NEW QUESTION 1
You implement an Azure Stack integrated system.
You receive the following service Fabric warning alert: “The infrastructure role FabricResourceProvider is experiencing issues.”
You contact Microsoft support and are instructed to modify the configuration of the Azure Stack integrated system.
You successfully modify the configuration. You need to restart the Azure Stack integrated system. What should you do first?

• A. Connect to the Azure Resource Manager administrative endpoint.
• B. Connect to the privileged endpoint.
• C. From the Azure Stack administrator portal, stop the infrastructure role.
• D. From the Azure Stack administrator portal, restart the infrastructure role.

Answer: D

NEW QUESTION 2
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory forest named contoso.com
You deploy an Azure Stack integrated system named Prod to a production environment. You also deploy an Azure Stack integrated system named Dev to a development environment. The developers who access Dev change frequently.
The Azure Stack integrated systems and the contoso.com forest are federated.
The on-premises network contains a Hyper-V host that hosts a Red Hat Enterprise Linux virtual machine named Linux1. Linux1 has the following characteristics:
A 2-TB disk Generation 1
10 virtual cores 128 GB of RAM
A disk named LinuxVhd.vhdx
You plan to deploy infrastructure as a service (IaaS) to Dev for developer projects. The Marketplace
on Dev is configured and ready to publish items. Dev contains one plan named Dev_Plan1 and one offer named Dev_Offer1.
Prod contains two plans and two offers. One of the offers is named Offer1.
All the IaaS and platform as a service (PaaS) tenant data must be backed up to an external location. The solution must ensure that the data can be restored if the datacenter that hosts Prod becomes unavailable.
End of repeated scenario.
You need to recommend a backup strategy for Prod.
Which two technologies should you include in the recommendation?

• A. AzCopy
• B. a blob snapshot
• C. a virtual machine checkpoint
• D. Microsoft Azure Backup

Answer: AD

Explanation: References:
https://docs.microsoft.com/en-us/azure/backup/backup-mabs-files-applications-azure-stack

NEW QUESTION 3
NOTE: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack integrated system that runs in a connected environment.
You need to recommend an interval for installing Microsoft software update packages to Azure Stack. The solution must ensure that you can receive Microsoft support.
Solution: You recommend that Microsoft software updates be installed every six months. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: For your Azure Stack deployment to remain in support, it must run the most recently released update version or run either of the two preceding update versions.
Microsoft will release update packages for Azure Stack integrated systems on a regular cadence that will typically fall on the fourth Tuesday of every month.
Thus to remain in support you must be running one of the last three update versions and, as an update version is released every month, you need to install updates at least every three months. References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-servicing-policy https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-updates

NEW QUESTION 4
HOTSPOT
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a main office in New York and a branch office in Toronto. Each office has a dedicated connection to the Internet. Each office has a firewall that uses inbound and outbound rules.
The company has an on-premises network that contains several datacenters. The datacenters contain multiple hypervisor deployments, including Window Server 2021 Hyper-V. The network uses Microsoft System Center for monitoring and Windows Azure Pack for self-service.
The company has a Microsoft Azure subscription that contains several workloads. You use Azure Resource Manager templates and other automated processes to create and manage the resources in
Azure.
You have an Azure Stack integrated system in the New York office. The company has a deployment team in the Toronto office and a development team in the New York office. The system has an offer named Offer1. Several tenants have subscriptions based on Offer1.
You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 is used for testing. The hardware on Server1 can support the deployment of the Azure Stack Development Kit. You have a Generation 1 virtual machine named VM1 that runs Windows Server 2012 R2. VM1 is deployed to a Hyper-V host that runs Windows Server 2021. VM1 has a fixed size disk named VM1.vhdx that is 200 GB.
End of repeated scenario.
You need to provide a new user with the ability to generate support session tokens when troubleshooting Azure Stack issues with Microsoft Support.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 5
NOTE: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack integrated system that contains four nodes named Node1, Node2, Node3 and Node4.
You plan to replace Node2.
You need to drain the active workloads that run on Node2.
Solution: You connect to the BMC web interface on Node2 and power off the node. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: The Drain action evacuates all active workloads by distributing them among the remaining nodes in that particular scale unit.
To run the drain action through PowerShell, use the Disable-AzsScaleUnitNode cmdlet. Incorrect Answers:
A: The BMC web interface on Node2 can be used to power off the node. This does not send a shutdown signal to the operating system. For planned power off operations, make sure you drain a scale unit node first.
References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-replace-node

NEW QUESTION 6
HOTSPOT
You need to retrieve the system logs and the event logs from only the hosts in an Azure Stack integrated system.
Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-diagnostics

NEW QUESTION 7
You plan to automate the deployment of Azure Stack resources by using a script. The script will run by using a security principal named ScriptUser1. The script will run daily and will be used to assign users the ability to create resources within newly created resource groups.
You need to assign an RBAC role to ScriptUser1. The solution must minimize administrative privileges.
Which RBAC role should you assign?

• A. subscription Owner
• B. resource group Contributor
• C. subscription Contributor
• D. resource group Owner

Answer: D

NEW QUESTION 8
You manage an Azure Stack integrated system.
You need to identify the IP address of the external time server that was configured during Azure Stack provisioning.
What should you do?

• A. Review the AzureStack.Provider.Metadata.json file
• B. From the privileged endpoint, run Get-AzureStacklog.
• C. From the Azure Resource Manager endpoint, run Get-AzsResourceProviderManifest.
• D. From the privileged endpoint, run Get-AzureStackStampInformation.

Answer: D

NEW QUESTION 9
DRAG DROP
You have an Azure Stack integrated system that uses the external domain name of fabrikam.com. You need to publish an Azure Marketplace Package (.azpkg) file to the Marketplace.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 10
You have an Azure Stack integrated system.
You implement an App Service resource provider. Your network contains a load balancer.
You plan to use the load balancer to load balance SSL traffic to web apps that are provisioned based on the App Services.
You need to configure the IP SSL settings of the App Service resource provider. Which configuration should you use for the internal HTTPS port?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 11
HOTSPOT
You have an Azure Stack integrated system.
You need to install the Azure Stack-compatible Azure PowerShell modules on a management workstation.
You set the $profile variable to the correct API version.
Which commands should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 12
You manage an Azure Stack integrated system that is accessed by using the URLs of https://adminportal.east.azurestackfabrikam.com and https://portal.east.azurestack.fabrikam.com. The fabrikam.com domain contains a Linux server named Server1 that has MySQL installed. You implement a MySQL resource provider on the system.
You need to ensure that tenants can provision MySQL database What should you do next?

• A. From https://portal.east.azurestack.fabrikam.com, download the MySQL connector binary.
• B. From https://adminportal.east.azurestack.fabrikam.com, add a MySQL hosting server.
• C. From https://portal.east.azurestack.fabrikam.com, add a MySQL hosting server.
• D. From https://adminportal.east.azurestack.fabrikam.com, download the MySQL connector binary

Answer: C

Explanation: Hosting servers that are installed on Azure Stack integrated systems must be created from a tenant subscription. They cannot be created from the default provider subscription.
References: https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-mysql-resource-provider-deploy

NEW QUESTION 13
You have an Azure Stack integrated system that uses a Microsoft Azure Active Directory (Azure AD) domain named contoso.com as the identity provider. The system has a tenant subscription that contains several resources.
In contoso.com, you create a new user named User1.
User 1 reports that when signed in to the Azure Stack user portal, no resources are displayed. You need to ensure that User1 can view the resources on the portal.
Solution: On the Default Provider Subscription, you assign a role to User1. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: There are two portals in Azure Stack; the administrator portal and the user portal (sometimes referred to as the tenant portal.)
The Default Provider Subscription is the administrator portal. The user needs to be assigned a role in the tenant (user) subscription, not the Default Provider (admin) subscription.
References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-manage-portals

NEW QUESTION 14
HOTSPOT
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a network that contains an Active Directory forest named fabrikam.com. The forest is synchronized to a Microsoft Azure Active Directory (Azure AD) tenant and has an Azure subscription.
The company also has an Azure AD tenant named contoso.com. Contoso.com has an Azure subscription. Contoso.com includes foreign principals.
The network contains the computers configured as shown in the following table.

Fabrikam.com contains a user named User1.
For operating system deployment, the company uses a custom operating system image of Windows Server 2021 Datacenter named Image1.
You have an Azure Stack integrated system that is accessed by using the following endpoints: https://portal.fabrikam.com
https://adminportal.fabrikam.com https://management.fabrikam.com Privileged endpoint: 192.168.100.100 Hardware lifecycle host: 192.168.101.101 https://adminmanagement.fabrikam.com
You onboard contoso.com as a guest directory tenant on the Azure Stack integrated system. You implement in the following Azure Stack providers:
SQL Server App Service
End of repeated scenario.
You need to configure the App Service resource provider to offer the Small worker tier to tenants. What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 15
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your company has a main office in New York and a branch office in Toronto. Each office has a dedicated connection to the Internet. Each office has a firewall that uses inbound and outbound rules.
The company has an on-premises network that contains several datacenters. The datacenters contain multiple hypervisor deployments, including Window Server 2021 Hyper-V. The network uses Microsoft System Center for monitoring and Windows Azure Pack for self-service.
The company has a Microsoft Azure subscription that contains several workloads. You use Azure Resource Manager templates and other automated processes to create and manage the resources in Azure.
You have an Azure Stack integrated system in the New York office. The company has a deployment team in the Toronto office and a development team in the New York office. The system has an offer named Offer1. Several tenants have subscriptions based on Offer1.
You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 is used for
testing. The hardware on Server1 can support the deployment of the Azure Stack Development Kit. You have a Generation 1 virtual machine named VM1 that runs Windows Server 2012 R2. VM1 is deployed to a Hyper-V host that runs Windows Server 2021. VM1 has a fixed size disk named VM1.vhdx that is 200 GB.
End of repeated scenario.
The development team in the Toronto office fails to access the Azure Stack integrated system. The team successfully accesses the Azure subscriptions. The development team in the New York office successfully accesses the Azure Stack integrated system.
You need to ensure that the Toronto development team can access the system. What should you do?

• A. For the Toronto development team, allow the inbound endpoints of the Azure Stack infrastructure on the New York office firewalls.
• B. Create a site-to-site VPN connection from Azure to the New York office.
• C. For the Toronto development team, allow ports 4443 and 8080 on the New York firewalls.
• D. Configure and enable iDNS.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-connect-vpn https://docs.microsoft.com/en-us/azure/azure-stack/user/azure-stack-solution-hybrid-connectivity

NEW QUESTION 16
You deploy an Azure Stack integrated system that uses an external domain name of west.fabrikam.com
Currently, tenant users access the system internally.
You need to create a SSL certificate for the publication of externally accessible endpoints. The solution must ensure that tenant users can upload VHD files to Azure Stack remotely.
Which two names should you include in the certificate? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. adminmanagement.west.fabrikam.com
• B. *.west.fabrikam.com
• C. *.blob.west.fabrikam.com
• D. adminportal.west.fabrikam.com
• E. *.trafficmanager.west.fabrikam.com

Answer: BC

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-pki-certs