Correct Answer: C

Correct Answer: D

Add certificate

Export and then import Azure Stack Hub certificate for disconnected integrated systems and for the ASDK.

You need the CA root certificate for Azure Stack Hub to use Azure CLI on your development machine.

Export the Azure Stack Hub CA root certificate

Export the CA root certificate. To export the ASDK root certificate in PEM format:

Get the name of your Azure Stack Hub Root Cert:

1.

Sign in to the Azure Stack Hub User or Azure Stack Hub Administrator portal.

Select the lock in the browser address bar.

In the pop-up window, select Connection is secure. In the Certificate window, select the Certification Path tab. Note down the name of your Azure Stack Hub Root Cert, for example, *..

2.

Sign in to the VM, open an elevated PowerShell prompt, and then run the following script:

$label = "*.. from step 1"

Write-Host "Getting certificate from the current user trusted store with subject CN=$label" $root = Get-ChildItem Cert:\CurrentUser\Root | Where-Object Subject -eq "CN=$label" | select -First 1 if (-not $root)

{

Write-Error "Certificate with subject CN=$label not found" return

}

Write-Host "Exporting certificate"

Export-Certificate -Type CERT -FilePath root.cer -Cert $root

Write-Host "Converting certificate to PEM format" certutil -encode root.cer root.pem

Reference:

https://learn.microsoft.com/en-us/azure-stack/asdk/asdk-cli

https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-version-profiles-azurecli2

Correct Answer: D

Reference:

https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-csp-howto-register- tenants?view=azs-2008andtabs=az

Correct Answer: C

Windows Admin Center is a new, locally-deployed, browser-based management tool set that lets you manage your Windows Servers with no Azure or cloud dependency. Windows Admin Center gives you full control over all aspects of your

server infrastructure and is particularly useful for managing servers on private networks that are not connected to the Internet.

Reference:

https://learn.microsoft.com/en-us/azure-stack/operator/operator-access-workstation

Correct Answer:

Step 1: Create a storage account A sample alias file with many common image aliases is available. You can use that as a starting point. Host this file in a space where your CLI clients can reach it. One way is to host the file in a blob storage account and share the URL with your users:

1.

Download the sample file from GitHub.

2.

Create a storage account in Azure Stack Hub (Step 1). When that's done, create a blob container. Set the access policy to "public." (Step 2)

3.

Upload the JSON file to the new container (Step 3). When that's done, you can view the URL of the blob. Select the blob name and then select the URL from the blob properties.

Step 2: Create a blob container and set the Public access to Blob. Set up the VM aliases endpoint

Azure Stack Hub operators should set up a publicly accessible endpoint that hosts a VM alias file. The VM alias file is a JSON file that provides a common name for an image. You use the name when you deploy a VM as an Azure CLI parameter.

Note: When public access is allowed for a storage account, you can configure a container with the following permissions:

*

Public read access for blobs only: Blobs within the container can be read by anonymous request, but container data is not available anonymously. Anonymous clients cannot enumerate the blobs within the container.

*

Public read access for container and its blobs: Container and blob data can be read by anonymous request, except for container permission settings and container metadata. Clients can enumerate blobs within the container by anonymous request, but cannot enumerate containers within the storage account.

*

No public read access: The container and its blobs can be accessed only with an authorized request. This option is the default for all new containers. Step 3: To the container, upload the alias template as a JSON file.