AZ-600 Online Practice Questions and Answers

Correct Answer: C

Synopsis Gets the health report of identity application in the Azure Stack home and guest directories DESCRIPTION Gets the health report for Azure Stack identity applications in the home directory as well as guest directories of Azure Stack. Any directories with an unhealthy status need to have their permissions updated. EXAMPLE $adminResourceManagerEndpoint = "https://adminmanagement.local.azurestack.external" $homeDirectoryTenantName = ".onmicrosoft.com" Get-AzsHealthReport -AdminResourceManagerEndpoint $adminResourceManagerEndpoint ` -DirectoryTenantName $homeDirectoryTenantName -Verbose Reference: https://github.com/Azure/AzureStackTools/blob/master/Identity/AzureStack.Identity.psm1

https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md

Correct Answer: B

User Access Administrator Lets you manage user access to Azure resources. */read Read resources of all types, except secrets. Microsoft.Authorization/* Manage authorization Microsoft.Support/* Create and update a support ticket

Reference:

https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Correct Answer: ABD

Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role- powershell

Correct Answer: D

Integrate Azure Stack Hub with monitoring solutions using syslog forwarding The syslog channel exposes audits, alerts, and security logs from all the components of the Azure Stack Hub infrastructure. Use syslog forwarding to integrate with security monitoring solutions and to retrieve all audits, alerts, and security logs to store them for retention. Cmdlets to configure syslog forwarding Configuring syslog forwarding requires access to the privileged endpoint (PEP). Two PowerShell cmdlets have been added to the PEP to configure the syslog forwarding: ### cmdlet to pass the syslog server information to the client and to configure the transport protocol, the encryption and the authentication between the client and the server Set-SyslogServer [-ServerName ] [-ServerPort ] [-NoEncryption] [-SkipCertificateCheck] [-SkipCNCheck] [-UseUDP] [-Remove]### cmdlet to configure the certificate for the syslog client to authenticate with the server Set-SyslogClient [-pfxBinary ] [-CertPassword ]

Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security

Correct Answer:

Box 1: https://management.contoso.com

Do not include the region1 in the URI.

Use management not adminmanagentment (see below).

Note: Tenant resource usage API reference

A tenant can use the tenant APIs to view the tenant's own resource usage data. These APIs are consistent with the Azure usage APIs.

You can use the Windows PowerShell cmdlet Get-UsageAggregates to get usage data, just like in Azure.

API call

Request

The request gets consumption details for the requested subscriptions and for the requested time frame. There is no request body.

Method Request URI

GET

https://{armendpoint}/subscriptions/{subId}/providers/Microsoft.Commerce/usageAggregate s?reportedStartTime={reportedStartTime}andreportedEndTime={reportedEndTime}andaggregat ionGranularity={granularity}andapi-version=2015-06-01previewandcontinuationToken={token- value}

Parameters

* Armendpoint Azure Resource Manager endpoint of your Azure Stack Hub environment. The Azure Stack Hub convention is that the name of Azure Resource Manager endpoint is in the format https://management.{domain-name}. For example, for the development kit, the domain name is local.azurestack.external, then the Resource Manager endpoint is https://management.local.azurestack.external.

Box 2: 22f2d01-...

Use the tenant subscription identifier.

Parameters continued

* subId

Subscription ID of the user who is making the call. You can use this API only to query for a single subscription's usage. Providers can use the provider resource usage API to query usage for all tenants.

Correct Answer:

Correct Answer:

Box 1: $false

Get-AzsRegistrationToken generates a registration token from the input parameters.

Parameter: UsageReportingEnabled True/False

Azure Stack Hub reports usage metrics by default. Operators with capacity uses or supporting a disconnected environment need to turn off usage reporting. Allowed values for this parameter are: True, False.

Box 2: Capacity

BillingModel String

The billing model that your subscription uses. Allowed values for this parameter are:

Capacity, PayAsYouUse, and Development.

With a disconnected deployment, you're limited to an Active Directory Federation Services (AD FS) identity store and the capacity-based billing model.

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-get-azurestacklog?view=azs-2008

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure-stack/user/azure-stack-rest-api-use?view=azs-2008

Correct Answer:

Step 1: Create a config.file and save the file as Sloud-init.txt file.

Publish a custom cloud-init built image of a Linux virtual machine to Azure Stack Hub Marketplace on the integrated system.

Add Linux images to the Azure Stack Hub Marketplace

1: Create a cloud-init.txt file with your cloud-config

Step 2: Upload the file to Azure Stack Hub storage account.

2: Reference cloud-init.txt during the Linux VM deployment

Upload the file to an Azure storage account, Azure Stack Hub storage account, or GitHub repository reachable by your Azure Stack Hub Linux VM.

Step 3: Provision on Azure Stack Hub virtual machine by using Az PowerShell moduel.

You can create an Ubuntu Server 16.04 LTS virtual machine (VM) by using Azure Stack Hub PowerShell.

Make sure to reference the cloud-init.txt as a part of the -CustomData flag:

$VirtualMachine =Set-AzVMOperatingSystem -VM $VirtualMachine `

-Linux `

-ComputerName "MainComputer" `

-Credential $cred -CustomData "#include

https://cloudinitstrg.blob.core.windows.net/strg/cloud-init.txt"