Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub - Troubleshooting Privileged Endpoint Issues

Troubleshooting Privileged Endpoint Issues

Question

You have been assigned the duty of troubleshooting an Azure Stack Hub integrated system.

The security department of your organization needs an audit trail every time when the management tasks are accomplished on the Azure integrated system.

You decide to unlock PEP (Privileged Endpoint) and carry out a number of troubleshooting tasks focused on resolving the issues.

Which of the following cmdlet would you run as the next step?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer: B

Privileged Endpoint logs each action (and its associated output) that you perform in the PowerShell session.After you unlock PEP and perform troubleshooting tasks, you must close the session with the help of the Close-PrivilegedEndpoint cmdlet.

Option A is incorrect.

Import-PSSession is used to import the PEP session into the local machine.

Option B is correct.

After you unlock PEP and perform troubleshooting tasks, you must close the session with the help of the Close-PrivilegedEndpoint cmdlet.

Option C is incorrect.

Get-SupportSessionToken cmdlet is used to get the support session request token for authentication purpose.

Option D is incorrect.

Get-AzureStackLos cmdlet is used to get the logs from different roles of Azure Stack Hub with timeout.

To know more about using PEP in Azure Stack Hub, please visit the below-given link:

In order to enable auditing of management tasks on the Azure Stack Hub integrated system, it is necessary to unlock the Privileged Endpoint (PEP). The PEP provides access to the underlying infrastructure of the Azure Stack Hub and is typically locked down to prevent unauthorized access. Unlocking the PEP allows access to system logs and other diagnostic information that can be used to troubleshoot issues.

Once the PEP is unlocked, the next step would be to gather information that can be used to provide an audit trail of management tasks. One way to do this is by running the Get-AzureStackLog cmdlet. This cmdlet retrieves log files for the Azure Stack Hub and can be used to track changes to the system over time.

The Import-PSSession cmdlet is used to import a PowerShell session from a remote computer. This cmdlet would not be used in this scenario.

The Close-PrivilegedEndpoint cmdlet is used to close the PEP after it has been unlocked. This cmdlet would not be used in this scenario.

The Get-SupportSessionToken cmdlet is used to retrieve a support session token for the Azure Stack Hub. This cmdlet would not be used in this scenario, as it is not related to auditing management tasks on the system.

Therefore, the correct answer is D. Get-AzureStackLog.