Free Microsoft AZ-600 Exam Actual Questions

The questions for AZ-600 were last updated On Mar 31, 2025

At ValidExamDumps, we consistently monitor updates to the Microsoft AZ-600 exam questions by Microsoft. Whenever our team identifies changes in the exam questions,exam objectives, exam focus areas or in exam requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these actual questions, our customers can successfully pass the Microsoft Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub exam on their first attempt without needing additional materials or study guides.

Other certification materials providers often include outdated or removed questions by Microsoft in their Microsoft AZ-600 exam. These outdated questions lead to customers failing their Microsoft Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions, guaranteeing their presence in your actual exam. Our main priority is your success in the Microsoft AZ-600 exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.

 

Question No. 1

You need to identify the PEP information for the integrated system in Chicago. The solution must meet the technical requirements.

What should you use?

Show Answer Hide Answer
Correct Answer: C

https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-privileged-endpoint?view=azs-2008

Question No. 2

You have an Azure Slack Hub integrated system.

You receive the following alert: "One or more guest Azure AD tenants must be configured."

You need to identify which Azure AD tenants require configuration.

Which PowerShell cmdlet should you run?

Show Answer Hide Answer
Correct Answer: C

.Synopsis

Gets the health report of identity application in the Azure Stack home and guest directories

.DESCRIPTION

Gets the health report for Azure Stack identity applications in the home directory as well as guest directories of Azure Stack. Any directories with an unhealthy status need to have their permissions updated.

.EXAMPLE

$adminResourceManagerEndpoint = 'https://adminmanagement.local.azurestack.external'

$homeDirectoryTenantName = '<homeDirectoryTenant>.onmicrosoft.com'

Get-AzsHealthReport -AdminResourceManagerEndpoint $adminResourceManagerEndpoint `

-DirectoryTenantName $homeDirectoryTenantName -Verbose


https://github.com/Azure/AzureStack-Tools/blob/master/Identity/README.md

Question No. 3

You plan to deploy an Azure Stack Hub integrated system that will be disconnected from the internet. The integrated system region name is region1, and the external domain is name is contoso.local.

You need to ensure that the generated certificate signing request (CSR) has the correct subjects and subject alternative names (SAN).

Which name must you include in the CSR?

Show Answer Hide Answer
Correct Answer: D

You can deploy and use Azure Stack Hub without a connection to the internet. However, with a disconnected deployment, you're limited to an Active Directory Federation Services (AD FS) identity store and the capacity-based billing model. Because multitenancy requires the use of Azure Active Directory (Azure AD), multitenancy isn't supported for disconnected deployments.

The implementation of Extension Host requires two wild card SSL certificates, one for the Admin portal and one for the Tenant portal.

Note: Certificate requirements

The extension host implements two new domain namespaces to guarantee unique host entries for each portal extension. The new domain namespaces require two additional wildcard certificates to ensure secure communication.

The table shows the new namespaces and the associated certificates:

Example:

$regionName = 'east' # The region name for your Azure Stack Hub deployment

$externalFQDN = 'azurestack.contoso.com' # The external FQDN for your Azure Stack Hub deployment

Starting Certificate Request Process for Deployment

CSR generating for following SAN(s): *.adminhosting.east.azurestack.contoso.com,*.adminvault.east.azurestack.contoso.com,*.blob.east.azurestack.contoso.com,*.hosting.east.azurestack.contoso.com,*.queue.east.azurestack.contoso.com,*.table.east.azurestack.contoso.com,*.vault.east.azurestack.contoso.com,adminmanagement.east.azurestack.contoso.com,adminportal.east.azurestack.contoso.com,management.east.azurestack.contoso.com,portal.east.azurestack.contoso.com

Present this CSR to your Certificate Authority for Certificate Generation: C:\Users\username\Documents\AzureStackCSR\Deployment_east_azurestack_contoso_com_SingleCSR_CertRequest_20200710165538.req

Certreq.exe output: CertReq: Request Created


https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment

https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-extension-host-prepare

https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-get-pki-certs

Question No. 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You deploy a disconnected Azure Stack Hub integrated system.

You need to identify the IP address of the privileged endpoint (PEP).

Solution: You run the Azure Stack Hub Readiness checker tool.

Does this meet the goal?

Show Answer Hide Answer
Correct Answer: B

Question No. 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to install an update to an Azure Stack Hub integrated system.

You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.

Solution: From a privileged endpoint (PEP) session, you run

Test-AzureStack --Group "UpdateReadiness".

Does this meet the goal?

Show Answer Hide Answer