Tips to Pass 70-533 Exam (1 to 16)

70-533 Royal Pack Testengine pdf

100% Actual & Verified — 100% PASS

Unlimited access to the world's largest Dumps library! Try it Free Today!

https://www.exambible.com/70-533-exam/

Product Description:
Exam Number/Code: 70-533
Exam name: Implementing Microsoft Azure Infrastructure Solutions
n questions with full explanations
Certification: Microsoft Certification
Last updated on Global synchronizing

Free Certification Real IT 70-533 Exam pdf Collection

High value of 70-533 testing engine materials and practice exam for Microsoft certification for customers, Real Success Guaranteed with Updated 70-533 pdf dumps vce Materials. 100% PASS Implementing Microsoft Azure Infrastructure Solutions exam Today!

2016 Apr 70-533 Study Guide Questions:

Q1. HOTSPOT 

You create a virtual network named fabVNet01. 

You design the virtual network to include two subnets, one named DNS-subnet and one named Apps-subnet, as shown in the exhibit. (Click the Exhibits button.) 


In the table below, identify the number of IP addresses that will be available for virtual machines (VMs) or cloud services in each subnet. Make only one selection in each column. 


Answer: 



Q2. HOTSPOT 

Your company network has two branch offices. Some employees work remotely, including at public locations. You manage an Azure environment that includes several virtual networks. 

All users require access to the virtual networks. 

In the table below, identify which secure cross-premise connectivity option is needed for each type of user. Make only one selection in each column. 


Answer: 



Q3. DRAG DROP 

You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named ContosoService1. 

You discover unauthorized traffic to CON-CL1. You need to: 

. Create a rule to limit access to CON-CL1. 

. Ensure that the new rule has the highest precedence. 

Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet or value to the correct location in the Power Shell command. Each cmdlet or value may be used once, more than once, or not at all. You may need to drag the split bat between panes or scroll to view content. 


Answer: 



Q4. You manage a collection of large video files that is stored in an Azure Storage account. 

A user wants access to one of your video files within the next seven days. 

You need to allow the user access only to the video file, and then revoke access once the user no longer needs it. 

What should you do? 

A. Give the user the secondary key for the storage account. 

Once the user is done with the file, regenerate the secondary key. 

B. Create an Ad-Hoc Shared Access Signature for the Blob resource. 

Set the Shared Access Signature to expire in seven days. 

C. Create an access policy on the container. 

Give the external user a Shared Access Signature for the blob by using the policy. 

Once the user is done with the file, delete the policy. 

D. Create an access policy on the blob. 

Give the external user access by using the policy. 

Once the user is done with the file, delete the policy. 

Answer: C 

Explanation: See 3) below. By default, only the owner of the storage account may access blobs, tables, and queues within that account. If your service or application needs to make these resources available to other clients without sharing your access key, you have the following options for permitting access: 

1.You can set a container's permissions to permit anonymous read access to the container and its blobs. This is not allowed for tables or queues. 

2. You can expose a resource via a shared access signature, which enables you to delegate restricted access to a container, blob, table or queue resource by specifying the interval for which the resources are available and the permissions that a client will have to it. 

3. You can use a stored access policy to manage shared access signatures for a container or its blobs, for a queue, or for a table. The stored access policy gives you an additional measure of control over your shared access signatures and also provides a straightforward means to revoke them. 

Reference: Manage Access to Azure Storage Resources 


Q5. You plan to use Password Sync on your DirSync Server with Azure Active Directory {Azure AD) on your company network. You configure the DirSync server and complete an initial synchronization of the users. 

Several remote users are unable to log in to Office 365. You discover multiple event log entries for "Event ID 611 Password synchronization failed for domain." 

You need to resolve the password synchronization issue. 

Which two actions should you perform? Each correct answer presents part of the solution. 

A. Restart Azure AD Sync Service. 

B. Run the Set-FullPasswordSync Power Shell cmdlet. 

C. Force a manual synchronization on the DirSync server. 

D. Add the DirSync service account to the Schema Admins domain group. 

Answer: A,B 

Explanation: On the computer that has the Azure Active Directory Sync tool installed, follow these steps: . Perform.a full password sync for all users who are synced through directory synchronization. To do this, follow these steps: Set-FullPasswordSync . Restart the Forefront Identity Manager Synchronization Service. To do this, follow 

these steps: Reference: User passwords don't sync if your organization is using Azure Active Directory synchronization 

http://support2.microsoft.com/kb/2915221 


70-533 exams

Renewal 70-533 braindumps:

Q6. DRAG DROP 

You manage an application hosted on cloud services. The development team creates a new version of the application. The updated application has been packaged and stored in an Azure Storage account. 

You have the following requirements: 

. Deploy the latest version of the application to production with the least amount of downtime. . Ensure that the updated application can be tested prior to deploying to the Production site. . Ensure that the original version of the application can be restored until the new version is verified. 

Which four steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 


Answer: 



Q7. DRAG DROP 

You have a solution deployed into a virtual network in Azure named fabVNet. The fabVNet virtual network has three subnets named Apps, Web, and DB that are configured as shown in the exhibit. (Click the Exhibits button.) 



You want to deploy two new VMs to the DB subnet. 

You need to modify the virtual network to expand the size of the DB subnet to allow more IP addresses. 

Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 


Answer: 



Q8. HOTSPOT 

You manage two cloud services named Service1 and Service2. The development team updates the code for each application and notifies you that the services are packaged and ready for deployment. 

Each cloud service has specific requirements for deployment according to the following table. 


In the table below, identify the deployment method for each service. Make only one selection in each column. 


Answer: 



Q9. You manage several Azure virtual machines (VMs). You create a custom image to be used by employees on the development team. 

You need to ensure that the custom image is available when you deploy new servers. 

Which Azure Power Shell cmdlet should you use? 

A. Update-AzureVMImage 

B. Add-AzureVhd 

C. Add-AzureVMImage 

D. Update-AzureDisk 

E. Add-AzureDataDisk 

Answer: C 

Explanation: The Add-AzureVMImage cmdlet adds an operating system image to the 

image repository. The image should be a generalized operating system image, using either 

Sysprep for Windows or, for Linux, using the appropriate tool for the distribution. 

Example 

This example adds an operating system image to the repository. 

Windows PowerShell 

C:\PS>Add-AzureVMImage -ImageName imageName -MediaLocation 

http://yourstorageaccount.blob.core.azure.com/container/sampleImage.vhd -Label 

Reference: Add-AzureVMImage 


Q10. Your company has a subscription to Azure. You plan to deploy 10 websites. You have the following requirements: 

. Each website has at least 15 GB of storage. 

. All websites can use azurewebsite.net. 

You need to deploy the 10 websites while minimizing costs. 

Which web tier plan should you recommend? 

A. Free 

B. Small Business 

C. Standard 

D. Basic 

Answer: C 

Explanation: Standard offers 50 GB of storage space, while Basic only gives 10 GB: 

Reference: Websites Pricing Details 

URL: http://azure.microsoft.com/en-us/pricing/details/websites/ 

http://azure.microsoft.com/en-us/documentation/articles/azure-subscription-service-limits/ 


70-533 rapidshare

100% Guarantee 70-533 tutorials:

Q11. You manage a cloud service that utilizes data encryption. 

You need to ensure that the certificate used to encrypt data can be accessed by the cloud service application. 

What should you do? 

A. Upload the certificate referenced in the application package. 

B. Deploy the certificate as part of the application package. 

C. Upload the certificate's public key referenced in the application package. 

D. Use RDP to install the certificate. 

Answer: C 

Explanation: The developer must deploy the public key with their application so that, when Windows Azure spins up role instances, it will match up the thumbprint in the service definition with the uploaded service certificate and deploy the private key to the role instance. The private key is intentionally non-exportable to the .pfx format, so you won’t be able to grab the private key through an RDC connection into a role instance. 

Reference: Field Note: Using Certificate-Based Encryption in Windows Azure Applications 


Q12. DRAG DROP 

You administer two virtual machines (VMs) that are deployed to a cloud service. The VMs are part of a virtual network. 

The cloud service monitor and virtual network configuration are configured as shown in the exhibits. (Click the Exhibits button.) 



You need to create an internal load balancer named fabLoadBalancer that has a static IP address of 172.16.0.100. 

Which value should you use in each parameter of the Power Shell command? 

To answer, drag the appropriate value to the correct location in the Power Shell command. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 


Answer: 



Q13. You manage a software-as-a-service application named SaasApp1 that provides user management features in a multi-directory environment. 

You plan to offer SaasApp1 to other organizations that use Azure Active Directory. 

You need to ensure that SaasApp1 can access directory objects. 

What should you do? 

A. Configure the Federation Metadata URL 

B. Register SaasApp1 as a native client application. 

C. Register SaasApp1 as a web application. 

D. Configure the Graph API. 

Answer: D 

Explanation: The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects. For example, the Graph API supports the following common operations for a user object: / Create a new user in a directory / Get a user’s detailed properties, such as their groups / Update a user’s properties, such as their location and phone number, or change their password / Check a user’s group membership for role-based access / Disable a user’s account or delete it entirely 

Reference: Azure AD Graph API 

URL: http://msdn.microsoft.com/en-us/library/azure/hh974476.aspx 


Q14. You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access to the web APIs through OAuth 2.0. 

MyApp is generating numerous user consent prompts. 

You need to reduce the amount of user consent prompts. 

What should you do? 

A. Enable Multi-resource refresh tokens. 

B. Enable WS-federation access tokens. 

C. Configure the Open Web Interface for .NET. 

D. Configure SAML 2.0. 

Answer: A 

Explanation: When using the Authorization Code Grant Flow, you can configure the client to call multiple resources. Typically, this would require a call to the authorization endpoint for each target service. To avoid multiple calls and multiple user consent prompts, and reduce the number of refresh tokens the client needs to cache, Azure Active Directory (Azure AD) has implemented multi-resource refresh tokens. This feature allows you to use a single refresh token to request access tokens for multiple resources. 

Reference:Azure, OAuth 2.0, Refresh Tokens for Multiple Resources 


Q15. DRAG DROP 

You manage an Azure Web Site named contososite. 

You download the subscription publishing credentials named Contoso-Enterprise.publishsettings. 

You need to use Azure Power Shell to achieve the following: 

Connect to the Contoso-Enterprise subscription. 

Create a new App Setting named CustomSetting with a value of True. 

Restart the website. 

Which commands should you use? To answer, drag the appropriate Azure PowerShell command to the correct location in the solution. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 



Q16. You administer an Azure Web Site named contosoweb that is used to sell various products. Contosoweb experiences heavy traffic during weekends. 

You need to analyze the response time of the product catalog page during peak times, from different locations. 

What should you do? 

A. Configure endpoint monitoring. 

B. Add the Requests metric. 

C. Turn on Failed Request Tracing. 

D. Turn on Detailed Error Messages. 

Answer: A 

Explanation: Endpoint monitoring configures web tests from geo-distributed locations that test response time and uptime of web URLs. The test performs an HTTP get operation on the web URL to determine the response time and uptime from each location. Each configured location runs a test every five minutes. After you configure endpoint monitoring, you can drill down into the individual endpoints to view details response time and uptime status over the monitoring interval from each of the test location 

Reference: Azure, How to Monitor Websites 

http://azure.microsoft.com/en-us/documentation/articles/web-sites-monitor/#webendpointstatus 



see more 70-533 - Implementing Microsoft Azure Infrastructure Solutions