Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 101:

  You migrate a Windows Server .NET web application to Azure Cloud Services.

  You need enable trace logging for the application.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Update the service definition file.
  B. Update the Azure diagnostics configuration.
  C. Update the service configuration file.
  D. Enable verbose monitoring.
  E. Update the application web.config file.
  A. Update the service definition file.
  B. Update the Azure diagnostics configuration.

  ---

  A: Step 1 section:

  "diagnostics monitor is imported into a role by specifying an Import element with a module Name of "Diagnostics" in the Imports section of the service definition file"

  B: Step 2 explain how to add the diagnostic file in the solution and step 3 how to configure it.

  https://msdn.microsoft.com/en-us/library/azure/Dn482131.aspx#BKMK_step5

  http://msdn.microsoft.com/en-us/library/azure/ee758711.aspx

  http://msdn.microsoft.com/en-us/magazine/ff714589.aspx

• Question 102:

  DRAG DROP

  You administer an Azure SQL database named contosodb that is running in Standard/S1 tier. The database is in a server named server1 that is a production environment. You also administer a database server named server2 that is a test

  environment. Both database servers are in the same subscription and the same region but are on different physical clusters.

  You need to copy contosodb to the test environment.

  Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References: https://azure.microsoft.com/en-gb/documentation/articles/sql-database-export/

• Question 103:

  You manage a collection of large video files that is stored in an Azure Storage account.

  A user wants access to one of your video files within the next seven days.

  You need to allow the user access only to the video file, and then revoke access once the user no longer needs it.

  What should you do?

  A. Give the user the secondary key for the storage account. Once the user is done with the file, regenerate the secondary key.
  B. Create an Ad-Hoc Shared Access Signature for the Blob resource. Set the Shared Access Signature to expire in seven days.
  C. Create an access policy on the container. Give the external user a Shared Access Signature for the blob by using the policy. Once the user is done with the file, delete the policy.
  D. Create an access policy on the blob. Give the external user access by using the policy. Once the user is done with the file, delete the policy.
  C. Create an access policy on the container. Give the external user a Shared Access Signature for the blob by using the policy. Once the user is done with the file, delete the policy.

  ---

  By default, only the owner of the storage account may access blobs, tables, and queues within that account. If your service or application needs to make these resources available to other clients without sharing your access key, you have the following options for permitting access:

  References: https://azure.microsoft.com/en-us/documentation/articles/storage-dotnet-shared-access-signature-part-1/

• Question 104:

  DRAG DROP

  You plan to deploy a cloud service named contosoapp. The service includes a web role named contosowebrole. The web role has an endpoint named restrictedEndpoint.

  You need to allow access to restricted Endpoint only from your office machine using the IP address 145.34.67.82.

  Which values should you use within the service configuration file? To answer, drag the appropriate value to the correct location in the service configuration file. Each value may be used once, more than once, or not at all. You may need to

  drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  * Rule with lower order are applied first.

  * We can selectively permit or deny network traffic (in the management portal or from PowerShell) for a virtual machine input endpoint by creating rules that specify “permit” or “deny”. By default, when an endpoint is created, all traffic is permitted to the endpoint. So for that reason, it's important to understand how to create permit/deny rules and place them in the proper order of precedence to gain granular control over the network traffic that you choose to allow to reach the virtual machine endpoint. Note that at the instant you add one or more “permit” ranges, you are denying all other ranges by default. Moving forward from the first permit range, only packets from the permitted IP range will be able to communicate with the virtual machine endpoint.

• Question 105:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company plans to use Azure Automation.

  Automation runbooks must be started from a single HTTP request.

  You need to create the automation design.

  Solution: You start a runbook by using Windows PowerShell.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  The Windows PowerShell option does not allow for a runbook to be started from a single HTTP request. References: https://docs.microsoft.com/en-us/azure/automation/automation-starting-a-runbook

• Question 106:

  You have an Azure subscription that has five virtual machines (VMs). You provision the VMs in an availability set to support an existing web service.

  You anticipate additional traffic. You identify the following additional requirements for the VMs:

  

  disk size 500 GB

  

  IOPS per disk: 2000

  

  throughput per disk 100 MB per second

  

  number of highly utilized disks: 40

  You need to scale the service.

  What should you recommend?

  A. P10 Premium Storage
  B. P20 Premium Storage
  C. Basic Tier VM
  D. Standard Tier VM
  B. P20 Premium Storage

  ---

  https://azure.microsoft.com/en-gb/documentation/articles/storage-premium-storage/#premium-storage-scalability-and-performance-targets

• Question 107:

  DRAG DROP

  You administer an Azure Virtual Machine (VM) named server1. The VM is in a cloud service named ContosoService1.

  You discover that the VM is experiencing storage issues due to increased application logging on the server.

  You need to create a new 256-GB disk and attach it to the server.

  Which Power Shell cmdlets should you use? To answer, drag the appropriate cmdlet to the correct location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar

  between panes or scroll to view content.

  Select and Place:

  

  

  ---

  

  This example gets a virtual machine object for the virtual machine named “MyVM” in the “myservice” cloud service, updates the virtual machine object by attaching an existing data disk from the repository using the disk name, and then updates the Azure virtual machine. Windows PowerShell C:\PS>Get-AzureVM "myservice" -Name "MyVM" `| Add-AzureDataDisk -Import -DiskName "MyExistingDisk" -LUN 0 `| Update-AzureVM References: http://msdn.microsoft.com/en-us/library/dn495298.aspx

• Question 108:

  You deploy a web application to an Azure Cloud Service. The application uses a storage account that contains a large number of storage objects.

  You need to grant clients access to application data for a specified interval of time while minimizing effort.

  What should you create?

  A. a stored access policy
  B. a service shared access signature
  C. an account shared access signature
  D. a network security group
  C. an account shared access signature

  ---

  https://azure.microsoft.com/en-gb/documentation/articles/storage-dotnet-shared-access-signature-part-1/

• Question 109:

  Your network environment includes remote employees.

  You need to create a secure connection for the remote employees who require access to your Azure virtual network.

  What should you do?

  A. Deploy Windows Server 2012 RRAS.
  B. Configure a point-to-site VPN.
  C. Configure an ExpressRoute.
  D. Configure a site-to-site VPN.
  B. Configure a point-to-site VPN.

  ---

  New Point-To-Site Connectivity

  With today's release we've added an awesome new feature that allows you to setup VPN connections between individual computers and a Windows Azure virtual network without the need for a VPN device. We call this feature Point-to-Site VirtualPrivate Networking. This feature greatly simplifies setting up secure connections between Windows Azure and client machines, whether from your office environment or from remote locations. It is especially useful for developers who want to connect to a Windows Azure Virtual Network (and to the individual virtual machines within it) from either behind their corporate firewall or a remote location. Because it is point-to-site they do

  not need their IT staff to perform any activities to enable it, and no VPNhardware needs to be installed or configured. Instead you can just use the built-in Windows VPN client to tunnel to your Virtual Network in Windows Azure. References: http://www.ditii.com/windows-azure-sdk-for-ruby-improvements-to-virtual-networks-vms-cloud-services/61871/

• Question 110:

  A company uses Azure to host virtual machines (VMs) and web apps.

  A line of business (LOB) application that runs on a VM uses encrypted storage.

  You need to ensure that the VMs support the LOB application.

  What should you do?

  A. Run the Set-AzureRmVMDiskEncryptionExtension Azure PowerShell cmdlet.
  B. Run the Test-AzureRmVMAEMExtention Azure PowerShell cmdlet.
  C. Run the Add- AzureRmVMSshPublicKey Azure PowerShell cmdlet.
  D. Create a security policy from the Azure Security Manager.
  A. Run the Set-AzureRmVMDiskEncryptionExtension Azure PowerShell cmdlet.

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/azurerm.compute/set-azurermvmdiskencryptionextension?view=azurermps-4.4.1