Q65. You plan to deploy an Azure Stack Hub integrated system that will connect to the Internet.
You need to define the public VIP pool.
What is the smallest subnet mask that you can use for the public VIP pool?

Q66. You need to create a certificate for the Event Hubs resource provider. The solution must support the planned changes.
How should you configure the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q67. You need to recommend a business continuity and disaster recovery plan for the dev1 and dev2 regions that meets the technical requirements.
Which two recommendations should you make? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Q68. You have an Azure Stack Hub integrated system that uses an Azure Active Directory (Azure AD) identity provider.
You have a group named AppGroup1.
You need to provide an application with the ability to access Azure Stack Hub resources by using AppGroup1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Q69. You have an Azure Stack Hub integrated system that has 10 user subscriptions. Each subscription contains 30 storage accounts. Deleted storage accounts are purged automatically after seven days.
One of the user subscriptions has 10 storage accounts that are no longer used. The storage accounts contain a large amount of data.
You need to delete the unused storage accounts. The solution must increase the amount of available disk space in the integrated system as soon as possible.
Which two actions should you perform in the administrator portal and the user portal? To answer, drag the appropriate actions to the correct portals. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Q70. You have an Azure Stack Hub Integrated system that has the following configurations:
* Deployment virtual machine (DVM) IP address: 10.30.1.253
* First host IP address: 10.30.1.193
* Last host IP address: 10.30.1.254
* Subnet mask: 255.255.255.192
* BMC network: 10.30.1.192/26
* Default gateway: 10.30.1.193
* NTP: 10.31.1.2
* DNS: 8.8.8.8
You need to deploy an Operator Access Workstation (OAW) to the Hardware Lifecycle Host (HLH) and configure the network settings for the OAW.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Q71. You have an Azure Stack Hub integrated system.
You need to ensure that you can recover managed and unmanaged disks that are deleted from user subscriptions.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Q72. You have an Azure Stack Hub integrated system that has the following configurations:
* A deployment prefix of AzS
* A physical prefix of AzP
You need to renew the certificates for the integrated system.
To which virtual machine should you establish a PowerShell session?

Q73. You have a connected Azure Stack Hub integrated system that contains a user named User1.
You need to ensure that User1 can onboard a new guest tenant directory. The solution must use the principle of least privilege.
Which role should you assign to User1?

Q74. You have an Azure Stack Hub integrated system that is enabled for multitenancy and uses an Azure Active Directory (Azure AD) tenant named fabrikam.com as an identity provider.
The integrated system has the following guest directory tenants onboarded and enabled for multitenancy:
* com
* onmicrosoft.com
* onmicrosoft.com
You need to verify whether all the guest directory tenants are registered properly.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlet to the correct targets.
Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Q75. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system that connects to the Internet.
You need to update the Azure Event Hubs service.
Solution: From the Updates blade of the administrator portal, you trigger the installation of the latest update listed in the Infrastructure section.
Does this meet the goal?

Q76. You start the update of an Azure Stack Hub integrated system. The Update run details are shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Q77. You have a disconnected Azure Stack Hub integrated system that contains a user named User1.
You need to ensure that User1 can assign role-based access control (RBAC) roles in Azure Stack Hub. The solution must use the principle of least privilege.
Which Azure Stack Hub built-in role should you assign to User1?

Q78. You have an Azure Stack Hub integrated system that uses an Active Directory (Azure AD) tenant named contoso.com.
An Azure Stack Hub operator named Operator1 receives the alert shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Q79. You schedule a planned maintenance window.
You need to perform an Azure Stack Hub update in the dev1 region. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Q80. You have an Azure Stack Hub integrated system that is disconnected from the Internet.
You need to make a new image available in Azure Stack Hub Marketplace in the disconnected environment.
From a computer that has Internet access, you download all the required tools.
Which four actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Q81. You have an Azure Stack Hub integrated system that is disconnected from the Internet. The integrated system is registered to an Azure Active Directory (Azure AD) tenant named contoso.com.
You need to download the latest Ubuntu image for Azure Stack Hub Marketplace.
How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag and split the bar between panes to scroll to view content.
NOTE: Each correct selection is worth one point.

Q82. In which three situations should you update the registration of an Azure Stack Hub integrated system? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Q83. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a disconnected Azure Stack Hub integrated system.
You need to identify the IP address of the privileged endpoint (PEP).
Solution: You run the nslookup AzS-ERCS01.azurestack.local command.
Does this meet the goal?

Q84. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stack Hub integrated system.
The security department at your company wants a list of all the users who can manage the integrated system from the privileged endpoint (PEP).
You need to create the list.
Solution: From the Azure portal, you open the blade and view the users who are assigned the Global administrator role.
Does this meet the goal?

Q85. You plan to install an update to an Azure Stack Hub integrated system.
You need to verify whether the integrated system is healthy, and whether you can apply the update. You must achieve the goal as quickly as possible.
Solution: From a privileged endpoint (PEP) session, you run TesT-AzureStack -Group “Default”.
Does this meet the goal?

Q86. You need to configure name resolution to support the planned changes.
Which PowerShell cmdlet should you run?

Q87. You have a connected Azure Stack Hub integrated system.
You need to deploy an Operator Access Workstation (OAW) virtual machine image.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Q88. You have an Azure subscription named sub1 linked to an Azure Active Directory (Azure AD) tenant named contoso.com You have an Azure Stack Hub integrated system that is registered to sub1.
You need to delegate registering the Azure Stack Hub integrated system to an Azure Stack Hub operator. The solution must use the Principle of least privilege.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in correct order.

Q89. You have an Azure Stack Hub integrated system.
You need to update the integrated system to use a non-Windows NTP service that has a host name of ntp1.contoso.com.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.