70-537 Microsoft Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Exam

MCSA MCSE

Published: January 31, 2018
Languages: English
Audiences: IT professionals
Technology: Microsoft Azure
Credit toward certification: MCSA, MCSE

Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.

Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.

Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.

If you have concerns about specific questions on this exam, please submit an exam challenge.

If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.

On January 14, 2020, this exam was updated. To learn more about these changes and how they affect the skills measured, please download and review the exam 70-537 change document.

Deploying and Integrating an Azure Stack Hub Environment (20-25%)
Build test environments by using the Azure Stack Hub Development Kit (ASDK).
This objective may include but is not limited to: use PowerShell commands; install updated ASDK; troubleshoot failed installs; post-deployment registration
Configure identity and PKI for data center integration.
This objective may include but is not limited to: integrate Azure Stack Hub with AD FS, create custom RBAC roles for Azure Stack registration, validate Azure identity, validate AD FS integaration, validate graph integration, generate PKI certificates, validate PKI certificates, remediate PKI certificates
Configure DNS for data center integration.
This objective may include but is not limited to: configure external DNS name resolution from within Azure Stack Hub; configure Azure Stack Hub DNS names from outside Azure Stack Hub
Configure connectivity for data center integration.
This objective may include but is not limited to: manage firewall ports needed at the edge; configure connectivity to the data center; install and renew certificates for public endpoints, connect to Azure by using ExpressRoute
Connect to and perform API-based administration on Azure Stack Hub.
This objective may include but is not limited to: connect to the stack by using PowerShell; configure client certificates; configure firewall to support remote administration; establish RBAC roles for the Azure Stack Hub fabric; create subscriptions for end users

Configuring PaaS and IaaS for an Azure Stack Hub Environment (25-30%)
Configure and administer the App Service resource provider.
This objective may include but is not limited to: configure system; configure source control; configure worker tiers; configure subscription quotas; scale worker tiers and App Service infrastructure roles; add custom software; configure Azure Stack Hub networking security
Configure and administer database resource providers.
This objective may include but is not limited to: configure and administer the SQL adapter; configure and administer the MySQL adapter; set up SKUs; set up additional hosting capacity
Configure and administer IaaS services.
This objective may include but is not limited to: implement virtual machine images; prepare Linux and Windows images; prepare a custom image; upload an image

Providing Services to and Enabling DevOps for Azure Stack Hub Users (25-30%)
Create and manage quotas, plans, and offers.
This objective may include but is not limited to: create quotas; configure plans; configure offers; configure delegated offers; create add-on plans
Manage tenants and users.
This objective may include but is not limited to: configure multi-tenancy in Azure Stack; remove tenants; manage authentication and authorization; establish RBAC roles for the user space
Manage the Azure Marketplace.
This objective may include but is not limited to: enable Azure Marketplace on Azure Stack Hub; plan new packages; create and publish new packages; download Azure Marketplace items
Enable DevOps for users.
This objective may include but is not limited to: enable version control for users; enable CLI for users; manage ARM templates; deploy ARM templates; debug ARM templates; use Azure DevOps to connect to Azure Stack Hub; use continuous integration and continuous deployment to automate a pipeline that targets Azure Stack Hub, configure app identity to access resources using Azure AD and AD FS service principals

Maintaining and Monitoring an Azure Stack Hub Environment (20-25%)
Plan and implement a backup-recovery and a disaster-recovery solution.
This objective may include but is not limited to: back up Azure Stack Hub infrastructure services; perform cloud recovery of Azure Stack Hub, replicate and fail over Azure Stack Hub VMs to Azure; back up and restore PaaS resource data; back up and restore backup and restore of user Azure Stack Hub VM-OS, disks, volumes, and apps
Manage and monitor capacity, performance, updates, and alerts.
This objective may include but is not limited to: manage storage; monitor available storage; integrate existing monitoring services; manage public IP address ranges; monitor infrastructure component health; monitor Azure Stack Hub memory, public IP addresses, and storage user consumption; apply updates; update system firmware; review and react to alerts; configure external auditing and syslog forwarding; replace hardware
Manage usage reporting and log collection.
This objective may include but is not limited to: provide access to the usage database; test usage by using the ASDK; collect the usage data by using the Provider Resource Usage API and the Tenant Resource Usage API; investigate the usage time versus the reported time

Instructor-led training
Course 20537: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack

Online training
INF240x: Configuring and Operating Microsoft Azure Stack

Self-paced training
Azure Stack Documentation
Azure Stack Development Kit (free!)

Who should take this exam?
Candidates for this exam are Azure administrators and Azure Stack Hub operators who use Azure Stack Hub to provide cloud services to their end users or customers from within their own data center.

Candidates for this exam should have significant experience managing and operating Azure Stack Hub environments. Candidates should have a strong understanding of Azure as well as some knowledge of virtualization, networking, and identity management. Candidates should also understand how Azure Stack Hub enables DevOps processes and the hybrid development model.

Candidates for this exam are expected to demonstrate the ability to plan, deploy, package, update, and maintain the Azure Stack Hub infrastructure. Candidates must also demonstrate the ability to offer hybrid cloud resources and requested services, and to manage infrastructure as a service (IaaS) and platform as a service (PaaS).

QUESTION 1
You have an Azure Stack integrated system in the perimeter network.
You need to ensure that users in the Internet can access Azure Stack Storage blobs.
Which TCP ports should you open on the firewall?

A. 20 and 21
B. 137 only
C. 80 and 443
D. 445 and 5445

Answer: C

QUESTION 2
You have an Azure Stack integrated system.
You establish a PowerShell session to a privileged endpoint, and you run several commands.
You need to ensure that logs of the session activity are exported to a file share.
Which cmdlet should you run?

A. Exit
B. Clear-Host
C. Out-Default
D. Close-PrivilegedEndpoint
E. Exit-PSSession

Answer: D

QUESTION 3
You deploy an Azure Stack integrated system that uses an external domain name of west.fabrikam.com
Currently, tenant users access the system internally.
You need to create a SSL certificate for the publication of externally accessible endpoints. The solution must
ensure that tenant users can upload VHD files to Azure Stack remotely.
Which two names should you include in the certificate? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. adminmanagement.west.fabrikam.com
B. *.west.fabrikam.com
C. *.blob.west.fabrikam.com
D. adminportal.west.fabrikam.com
E. *.trafficmanager.west.fabrikam.com

Answer: B,C

QUESTION 4
Your network contains an Active Directory forest named adatum.com.
You deploy an Azure Stack integrated system.
You implement federation between adatum.com and Azure Stack.
You need to ensure that a user named admin01@adatum.com can manage Azure Stack from the Azure Stack administrator portal.
Which cmdlet should you run?

A. Set-ServiceAdminOwner
B. Set-AzsUserSubscription
C. New-CloudAdminUser
D. Set-CloudAdminPassword

Answer: A

QUESTION 5
You have an Azure Stack integrated system.
What are three possible types of records that you can create in Azure Stack DNS? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. SRV
B. MX
C. PTR
D. NSEC
E. AAAA

Answer: A,B,C