You plan to deploy two Azure Stack Hub integrated systems named AZStack1 and AZStack2.
AZStack1 must meet the following requirements:
Connect to the Internet.
Have minimal capital expenditures.
Use the minimum number of on-premises servers for identity.
Have no existing licenses for Windows virtual machines deployed.
AZStack2 must meet the following requirements:
Be disconnected from the Internet.
Use the minimum number of on-premises servers for identity.
Support the syndication of Azure Stack Hub Marketplace items.
Which identity provider and licensing model should you use for each integrated system? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-connected-deployment?view=azs-2008

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com as an identity provider.
You need to ensure that users from an Azure AD tenant named fabrikam.onmicrosoft.com can authenticate to the integrated system.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation

Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-enable-multitenancy?view=azs-2008

Comment: *

Name: *

Email: *

Verification: *

You need to change the int1 region to use the capacity model. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

1 - Notify all the users in the int1 region and schedule a maintenance window.
2 - Select the subscription that was used to perform the initial registration.
3 - Run the Set-AzsRegistration cmdlet.

Comment: *

Name: *

Email: *

Verification: *

You plan to deploy a disconnected Azure Stack Hub integrated system.
You need to identify which type of certificate to use for the deployment and the file format for the certificate.
The solution must meet the following requirements:
* Minimize administrative effort.
* Maximize security.
What should identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Azure Stack Hub public key infrastructure (PKI) certificate requirements Azure Stack Hub has a public infrastructure network using externally accessible public IP addresses assigned to a small set of Azure Stack Hub services and possibly tenant VMs. PKI certificates with the appropriate DNS names for these Azure Stack Hub public infrastructure endpoints are required during Azure Stack Hub deployment.
Box 1: A certificate from an internal certification authority (CA)
Your Azure Stack Hub infrastructure must have network access to the certificate authority's Certificate Revocation List (CRL) location published in the certificate. This CRL must be an http endpoint. Note: for disconnected deployments, certificates issued by a public certificate authority (CA) are not supported, if the CRL endpoint is not accessible.
Features that are impaired or unavailable in disconnected deployments
Azure Stack Hub was designed to work best when connected to Azure, so it's important to note that there are some features and functionality that are either impaired or completely unavailable in the disconnected mode.
Private/internal Certificate Authority (CA)
No impact - In cases where the deployment uses certificates issued by a private CA, such as an internal CA within an organization, only internal network access to the CRL endpoint is required. Internet connectivity is not required, but you should verify that your Azure Stack Hub infrastructure has the required network access to contact the CRL endpoint defined in the certificates CDP extension.
Box 2: PFX
The certificate format must be PFX, as both the public and private keys are required for Azure Stack Hub installation. The private key must have the local machine key attribute set.
Reference:
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-disconnected-deployment
https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-pki-certs

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Stack Hub integrated system that has syslog forwarding configured.
You need to remove syslog forwarding and the associated certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

1 - Connect to the privileget endpoint (PEP)
2 - Run the Set-SyslogServer cmdlet
3 - Run the Set-SyslogClient cmdlet
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-integrate-security?view=azs-2008

Comment: *

Name: *

Email: *

Verification: *