NEW QUESTION 1
Your network contains an Active Directory forest named adatum.com.
You deploy an Azure Stack integrated system.
You implement federation between adatum.com and Azure Slack.
You need to ensure that a user named admin01@adatum.com can manage all aspects of Azure Stack from administrator portal.
Which cmdlet should you run?

• A. New-CloudAdminUser
• B. Set-ServiceAdminOwner
• C. Set-AzsUserSubscription
• D. Set-CloudAdminPassword

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-integrate-identity

NEW QUESTION 2
NOTE: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack integrated system that contains four nodes named Node1, Node2, Node3 and Node4.
You plan to replace Node2.
You need to drain the active workloads that run on Node2.
Solution: From the hardware lifecycle host, you run the Stop-AzsScaleUnitNode cmdlet. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: The Drain action evacuates all active workloads by distributing them among the remaining nodes in that particular scale unit.
To run the drain action through PowerShell, use the Disable-AzsScaleUnitNode cmdlet. Incorrect Answers:
A: The Stop-AzsScaleUnitNode cmdlet turns off the node. It’s the same as if you press the power button. It does not send a shutdown signal to the operating system. For planned power off operations, make sure you drain a scale unit node first.
References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-replace-node

NEW QUESTION 3
NOTE: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack integrated system that runs in a connected environment.
You need to recommend an interval for installing Microsoft software update packages to Azure Stack. The solution must ensure that you can receive Microsoft support.
Solution: You recommend that Microsoft software updates be installed every 12 months. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: For your Azure Stack deployment to remain in support, it must run the most recently released update version or run either of the two preceding update versions.
Microsoft will release update packages for Azure Stack integrated systems on a regular cadence that will typically fall on the fourth Tuesday of every month.
Thus to remain in support you must be running one of the last three update versions and, as an update version is released every month, you need to install updates at least every three months. References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-servicing-policy https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-updates

NEW QUESTION 4
You have an Azure Stack integrated system.
What are three possible types of records that you can create in Azure Stack DNS? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. NSEC
• B. PTR
• C. SRV
• D. MX
• E. AAA

Answer: BCD

Explanation: https://docs.microsoft.com/en-us/azure/dns/dns-zones-records https://docs.microsoft.com/en-us/azure/azure-stack/user/azure-stack-dns

NEW QUESTION 5
You have an Azure Stack integrated system.
You receive a storage alert that a tenant share is at 80 percent capacity. There are multiple container in the tenant share.
You verify that there are no delete storage accounts.
You need to increase the amount of space available on the tenant share. Which cmdlet Should run?

• A. start-AzsStorageContainerMigration
• B. Set-AzsStorageQuota
• C. Remove-AzsStorageQuota D.Start-AzsReclaimStoragecapacity

Answer: B

NEW QUESTION 6
You have an Azure Stack integrated system that has a file server running on a virtual machine used by the App Service resource provider. You need to increase the amount of memory on the file server. Which command should you run?

• A. az vm resize
• B. az apservice plan update
• C. az vm update
• D. az apservice plan create

Answer: A

NEW QUESTION 7
DRAG DROP
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a network that contains an Active Directory forest named fabrikam.com. The forest is synchronized to a Microsoft Azure Active Directory (Azure AD) tenant and has an Azure subscription.
The company also has an Azure AD tenant named contoso.com. Contoso.com has an Azure subscription. Contoso.com includes foreign principals.
The network contains the computers configured as shown in the following table.

Fabrikam.com contains a user named User1.
For operating system deployment, the company uses a custom operating system image of Windows Server 2021 Datacenter named Image1.
You have an Azure Stack integrated system that is accessed by using the following endpoints: https://portal.fabrikam.com
https://adminportal.fabrikam.com https://management.fabrikam.com Privileged endpoint: 192.168.100.100 Hardware lifecycle host: 192.168.101.101 https://adminmanagement.fabrikam.com
You onboard contoso.com as a guest directory tenant on the Azure Stack integrated system. You implement in the following Azure Stack providers:
SQL Server App Service
End of repeated scenario.
You need to ensure that tenants can use Image1 to deploy virtual machines.
Which three actions should you perform from https://adminportal.fabrikam.com in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 8
You deploy a new Azure Stack integrated system.
You plan to add several Marketplace items from Microsoft Azure to the Azure Stack Marketplace. You need to ensure that you can download the Marketplace items from Azure.
Solution: You register Azure Stack with Azure. Does this meet the goal?

• A. YES
• B. NO

Answer: A

Explanation: https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/azure-stack/azure-stack-download-azure-marketplace-item.md

NEW QUESTION 9
You have an Azure Stack integrated system in the perimeter network.
You need to ensure that users in the Internet can access Azure Stack Storage blobs. Which TCP ports should you open on the firewall?

• A. 20 and 21
• B. 137 only
• C. 80 and 443
• D. 445 and 5445

Answer: C

Explanation: Storage Blob requires port 80 for http and port 443 for https.
References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-integrate-endpoints

NEW QUESTION 10
HOTSPOT
You have an Azure Stack integrated system that uses a namespace of fabrikam.onnncrosoft.com. A company named

Answer:

Explanation: References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-enable-multitenancy

NEW QUESTION 11
NOTE: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack integrated system that contains four nodes named Node1, Node2, Node3 and Node4.
You plan to replace Node2.
You need to drain the active workloads that run on Node2.
Solution: From the hardware lifecycle host, you run the Disable-AzsScaleUnitNode cmdlet. Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: The Drain action evacuates all active workloads by distributing them among the remaining nodes in that particular scale unit.
To run the drain action through PowerShell, use the Disable-AzsScaleUnitNode cmdlet. References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-replace-node

NEW QUESTION 12
You have an Azure Stack integrated system that has several tenants. You back up the tenant data.
You need to provide a backup solution for the Azure Stack infrastructure. What should you do first?

• A. From Microsoft Azure Backup, create a backup.
• B. On a file server, create an SMB share.
• C. Replicate the virtual machines in the infrastructure by using Microsoft Azure Site recovery.
• D. From Microsoft System Center Data Protection Manager, create a backup job.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-backup-infrastructure-backup#verify-requirements-for-the-infrastructure-backup-service

NEW QUESTION 13
You have an Azure Stack integrated system that uses a Microsoft Azure Active Directory (Azure AD) domain named contoso.com as the identity provider. The system has a tenant subscription that contains several resources.
In contoso.com, you create a new user named User1.
User 1 reports that when signed in to the Azure Stack user portal, no resources are displayed. You need to ensure that User1 can view the resources on the portal.
Solution: On the tenant Subscription, you assign the Reader role to User1. Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: A user needs at least the reader role to be able to view resources in a tenant subscription.

NEW QUESTION 14
Note: This question is part of a series of questions that use the same scenario. For your convenience,
the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory forest named contoso.com
You deploy an Azure Stack integrated system named Prod to a production environment. You also deploy an Azure Stack integrated system named Dev to a development environment. The developers who access Dev change frequently.
The Azure Stack integrated systems and the contoso.com forest are federated.
The on-premises network contains a Hyper-V host that hosts a Red Hat Enterprise Linux virtual machine named Linux1. Linux1 has the following characteristics:
A 2-TB disk Generation 1
10 virtual cores 128 GB of RAM
A disk named LinuxVhd.vhdx
You plan to deploy infrastructure as a service (IaaS) to Dev for developer projects. The Marketplace on Dev is configured and ready to publish items. Dev contains one plan named Dev_Plan1 and one offer named Dev_Offer1.
Prod contains two plans and two offers. One of the offers is named Offer1.
All the IaaS and platform as a service (PaaS) tenant data must be backed up to an external location. The solution must ensure that the data can be restored if the datacenter that hosts Prod becomes unavailable.
End of repeated scenario.
You discovered that the developers of Dev have been testing the application on prod. You need to remove all the resource on prod consumed by Dev developers.
Which cmdlet should you run?

• A. Remove-AzstenantSubscription
• B. remove-AzsSubscription
• C. Remove-AzsLocation D.Remove-Azsoffer

Answer: A

NEW QUESTION 15
You have an Azure Stack integrated system that uses a Microsoft Azure Active Directory (Azure AD) domain named contoso.com as the identity provider. The system has a tenant subscription that contains several resources.
In contoso.com, you create a new user named User1.
User 1 reports that when signed in to the Azure Stack user portal, no resources are displayed. You need to ensure that User1 can view the resources on the portal.
Solution: On the Default Provider Subscription, you add User1 to an Azure AD group and assign a role to the group.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 16
HOTSPOT
Your company has a DNS domain named contoso.com.
You have a new Azure Stack integrated system that has the following deployment details: Region: West
Naming prefix: as1
Internal domain name: azurestack.local External domain name: cloud.contoso.com
You need to create a DNS delegation for the system.
How should you configure the delegation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-integrate-dns#