Microsoft Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub - AZ-600무료 덤프문제 풀어보기

Explanation
Graphical user interface, text, application, chat or text message Description automatically generated

Box 1: The Default Provider Subscription
A default Microsoft SQL Server instance will host the database of the App Service resource provider.
In Azure Stack Hub Subscriptions, select the Default Provider Subscription. Azure App Service on Azure Stack Hub must be deployed in the Default Provider Subscription.
Box 2:
Enter the SQL Server details for the server instance used to host the App Service resource provider database and then select Next. The installer validates the SQL connection properties.
Graphical user interface, website Description automatically generated

Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-app-service-deploy

설명: (Fast2test 회원만 볼 수 있음)

Explanation

Box 1: Administrator management endpoint
Note: The developers report high chargeback costs for the dev1 region.
Two integrated systems that are dedicated to application development and have the following configurations:
The integrated systems are disconnected from the Internet. The workloads in the user subscriptions have Internet access.
One integrated system has a region name of dev1, and the other has a region name of dev2.
Both regions are used only by developers at Northwind Traders.
The request gets consumption details for the requested subscriptions and for the requested time frame. There is no request body.
This usage API is a provider API, so the caller must be assigned an Owner, Contributor, or Reader role in the provider's subscription.
Method, Request URI
GET
https://{armendpoint}/subscriptions/{subId}/providers/Microsoft.Commerce.Admin/subscriberUsageAggregates Arguments
* armendpoint
Azure Resource Manager endpoint of your Azure Stack Hub environment. The Azure Stack Hub convention is that the name of the Azure Resource Manager endpoint is in the format
https://adminmanagement.{domain-name}. For example, for the Azure Stack Development Kit (ASDK), if the domain name is local.azurestack.external, then the Resource Manager endpoint is
https://adminmanagement.local.azurestack.external.
* subId
Subscription ID of the user who makes the call.
* Etc.
Box 2: Get-AzsSubscriberUsage
Retrieve usage information
PowerShell
To generate the usage data, you should have resources that are running and actively using the system; for example, an active virtual machine (VM), or a storage account containing some data. If you're not sure whether you have any resources running in the Azure Stack Hub Marketplace, deploy a VM, and verify the VM monitoring blade to make sure it's running. Use the following PowerShell cmdlets to view the usage data:
Install PowerShell for Azure Stack Hub.
Configure the Azure Stack Hub user or the Azure Stack Hub operator PowerShell environment.
To retrieve the usage data, call the Get-AzsSubscriberUsage PowerShell cmdlet:
Get-AzsSubscriberUsage -ReportedStartTime "2017-09-06T00:00:00Z"
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-provider-resource-api
Topic 3, Trey Research
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
General overview
Trey Research is a pharmaceutical company that has an office in Boston.
Existing environment
Identity Environment
The on-premises network contains an Active Directory forest named treyresearch.net. The forest contains a user named User1.
The forest syncs to an Azure AD tenant named treyresearch.net by using Azure AD Connect.
Trey Research has an internal certification authority (CA).
Compute Environment
The datacenter in the Boston office contains a computer named CLIENT1 that runs Windows 10. CLIENT1 is an administrative workstation that connects directly to the Azure Stack Hub integrated system.
Planned changes and requirements
Planned changes
Trey Research identifies the following planned changes:
Change the Azure Stack Hub integrated system registration to use an Azure subscription named Subscription3 that has a GUID of 12345678-1234-1234-1234-222222222222.
Configure the integrated system to resolve external names by using a DNS Server that has an IP address of 10.100.100.100.
Implement the App Service resource provider and the Event Hubs resource provider on the integrated system/ Publish a custom cloud-init built image of a Linux virtual machine to Azure Stack Hub Marketplace on the integrated system.
Create a new cloudadmin user named User2.
Assign the delegated provider role to User1.
Azure Stack Hub Requirements
Trey Research identifies the following Azure Stack Hub requirements:
Azure Stack Hub integrated system logs must be forwarded to an external security information and event management (SIEM) system named SIEM1. SIEM1 requires TCP with mutual authentication and TLS 1.2 encryption.
A default Microsoft SQL Server instance will host the database of the App Service resource provider.
The infrastructure of the integrated system must be backed up as frequently as possible.
The integrated system backups must be retained for 28 days.
Business Requirements
Minimize software and licensing costs.

설명: (Fast2test 회원만 볼 수 있음)

Explanation
Graphical user interface, text, application, chat or text message Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/event-hubs-rp-install?view=azs-2008&pivots=state-conne

설명: (Fast2test 회원만 볼 수 있음)

설명: (Fast2test 회원만 볼 수 있음)

Explanation
Graphical user interface, text, application, email Description automatically generated

Step 1: Create a JSON file that contains the role definition.
Rather than using an account that has Owner permissions in the Azure subscription, you can create a custom role to assign permissions to a less-privileged user account. This account can then be used to register your Azure Stack Hub.
Create a custom role using PowerShell
Use the following JSON template to simplify creation of the custom role. The template creates a custom role that allows the required read and write access for Azure Stack Hub registration.
1. Create a JSON file. For example, C:\CustomRoles\registrationrole.json.
2. Add the following JSON to the file. Replace <SubscriptionID> with your Azure subscription ID.
{
"Name": "Azure Stack Hub registration role",
"Id": null,
"IsCustom": true,
"Description": "Allows access to register Azure Stack Hub",
"Actions": [
"Microsoft.Resources/subscriptions/resourceGroups/write",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.AzureStack/registrations/*",
"Microsoft.AzureStack/register/action",
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Authorization/roleAssignments/write",
"Microsoft.Authorization/roleAssignments/delete",
"Microsoft.Authorization/permissions/read",
"Microsoft.Authorization/locks/read",
"Microsoft.Authorization/locks/write"
],
"NotActions": [
],
"AssignableScopes": [
"/subscriptions/<SubscriptionID>"
]
}
3. In PowerShell, connect to Azure to use Azure Resource Manager. When prompted, authenticate using an account with sufficient permissions such as Owner or User Access Administrator.
Connect-AzAccount
4. To create the custom role, use New-AzRoleDefinition specifying the JSON template file.
New-AzRoleDefinition -InputFile "C:\CustomRoles\registrationrole.json"
Step 2: From Azure Cloud shell, run the New-AzRoleDefinition cmdlet.
Step 3: From the Azure portal, add a role assignment to sub1.
Assign a user to registration role
After the registration custom role is created, assign the role to the user account that will be used for registering Azure Stack Hub.
Sign in with the account with sufficient permission on the Azure subscription to delegate rights - such as Owner or User Access Administrator.
In Subscriptions, select Access control (IAM) > Add role assignment.
In Role, choose the custom role you created: Azure Stack Hub registration role.
Select the users you want to assign to the role.
Select Save to assign the selected users to the role.

Reference: https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-registration-role

설명: (Fast2test 회원만 볼 수 있음)

Explanation

Box 1: .\New-OAW.ps1
Create the OAW VM using a script
The following script prepares the virtual machine as the Operator Access Workstation (OAW), which is used to access Microsoft Azure Stack Hub.
Sign in to the HLH with your credentials.
Download OAW.zip and extract the files.
Open an elevated PowerShell session.
Navigate to the extracted contents of the OAW.zip file.
Run the New-OAW.ps1 script.
Example: Example: Deploy on HLH using a Microsoft Image
$oawRootPath = "D:\oawtest"
$securePassword = Read-Host -Prompt "Enter password for Azure Stack OAW's local administrator"
-AsSecureString
if (Get-ChildItem -Path $oawRootPath -Recurse | Get-Item -Stream Zone* -ErrorAction SilentlyContinue | Select-Object FileName)
{ Write-Host "Execution failed, unblock the script files first" }
else { .\New-OAW.ps1 -LocalAdministratorPassword $securePassword }
Syntax:
New-OAW
-LocalAdministratorPassword <Security.SecureString> `
-IPAddress <String> `
-SubnetMask <String> `
-DefaultGateway <String> `
-DNS <String[]> `
-TimeServer<String> `
[-AzureStackCertificatePath <String>] `
[-AzSStampInfoFilePath <String>] `
[-CertificatePassword <Security.SecureString>] `
[-ERCSVMIP <String[]>] `
[-ImageFilePath <String>] `
[-VirtualMachineName <String>] `
[-VirtualMachineMemory <int64>] `
[-VirtualProcessorCount <int>] `
[-VirtualMachineDiffDiskPath <String>] `
[-PhysicalAdapterMACAddress <String>] `
[-VirtualSwitchName <String>] `
[-ReCreate] `
[-AsJob] `
[-Passthru] `
[-WhatIf] `
[-Confirm] `
[<CommonParameters>]
Box 2: 10.30.1.253
Deployment virtual machine (DVM) IP address: 10.30.1.253
Note:
Parameter:
IPAddress (Required)
The static IPv4 address to configure TCP/IP on the virtual machine.
Reference: https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation

설명: (Fast2test 회원만 볼 수 있음)

설명: (Fast2test 회원만 볼 수 있음)