Course AZ-600: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub (beta)

Audience Profile

Candidates for Exam AZ-600: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub are Azure administrators or Azure Stack Hub operators who provide cloud services to end users or customers from within their own datacenter using Azure Stack Hub.

Their responsibilities are to plan, deploy, package, update, and maintain the Azure Stack Hub infrastructure. They also offer hybrid cloud resources and requested services and manage infrastructure as a service (IaaS) and platform as a service (PaaS).

They serve as part of a larger team dedicated to cloud-based management and security or hybrid environments as part of an end-to-end infrastructure.

Candidates for this exam should have significant experience managing and operating Azure Stack Hub environments. They should have a strong understanding of Azure, in addition to some knowledge of virtualization, networking, and identity management. They need to understand how Azure Stack Hub enables DevOps processes and the hybrid development model.

Skills Measured

NOTE: The bullets that appear below each of the skills measured are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive.

NOTE: Most questions cover features that are General Availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Provide Services (30-35%)

Manage Azure Stack Hub Marketplace

  • Populate Azure Stack Hub Marketplace in a disconnected environment
  • Create a custom Azure Stack Hub Marketplace item
  • Manage lifecycle for Azure Stack Hub Marketplace items
  • Offer an App Services resource provider
  • Plan an App Services resource provider deployment
  • Deploy an App Services resource provider
  • Update an App Services resource provider
  • Scale roles based on capacity requirements
  • Rotate App Services secrets and certificates
  • Manage worker tiers
  • Back up App Services
  • Offer an Event Hubs resource provider
  • Plan an Event Hubs resource provider deployment
  • Deploy an Event Hubs resource provider
  • Update an Event Hubs resource provider
  • Rotate Event Hubs secrets and certificates

Offer services

  • Create and manage quotas
  • Create and manage plans
  • Create and manage offers
  • Create and manage user subscriptions
  • Change user subscription owner

Manage usage and billing

  • Set up usage data reporting
  • View and retrieve usage data by using the Usage API
  • Manage usage and billing in multi-tenant and CSP scenarios
  • Implement Data Center Integration (15-20%)

Prepare for Azure Stack Hub deployment

  • Recommend a name resolution strategy
  • Recommend a public and internal IP strategy
  • Recommend a data center firewall integration strategy
  • Recommend an identity provider
  • Validate identity provider integration
  • Configure the Time Server (NTP)

Manage infrastructure certificates for Azure Stack Hub

  • Recommend a certificate strategy
  • Validate the certificates
  • Run secret rotation PowerShell cmdlet for external certificates

Manage Azure Stack Hub registration

  • Recommend a registration model
  • Register in a connected environment
  • Register in a disconnected environment
  • Re-register

Manage Identity and Access (10-15%)

Manage multi-tenancy

  • Configure Azure Stack Hub home directory
  • Register the guest tenant directory with Azure Stack Hub
  • Disable multi-tenancy
  • Update guest tenant directory

Manage access

  • Identify an appropriate method for access (service principal, users, groups)
  • Provision a service principal for Azure Stack Hub
  • Recommend a permission model
  • Configure access in Azure Stack Hub
  • Create a custom role

Manage Infrastructure (30-35%)

Manage system health

  • Recommend a monitoring strategy
  • Monitor system health by using the REST API
  • Includes resource providers such as Event Hubs
  • Monitor system health by using Syslog Server
  • Manage field replacement or repair
  • Configure automatic diagnostic log collection
  • Collect diagnostic logs on demand by using Powershell
  • Configure Syslog forwarding for Azure Stack Hub infrastructure

Plan and configure business continuity and disaster recovery

  • Recommend a business continuity disaster recovery (BCDR) strategy
  • Recommend a strategy for infrastructure backups
  • Configure storage target for infrastructure backups
  • Configure certificates for infrastructure backups
  • Configure frequency and retention policy for infrastructure backups

Manage capacity

  • Plan for system capacity
  • Manage partitioned GPUs
  • Add nodes
  • Manage storage capacity
  • Add IP pools

Update infrastructure

  • Update Azure Stack Hub
  • Download and import update packages manually
  • Update Azure AD Home Directory

Manage Azure Stack Hub by using privileged endpoints

  • Connect to a privileged endpoint
  • Configure the cloud admin user role
  • Unlock a support session
  • Close the session on the privileged endpoint
  • Stop and start Azure Stack Hub
  • Perform system diagnostics by using Test-AzureStack