You provision a new certificate to support the planned changes.
You need to validate the certificate.
Which PowerShell module should you install first?
Use the Azure Stack Hub Readiness Checker tool to validate that generated public key infrastructure (PKI) certificates which are suitable for pre-deployment. Validate certificates by leaving enough time to test and reissue certificates if necessary.
The Readiness Checker tool performs the following certificate validations:
* Parse PFX
Checks for valid PFX file, correct password, and whether the public information is protected by the password.
* Expiry Date
Checks for minimum validity of seven days.
* Signature algorithm
Checks that the signature algorithm isn't SHA1.
* Private Key
Checks that the private key is present and is exported with the local machine attribute.
* Etc.
Note: Perform core services certificate validation
Use these steps to validate the Azure Stack Hub PKI certificates for deployment and secret rotation:
1. Install AzsReadinessChecker from a PowerShell prompt (5.1 or above) by running the following cmdlet:
Install-Module Microsoft.AzureStack.ReadinessChecker -Force -AllowPrerelease
2. Create the certificate directory structure.
3. Etc.
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-validate-pki-certs
You have an Azure Stack Hub integrated system that is enabled for multi-tenancy.
You deploy a new computer named Computer1 that runs Windows 11.
You need to connect to the Azure Stack Hub Resource Manager (user) endpoint from Computer1 by using PowerShell.
Which command should you run?
A DNS entry is created for each endpoint in the external DNS zone that's specified at deployment time. For example, the user portal is assigned the DNS host entry of portal.<region>.<fqdn>.
* Azure Resource Manager (user)
Management.<region>.<fqdn>
Incorrect:
Not C: Portal (user)
Portal.<region>.<fqdn>
Not A, Not D: Azure Resource Manager (administrator)
Adminmanagement.<region>.<fqdn>
Note: Portal (administrator)
Adminportal.<region>.<fqdn>
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-endpoints
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet.
You need to update the Azure Event Hubs service.
Solution: From the Updates blade of the administrator portal, you trigger the installation of the latest update listed in the Infrastructure section.
Does this meet the goal?
Instead: Solution: From a privileged endpoint (PEP) session, you run the Install-AzsUpdate cmdlet.
You can use the Azure Stack Hub administrative endpoints to monitor and manage your updates. They're accessible with PowerShell. For instructions on getting set up with PowerShell on Azure Stack Hub.
You can use the following PowerShell cmdlet to manage your updates:
* Install-AzsUpdate
Apply a specific update at an update location.
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-update-monitor?view=azs-2008
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system.
The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).
You need to create the list.
Solution: From the Azure portal, you open the Azure Active Directory blade and view the users who are assigned the Global administrator role.
Does this meet the goal?
You have an Azure Stack Hub integrated system that uses the latest version.
You discover an alert for an external certificate that will expire. You obtain new certificates.
You need to validate that all the components required to change the certificates are in a healthy state, and then renew the certificates.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
