Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 1:

  You administer a Microsoft Azure SQL Database data base in the US Central region named contosodb. Contosodb runs on a Standard tier within the S1 performance level.

  You have multiple business-critical applications that use contosodb.

  You need to ensure that you can bring contosodb back online in the event of a natural disaster in the US Central region. You want to achieve this goal with the least amount of downtime.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Upgrade to S2 performance level.
  B. Use active geo-replication.
  C. Use automated Export.
  D. Upgrade to Premium tier.
  E. Use point in time restore.
  F. Downgrade to Basic tier.
  B. Use active geo-replication.
  D. Upgrade to Premium tier.

  ---

  B: The Active Geo-Replication feature implements a mechanism to provide database redundancy within the same Microsoft Azure region or in different regions (geo-redundancy). One of the primary benefits of Active Geo-Replication is that it provides a database-level disaster recovery solution. Using Active Geo-Replication, you can configure a user database in the Premium service tier to replicate transactions to databases on different Microsoft Azure SQL Database servers within the same or different regions. Cross-region redundancy enables applications to recover from a permanent loss of a datacenter caused by natural disasters, catastrophic human errors, or malicious acts.

  D: Active Geo-Replication is available for databases in the Premium service tier only. http://msdn.microsoft.com/en-us/library/azure/dn741339.aspx

• Question 2:

  You have an Azure Virtual Network named fabVNet with three subnets named Subnet-1, Subnet-2 and Subnet-3. You have a virtual machine (VM) named fabVM running in the fabProd service. You need to modify fabVM to be deployed into

  Subnet-3. You want to achieve this goal by using the least amount of time and while causing the least amount of disruption to the existing deployment.

  What should you do? To answer, drag the appropriate Power Shell cmdlet to the correct location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes

  or scroll to view content.

  Select and Place:

  

  

• Question 3:

  You are developing a Windows Azure application in which a web role and worker role will communicate by using a Windows Azure Queue. You need to recommend an approach for ensuring that the worker role does not attempt to process

  any message more than three times.

  What should you recommend?

  A. Appropriately handle poison messages.
  B. Decrease the visibility timeout for messages.
  C. Reduce the time-to-live interval for messages in the queue.
  D. Increase the number of worker role instances reading messages from the queue.
  A. Appropriately handle poison messages.

  ---

  Poison message support Yes Yes To find "poison" messages in Windows Azure Queues, when dequeuing a message the application examines the DequeueCount property of the message. If DequeueCount is above a given threshold, the application moves the message to an application-defined "dead letter" queue.

• Question 4:

  Your company network includes an On-Premises Windows Active Directory (AD) that has a DNS domain named contoso.local and an email domain named contoso.com. You plan to migrate from On-Premises Exchange to Office 365.

  You configure DirSync and set all Azure Active Directory (Azure AD) usernames as %username%@contoso.com

  You need to ensure that each user is able to log on by using the email domain as the username.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Verify the email domain in Azure AD domains.
  B. Run the Set-MsolUserPrincipalName -UserPrincipalName %username%@contoso.onmicrosoft.com -NewUserPrincipalName %username %@contoso.com Power Shell cmdlet.
  C. Edit the ProxyAddress attribute on the On-Premises Windows AD user account.
  D. Verify the Windows AD DNS domain in Azure AD domains.
  E. Update the On-Premises Windows AD user account UPN to match the email address.
  A. Verify the email domain in Azure AD domains.
  B. Run the Set-MsolUserPrincipalName -UserPrincipalName %username%@contoso.onmicrosoft.com -NewUserPrincipalName %username %@contoso.com Power Shell cmdlet.

  ---

  If you have already set up Active Directory synchronization, the user's UPN may not match the user's on-premises UPN defined in Active Directory. To fix this, rename the user's UPN using the Set-MsolUserPrincipalName cmdlet in the

  Microsoft Azure Active Directory Module for Windows PowerShell.

  The email domain (Contoso.com) needs to be verified in Office 365.

  https://msdn.microsoft.com/en-us/library/azure/jj151786.aspx

• Question 5:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You use Azure Resource Manager (ARM) templates to deploy resources.

  You need to ensure that storage resources defined in templates cannot be deleted.

  Solution: You define the following JSON in the template.

  

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  As an administrator, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly.

  

  CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.

  

  ReadOnly means authorized users can read a resource, but they can't delete or update the resource.

  

  Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role. References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

• Question 6:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy a Kubernetes Azure Container Service cluster.

  You need to manage the cluster by using the Kubernetes command-line client.

  Solution: You run the following Azure Command-Line Interface (Azure CLI) command:

  az provider register -n Microsoft.ContainerService

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  The az provider register command registers a provider.

  Instead, the az acs dcos install-cli command is used to download and install the DC/OS command-line tool for a cluster.

  References: https://docs.microsoft.com/en-us/cli/azure/acs?view=azure-cli-latest

• Question 7:

  An organization has several web applications and uses Azure Active Directory (Azure AD).

  You are developing a new web application that supports sign-on using the WS-Federation to Azure AD.

  You need to describe the authentication process flow to your team.

  In which order are the actions performed? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order

  Select and Place:

  

  

  ---

  References: https://azure.microsoft.com/en-gb/documentation/articles/active-directory-authenticationscenarios/

• Question 8:

  You are the global administrator for a company's Azure subscription. The company uses Azure Active Directory Premium and the Application Access Panel. You are configuring access to a Software as a Service (SaaS) application.

  You need to ensure that the sales team lead is able to manage user access to the application but is unable to modify administrative access to the application.

  In the Azure portal, what should you do?

  A. Create an Azure group and assign it to the SaaS application. Create an Azure user with the User Admin role, and assign the user as the owner of the new group.
  B. Create an Azure group and assign it to the SaaS application. Create an Azure user with the Service Admin role, and assign the user as the owner of the new group.
  C. Set the values of the Delegated group management and Users can create groups settings to Enabled.
  D. Create an Azure group and assign it to the SaaS application. Create an Azure user with the Global Admin role, and assign the user as the owner of the new group.
  A. Create an Azure group and assign it to the SaaS application. Create an Azure user with the User Admin role, and assign the user as the owner of the new group.

• Question 9:

  You deploy a Web App to Azure. The Web App uses several Basic tier, single instance virtual machines (Vms).

  The App includes a web tier, services tier, data tier, and a compute-intensive processing tier, as shown in the following diagram:

  

  You have the following requirements:

  Users report application outages during planned Azure maintenance windows. You plan to upgrade the application to support upcoming company initiatives as well as address the user reports.

  You need to upgrade the application and infrastructure.

  For each tier, which action should you perform? To answer, select the appropriate action from each list in the answer area.

  Hot Area:

  

  

  ---

  Web tier: Use 2 Standard tier VMs in a new availability set, load balanced with Azure Load Balancer.

  The web tier must support high volumes of incoming Internet traffic during peak times throughout the year.

  Services: Use 2 Standard Tier VM in a new availability set.

  Data: Use 2 Standard tier VMs contained within the services tier availability set.

  Processing: Use 2 Dv2-series Vms in a new scale set.

  The processing tier must support high volume CPU loads at peak times throughout the year.

  Dv2-series, a follow-on to the original D-series, features a more powerful CPU. The Dv2-series CPU is about 35% faster than the D-series CPU.

  Automatic scaling of virtual machines in a scale set is the creation or deletion of machines in the set as needed to match performance requirements. As the volume of work grows, an application may require additional resources to enable it to effectively perform tasks.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/virtual-machines-windows-sizes

  https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview

• Question 10:

  You manage a cloud service that is running in two small instances. The cloud service hosts a help desk application. The application utilizes a virtual network connection to synchronize data to the company's internal accounting system.

  You need to reduce the amount of time required for data synchronization.

  What should you do?

  A. Configure the servers as large instances and re-deploy.
  B. Increase the instance count to three.
  C. Deploy the application to Azure Web Sites.
  D. Increase the processors allocated to the instances.
  A. Configure the servers as large instances and re-deploy.

  ---

  When you create your service model, you can specify the size to which to deploy an instance of your role, depending on its resource requirements. The size of the role determines the number of CPU cores, the memory capacity, and the local file system size that is allocated to a running instance.

  References: http://msdn.microsoft.com/en-us/library/azure/dn197896.aspx