NEW QUESTION 1
HOTSPOT
You need to retrieve the system logs and the event logs from only the hosts in an Azure Stack integrated system.
Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-diagnostics

NEW QUESTION 2
You have an Azure Stack integrated system.
You discover that a hardware failure occurred on a node named Node1. You need to power off Node1.
Which cmdlet should you run?

• A. Stop-HpcAzureNode
• B. Disable-AzsScaleUnitNode
• C. Shutdown-HpcNode
• D. Stop-AzsScaleUnitNode

Answer: D

Explanation: References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-node-actions

NEW QUESTION 3
You have an Azure Stack integrated system.
A tenant requires assistance managing a subscription.
The tenant needs to create a custom RBAC role definition. What should you instruct the tenant to do?

• A. Establish a PowerShell session to the Azure Resource Manager (user) endpoint.Run the New-AzureRmPolicySetDefinition cmdlet and the New-AzureRoleTemplate cmdlet.
• B. Establish a PowerShell session to the Azure Resource Manager (user) endpoint.Create a JSON file that contains the permission definition
• C. Run the New-AzureRmRoleDefinition cmdlet.
• D. Establish a PowerShell session to the Azure Resource Manager (administrator) endpoint.Create an XML file that contains the permission definition
• E. Run the New-AzureRmRoleDefinition cmdlet
• F. Establish a PowerShell session to the Azure Resource Manager (administrator) endpoin
• G. Run the New-AzureRmPolicySetDefinition cmdlet and the New-AzureRoletemplate cmdlet.

Answer: B

Explanation: The New-AzureRmRoleDefinition cmdlet creates a custom role in Azure Role-Based Access Control. Provide a role definition as an input to the command as a JSON file or a PSRoleDefinition object. Incorrect Answers:
A: New-AzureRoleTemplate creates web and worker role templates. This has nothing to do with RBAC.
C: The permission definitions should be contained in a JSON file, not an XML file.
D: New-AzureRoleTemplate creates web and worker role templates. This has nothing to do with RBAC.
References:
https://docs.microsoft.com/en-us/powershell/module/azurerm.resources/new- azurermroledefinition?view=azurermps-6.2.0

NEW QUESTION 4
DRAG DROP
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a network that contains an Active Directory forest named fabrikam.com. The forest is synchronized to a Microsoft Azure Active Directory (Azure AD) tenant and has an Azure subscription.
The company also has an Azure AD tenant named contoso.com. Contoso.com has an Azure subscription. Contoso.com includes foreign principals.
The network contains the computers configured as shown in the following table.

Fabrikam.com contains a user named User1.
For operating system deployment, the company uses a custom operating system image of Windows Server 2021 Datacenter named Image1.
You have an Azure Stack integrated system that is accessed by using the following endpoints: https://portal.fabrikam.com
https://adminportal.fabrikam.com https://management.fabrikam.com Privileged endpoint: 192.168.100.100 Hardware lifecycle host: 192.168.101.101 https://adminmanagement.fabrikam.com
You onboard contoso.com as a guest directory tenant on the Azure Stack integrated system. You implement in the following Azure Stack providers:
SQL Server App Service
End of repeated scenario.
You plan to provide tenants with the ability to create highly available databases in Cluster1. You need to add Cluster1 as a SQL hosting server on the Azure Stack integrated system.
What should you do on each server? To answer, drag the appropriate actions to the correct servers. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 5
HOTSPOT
You have an Azure Stack integrated system that uses a namespace of fabrikam.onnncrosoft.com. A company named

Answer:

Explanation: References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-enable-multitenancy

NEW QUESTION 6
DRAG DROP
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a network that contains an Active Directory forest named fabrikam.com. The forest is synchronized to a Microsoft Azure Active Directory (Azure AD) tenant and has an Azure subscription.
The company also has an Azure AD tenant named contoso.com. Contoso.com has an Azure subscription. Contoso.com includes foreign principals.
The network contains the computers configured as shown in the following table.

Fabrikam.com contains a user named User1.
For operating system deployment, the company uses a custom operating system image of Windows Server 2021 Datacenter named Image1.
You have an Azure Stack integrated system that is accessed by using the following endpoints: https://portal.fabrikam.com
https://adminportal.fabrikam.com https://management.fabrikam.com Privileged endpoint: 192.168.100.100 Hardware lifecycle host: 192.168.101.101 https://adminmanagement.fabrikam.com
You onboard contoso.com as a guest directory tenant on the Azure Stack integrated system. You implement in the following Azure Stack providers:
SQL Server App Service
End of repeated scenario.
You need to ensure that tenants can use Image1 to deploy virtual machines.
Which three actions should you perform from https://adminportal.fabrikam.com in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 7
You plan to automate the deployment of Azure Stack resources by using a script. The script will run by using a security principal named ScriptUser1. The script will run daily and will be used to assign users the ability to create resources within newly created resource groups.
You need to assign an RBAC role to ScriptUser1. The solution must minimize administrative privileges.
Which RBAC role should you assign?

• A. subscription Owner
• B. resource group Contributor
• C. subscription Contributor
• D. resource group Owner

Answer: D

NEW QUESTION 8
You have an Azure Stack integrated system.
You deploy a platform as a service (PaaS) service that uses a file server.
You need to ensure that tenant users can use PowerShell Desired State Configuration (DSC) to manage the file server from the Azure Stack portal.
What should you do?

• A. From the Azure Stack administrator portal, add the DSC extension.
• B. From a privileged endpoint, run the Import-DscResource cmdlet.
• C. From a privileged endpoint, run the Start-DscConfiguration cmdlet.
• D. From the Azure Stack user portal, add the DSC extension.

Answer: D

NEW QUESTION 9
You deploy a new Azure Stack integrated system.
You plan to add several Marketplace items from Microsoft Azure to the Azure Stack Marketplace. You need to ensure that you can download the Marketplace items from Azure.
Solution: You run the MarketplaceToolkit.psi script. Does this meet the goal?

• A. YES
• B. NO

Answer: B

NEW QUESTION 10
You have an Azure Stack integrated system that has a SQL Server resource provider. You have an Azure Resource Manager template named Template1.
You need to validate whether Template1 can be deployed to the system. Which cmdlet should you run before you run Test-AzureRMTemplate?

• A. Get-AzureDeployment
• B. Get-AzsResourceProviderManifest
• C. Get-RmsTemplates
• D. Get-AzureRMCloudCapability

Answer: D

Explanation: https://docs.microsoft.com/en-us/azure/azure-stack/user/azure-stack-validate-templates

NEW QUESTION 11
HOTSPOT
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory forest named contoso.com
You deploy an Azure Stack integrated system named Prod to a production environment. You also deploy an Azure Stack integrated system named Dev to a development environment. The developers who access Dev change frequently.
The Azure Stack integrated systems and the contoso.com forest are federated.
The on-premises network contains a Hyper-V host that hosts a Red Hat Enterprise Linux virtual machine named Linux1. Linux1 has the following characteristics:
A 2-TB disk Generation 1
10 virtual cores 128 GB of RAM
A disk named LinuxVhd.vhdx
You plan to deploy infrastructure as a service (IaaS) to Dev for developer projects. The Marketplace on Dev is configured and ready to publish items. Dev contains one plan named Dev_Plan1 and one
offer named Dev_Offer1.
Prod contains two plans and two offers. One of the offers is named Offer1.
All the IaaS and platform as a service (PaaS) tenant data must be backed up to an external location. The solution must ensure that the data can be restored if the datacenter that hosts Prod becomes unavailable.
End of repeated scenario.
You need to add a custom Windows Server 2021 image to the Marketplace on Dev. Which command should you run?

Answer:

Explanation: References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-add-vm-image#add-a- vm-image-to-marketplace-by-using-powershell

NEW QUESTION 12
You manage an Azure Stack integrated system.
You need to identify the IP address of the external time server that was configured during Azure Stack provisioning.
What should you do?

• A. Review the AzureStack.Provider.Metadata.json file
• B. From the privileged endpoint, run Get-AzureStacklog.
• C. From the Azure Resource Manager endpoint, run Get-AzsResourceProviderManifest.
• D. From the privileged endpoint, run Get-AzureStackStampInformation.

Answer: D

NEW QUESTION 13
You have an Azure Stack integrated system. You attempt to deploy a resource group template.
You discover that the template deployment has had a status of Provisioning for the last 12 hours. You need to restart the deployment of the template.
What should you do first?

• A. Run the Set-AzureRmResourceLock cmdlet.
• B. Modify the version of the Azure Stack profile API
• C. Run the Remove-AzureRmResourceGroupDeployment cmdlet.
• D. Run the set-AzureRmResourceGroup cmdlet.

Answer: B

NEW QUESTION 14
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a main office in New York and a branch office in Toronto. Each office has a dedicated connection to the Internet. Each office has a firewall that uses inbound and outbound rules.
The company has an on-premises network that contains several datacenters. The datacenters contain multiple hypervisor deployments, including Window Server 2021 Hyper-V. The network uses Microsoft System Center for monitoring and Windows Azure Pack for self-service.
The company has a Microsoft Azure subscription that contains several workloads. You use Azure Resource Manager templates and other automated processes to create and manage the resources in Azure.
You have an Azure Stack integrated system in the New York office. The company has a deployment team in the Toronto office and a development team in the New York office. The system has an offer named Offer1. Several tenants have subscriptions based on Offer1.
You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 is used for
testing. The hardware on Server1 can support the deployment of the Azure Stack Development Kit. You have a Generation 1 virtual machine named VM1 that runs Windows Server 2012 R2. VM1 is deployed to a Hyper-V host that runs Windows Server 2021. VM1 has a fixed size disk named VM1.vhdx that is 200 GB.
End of repeated scenario.
The development team in the Toronto office fails to access the Azure Stack integrated system. The team successfully accesses the Azure subscriptions. The development team in the New York office successfully accesses the Azure Stack integrated system.
You need to ensure that the Toronto development team can access the system. What should you do?

• A. For the Toronto development team, allow the inbound endpoints of the Azure Stack infrastructure on the New York office firewalls.
• B. Create a site-to-site VPN connection from Azure to the New York office.
• C. For the Toronto development team, allow ports 4443 and 8080 on the New York firewalls.
• D. Configure and enable iDNS.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-connect-vpn https://docs.microsoft.com/en-us/azure/azure-stack/user/azure-stack-solution-hybrid-connectivity

NEW QUESTION 15
You deploy an Azure Stack integrated system.
You plan to provide a user with the ability to customize offers and to sign up users. You need to create a delegated provider. What should you do first?

• A. Assign the Owner role on the Default Provider Subscription.
• B. Assign the Contributor role on the Default Provider Subscription
• C. Create an offer that includes the Key Vault service.
• D. Create a plan that includes the subscriptions service.

Answer: D

Explanation: There are two basic steps to setting up delegation:
Create a delegated provider by subscribing a user to an offer based on a plan that only has the
subscriptions service. Users who subscribe to this offer can then extend offers and sign up users for the offers.
Delegate an offer to the delegated provider. This offer is a template for what the delegated provider can offer. The delegated provider can now take the offer and offer it to other users. https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-delegated-provider

NEW QUESTION 16
You manage an Azure Stack integrated system.
You plan to query the usage data of Azure Stack.
Which three parameters can you use in the query? Each correct answer presents a complete solution.
Note: select: Each correct selection is worth one point.

• A. usageEndtinme
• B. meterId
• C. reporttedStarttime
• D. usageStartime
• E. aggregationGranularity
• F. reportedEndtime

Answer: ACF

NEW QUESTION 17
DRAG DROP
You have an application that runs on Microsoft Azure.
You need to implement the application on an Azure Stack integrated system.
You verify that all the services used by the application are available in Azure Stack.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: