AZ-600 : Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub : Part 01

AZ-600 : Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub : Part 01

1. Case study

   This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.

   To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.

   At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.

   To start the case study
   To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.

   Overview

   Litware Inc. is a renewable energy company. Litware has a business partner named Fabrikam, Ltd. that develops custom software for Litware.

   Litware has a main office in Boston and a research department in Chicago. Each location has a datacenter. Fabrikam has an office in Boston.

   Existing Environment

   Network Environment

   The Litware offices and the Fabrikam office connect by using a private circuit. Each office connects directly to the Internet.

   Identity Environment

   The Litware network contains an Active Directory forest named litwareinc.com. The forest and an Azure Active Directory (Azure AD) tenant named litwareinc.com are integrated by using Active Directory Federation Services (AD FS). Litware has an enterprise certification authority (CA).

   The Azure subscriptions of Litware are associated to the litwareic.com Azure AD tenant.

   Fabrikam also has an Azure AD tenant.

   Azure Stack Hub Environment

   Litware has the following two Azure Stack Hub integrated systems:

   A fully operational integrated system in Boston that connects to the Internet and has the following configurations:
   – Is managed by using an administrator management endpoint of:
   https://adminportal.eastus.litwareinc.com
   – Has an Azure App Service deployment that has two dedicated, large web workers
   – Currently uses version 2005 of Azure Stack Hub and does NOT have any hotfixes installed
   A newly delivered integrated system in Chicago that is disconnected from the Internet and will be managed by using an administrator management endpoint of: https://adminportal.northcentralus.litwareinc.com

   Datacenter Environment

   The Chicago datacenter of Litware contains the infrastructure shown in the following table.

   

   Current Problems

   During heavy usage, requests to App Service in Boston fail despite low utilization of the web workers.

   Requirements

   Planned Changes

   Litware plans to implement the following changes:

   – Deploy an Event Hubs resource provider to the integrated system in Boston.
   – Make Azure Functions available to Azure Stack Hub users in Boston.
   – Prepare the integrated system in Chicago to be production-ready.

   Technical Requirements

   Litware identifies the following technical requirements:

   Implement an infrastructure to support Azure Functions on the integrated system in Boston.
   Provision the certificates required to deploy the Event Hubs resource provider to the integrated system in Boston.
   Configure an identity provider for the integrated system in Chicago.
   Locate the IP address of the privileged endpoint (PEP) of the integrated system in Chicago.
   Ensure that only operators have control over the creation of subscriptions on the integrated system in Chicago.
   Provision a certificate to provide access to the Azure Resource Manager endpoint of the integrated system in Chicago.
   Identify which PowerShell setting on CLIENT1 and CLIENT2 must be modified to register the integrated system in Chicago.
   Implement a management app that will use Azure Resource Manager to inventory the resources of the integrated system in Chicago.

   Security and Compliance Requirements

   Litware has the following security and compliance requirements:

   – All infrastructure software must run the latest version, including hotfixes.
   – Litware must have control over certificate revocations.

   Business Requirements

   Litware wants to ensure that the users at Fabrikam have secure access to the workloads on the integrated system in Boston.

   Updates and Hotfixes

   The current hotfixes and updates available for Azure Stack Hub are:

   – 2005
   – 2005 hotfix 1
   – 2005 hotfix 2
   – 2005 hotfix 3
   – 2008
   – 2008 hotfix 1
   – 2008 hotfix 2
   – 2011 (latest version)

   1. You need to implement the management app. The solution must meet the technical requirements.

      What should you use?

      • a PowerShell session to litwareinc.com
      • a browser session to litwareinc.com
      • a PowerShell remoting session to the PEP
      • a browser session to the administrator portal

   2. HOTSPOT

      You need to identify the procedure for creating the subscriptions on the integrated system in Chicago. The solution must meet the technical requirements.

      What should you include in the solution? To answer, select the appropriate options in the answer area.

      NOTE: Each correct selection is worth one point.

      

      

2. You have an Azure Stack Hub integrated system.

   You plan to install the Event Hubs resource provider.

   You purchase a public wildcard certificate that has a subject name of
   *.eventhub.chicago.contoso.com. The path to the certificate is C:\Certificates\ssl.pfx.

   You need to validate whether the certificate meets the requirements of Azure Event Hubs.

   Which two actions should you perform? Each correct answer presents part of the solution.

   NOTE: Each correct selection is worth one point.

   • Install the AzureStack.Identity PowerShell module
   • Rename the certificate file as Eventhub.pfx
   • Run the Invoke-AzsHubEventHubsCertificateValidation cmdlet
   • Run the Invoke-AzsHubDeploymentCertificateValidation cmdlet
   • Install the Microsoft.AzureStack.ReadinessChecker Powershell module
   • Convert the Ssl.pfx file to a CER file

3. DRAG DROP

   You have an Azure Stack Hub integrated system that is disconnected from the Internet.

   You need to make a new image available in Azure Stack Hub Marketplace in the disconnected environment.

   From a computer that has Internet access, you download all the required tools and install all required PowerShell modules.

   Which four actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   

4. You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.

   You have a computer that runs Windows 10. You use the computer to manage the integrated system.

   You create a custom marketplace item on the computer.

   You need to publish the item to Azure Stack Hub Marketplace.

   You create a storage account.

   What should you create next?

   • a container that has a public access level of private
   • a file share that has the performance tier set to Hot
   • a container that has a public access level of blob
   • a file share that has the performance tier set to Transaction optimized

5. You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Azure Active Directory (Azure AD) identity provider.

   You need to update the Azure App Service resource provider.

   Which two actions should you perform? Each correct answer presents part of the solution.

   NOTE: Each correct selection is worth one point.

   • Download the App Service installer to a computer that can connect to the Azure Stack Hub endpoints
   • Run appservice.exe as a local administrator
   • From the Updates blade of the administrator portal, select the Resource providers section
   • From the Updates blade of the administrator portal, select the infrastructure section
   • From the administrator portal, select the update, download the update, and then install the update

6. You have an Azure Stack Hub integrated system that uses an Active Directory Federation Services (AD FS) identity provider and capacity-based billing.

   You have a plan named Plan1 that has the following quota configurations for Microsoft.Compute:

   – Maximum number of Availability Sets: 10
   – Maximum number of virtual machines: 50
   – Maximum number of virtual machine cores: 100
   – Maximum number of virtual machine scale sets: 10

   You link two offers named Offer1 and Offer2 to Plan1.

   Two user subscriptions named Customer1 and Customer2 are created based on Offer1. A user subscription named Customer3 is created based on Offer2.

   Customer1 receives a warning that it provisioned 50 virtual machines.

   You need to ensure that Customer1 can provision an additional 25 virtual machines within its existing subscription. The solution must NOT affect the quotas of the other user subscriptions.

   Which two actions should you perform? Each correct answer presents part of the solution.

   NOTE: Each correct selection is worth one point.

   • Add NewPlan as an add-on to Offer1
   • Create a new plan named NewPlan that has the maximum number of virtual machines quota set to 75
   • Add NewPlan to the Customer1 user subscription
   • Create a new plan named NewPlan that has the maximum number of virtual machines quota set to 25
   • Update the quota for Microsoft.Compute in Plan1 to have the maximum number of virtual machines set to 75
   • Create a new offer named Offer3 based on Plan1 and create a new user subscription for Customer1 by using Offer3

7. You have an Azure Stack Hub integrated system that connects to the Internet.

   You are migrating several Hyper-V workloads to Azure Stack Hub. Billing for the workloads is consumption-based.

   You need to predict the ongoing Microsoft subscription charges for the workloads.

   You run an Azure Migrate assessment and receive the output shown in the following table.

   

   The values from which three columns affect the ongoing Microsoft subscription charges? Each correct answer presents a complete solution.

   NOTE: Each correct selection is worth one point.

   •  Disk 1 size (In GB)
   • Network throughput (MB per second)
   • Cores
   • Memory (In MB)
   • Disk 1 read ops (operations per second)
   • Disk 1 write ops (operations per second)
   • OS name

8. Your company is a Cloud Solution Provider (CSP) that provides Azure Stack Hub services to multiple customers in a multitenant environment.

   User subscriptions are linked to Azure CSP subscriptions for billing reconciliation.

   You need to view the usage of all the customers for the current day and the last seven days.

   What should you do?

   • Query the Azure Stack Hub usage API
   • Query the Partner Center Usage API
   • From Partner Center, download the daily-rated usage reconciliation CSV
   • From Partner Center, view the usage associated to the Azure Partner Shared Services (APSS) subscription

9. You have an Azure Stack Hub integrated system.

   You need to create a new offer that can be used only by an operator to provision user subscriptions. The solution must simplify the process for users to create resources.

   Which type of offer should you create?

   • public with a base plan only
   • delegated with a base plan only
   • private with a base plan only
   • decommissioned

10. You have an Azure Stack Hub integrated system that connects to the Internet.

    You need to enable multitenant billing.

    What should you do first?

    • Generate a service principal to connect the Azure Billing API to Azure Commerce
    • Run the New-AzResource cmdlet
    • Create a blob storage account named AzSCommerceStaging that stores CSV usage metadata before you send the metadata to Azure Commerce
    • Email the registration subscription ID, resource group name, and registration name to [email protected]

11. You plan to deploy a highly available Azure App Service resource provider to an Azure Stack Hub integrated system.

    You need to ensure that the App Service resource meets the prerequisites. The solution must minimize costs.

    Which two resources should you deploy? Each correct answer presents part of the solution.

    NOTE: Each correct selection is worth one point.

    • a highly available Microsoft SQL Server 2019 instance in the default provider subscription
    • a highly available file server in a dedicated user subscription
    • a highly available file server in the default provider subscription
    • a highly available Microsoft SQL Server 2019 instance in a dedicated user subscription
    • a single file server in the default provider subscription
    • a single Microsoft SQL Server 2019 instance in the default provider subscription

12. HOTSPOT

    You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.

    You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.

    How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.

    NOTE: Each correct selection is worth one point.

    

    

13. DRAG DROP

    You have an Azure Stack Hub integrated system.

    You need to delegate the management of offers to a user named User1.

    Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

    

    

14. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.

    You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.

    You need to ensure that Windows Server is licensed by using the bring-your-own-license model.

    Solution: You add OsType: Windows to the Azure Resource Manager template.

    Does this meet the goal?

    • Yes
    • No

15. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.

    You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.

    You need to ensure that Windows Server is licensed by using the bring-your-own-license model.

    Solution: You add licenseType: Windows_Server to the Azure Resource Manager template.

    Does this meet the goal?

    • Yes
    • No

16. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an Azure Stack Hub integrated system that connects to the Internet. The integrated system uses an Enterprise Agreement (EA) for licensing.

    You are creating an Azure Resource Manager template to generate a marketplace item for a virtual machine that runs Windows Server 2019 Datacenter and a custom application.

    You need to ensure that Windows Server is licensed by using the bring-your-own-license model.

    Solution: You remove the licenseType section from the Azure Resource Manager template.

    Does this meet the goal?

    • Yes
    • No

17. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an Azure Stack Hub integrated system that connects to the Internet.

    You need to update the Azure Event Hubs service.

    Solution: From an internet-connected computer, you run the Update-AzureRmManagementGroup cmdlet.

    Does this meet the goal?

    • Yes
    • No

18. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an Azure Stack Hub integrated system that connects to the Internet.

    You need to update the Azure Event Hubs service.

    Solution: From a privileged endpoint (PEP) session, you run the Install-AzsUpdate cmdlet.

    Does this meet the goal?

    • Yes
    • No

19. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an Azure Stack Hub integrated system that connects to the Internet.

    You need to update the Azure Event Hubs service.

    Solution: From the Updates blade of the administrator portal, you select the latest update in the infrastructure section.

    Does this meet the goal?

    • Yes
    • No

20. HOTSPOT

    You open the Resource providers blade for a user subscription as shown in the following exhibit.

    

    Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

    NOTE: Each correct selection is worth one point.