D. Copy the AzureStack module from the Hardware Lifecycle Host (HLH).
正解：A
解説：
Explanation
Download Azure Stack Hub tools from GitHub
AzureStack-Tools is a GitHub repository that hosts PowerShell modules for managing and deploying resources to Azure Stack Hub. If you're planning to establish VPN connectivity, you can download these PowerShell modules to the Azure Stack Development Kit (ASDK), or to a Windows-based external client.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-powershell-download
質問 # 61
You plan to deploy a disconnected Azure Stack Hub integrated system that has the following configurations:
* FQDN: contoso.local
* Region name: region1
* Internal domain name: contoso.com
You need to generate a certificate signing request (CSR) for the new deployment. The solution must prevent the common name (CN) value from being included in the certificate subject.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Graphical user interface, text, application, email Description automatically generated
質問 # 62
You have an Azure Stack Hub integrated system.
You need to delegate the management of offers to a user named User1.
Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-delegated-provider?view=azs-2008
質問 # 63
You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Azure Active Directory (Azure AD) identity provider.
You need to update the Azure App Service resource provider.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. From the administrator portal, select the update, download the update, and then install the update
- B. Download the App Service installer to a computer that can connect to the Azure Stack Hub endpoints
- C. Run appservice.exe as a local administrator
- D. From the Updates blade of the administrator portal, select the infrastructure section
- E. From the Updates blade of the administrator portal, select the Resource providers section
正解：B、C
解説：
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-update?view=azs-2008&pivots=s
質問 # 64
......
有効な問題最新版を試そうAZ-600テスト解釈AZ-600有効な試験ガイド：https://jp.fast2test.com/AZ-600-premium-file.html
AZ-600試験資料Microsoft学習ガイド：https://drive.google.com/open?id=194FPCygC9dqITttv0Q1QcdkA76BBZZ2C