Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 121:

  You administer an Access Control Service namespace named contosoACS that is used by a web application. ContosoACS currently utilizes Microsoft and Yahoo accounts.

  Several users in your organization have Google accounts and would like to access the web application through ContosoACS.

  You need to allow users to access the application by using their Google accounts.

  What should you do?

  A. Register the application directly with Google.
  B. Edit the existing Microsoft Account identity provider and update the realm to include Google.
  C. Add a new Google identity provider.
  D. Add a new WS-Federation identity provider and configure the WS-Federation metadata to point to the Google sign-in URL.
  C. Add a new Google identity provider.

  ---

  Configuring Google as an identity provider eliminates the need to create and manage authentication and identity management mechanism. It helps the end user experience if there are familiar authentication procedures. http://msdn.microsoft.com/en-us/library/azure/gg185976.aspx

• Question 122:

  You are developing a web application that connects to an existing virtual network. The web application needs to access a database that runs on a virtual machine.

  In the Azure portal, you use the virtual network integration user interface to select from a list of virtual networks. The virtual network that the web application needs to connect to is not selectable.

  You need to update the existing virtual network so you can connect to it.

  What should you do?

  A. Enable ExpressRoute.
  B. Enable point-to-site VPN with a static routing gateway.
  C. Enable point-to-site VPN with a dynamic routing gateway.
  D. Enable site-to-site VPN.
  C. Enable point-to-site VPN with a dynamic routing gateway.

  ---

  References: https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

• Question 123:

  You administer an Azure Active Directory (Azure AD) tenant.

  You add a custom application to the tenant.

  The application must be able to:

  In the table below, identify the permission that must be granted to the application. Make only one selection in each column.

  Hot Area:

  

  

  ---

  You can select from two types of permissions in the drop-down menus next to the desired Web API:

  * Application Permissions: Your client application needs to access the Web API directly as itself (no user context). This type of permission requires administrator consent and is also not available for Native client applications.

  * Delegated Permissions: Your client application needs to access the Web API as the signed-in user, but with access limited by the selected permission. This type of permission can be granted by a user unless the permission is configured as

  requiring administrator consent.

  References: https://azure.microsoft.com/en-us/documentation/articles/active-directoryintegrating-applications/

• Question 124:

  You are an administrator for an Azure subscription that is used by your company.

  You have an Azure Web App that contains static content accessed by users. You plan to deliver content based on geographic location. The solution must allow clients to connect to a URL that ends in your corporate domain name of

  adatum.com. You must use the information provided by the portal for your on-premises modifications.

  You need to implement the components in Azure to support the above requirements.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  https://docs.microsoft.com/en-us/azure/cdn/cdn-create-new-endpoint https://docs.microsoft.com/en-us/azure/cdn/cdn-map-content-to-custom-domain

• Question 125:

  DRAG DROP

  You deploy resources to Azure by using both the classic portal and Azure Resource Manager.

  You need to back up each resource type to Azure.

  Which backup methods should you use? To answer, drag the appropriate backup methods to the correct deployment types. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Classical portal: Azure StorSimple Azure StorSimple, an integrated storage solution that manages storage tasks between on-premises devices and Microsoft Azure cloud storage. Resource Manager: Recovery Services vault A Recovery Services vault is an entity that stores all the backups and recovery points you create over time. The Recovery Services vault also contains the backup policy applied to the protected files and folders. When you create a Recovery Services vault, you should also select the appropriate storage redundancy option.

  References: https://docs.microsoft.com/en-us/azure/backup/backup-configure-vault

• Question 126:

  HOTSPOT

  A company uses Azure to host virtual machines (VMs) and web apps.

  Storage Analytics data for the web apps must be kept as long as possible. The solution must not result in additional costs.

  You need to configure a storage policy for the analytics data.

  How should you configure the policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  Box 1: retention There are two ways to delete Storage Analytics data: by manually making deletion requests or by setting a data retention policy. Manual requests to delete Storage Analytics data are billable, but delete requests resulting from a retention policy are not billable. To avoid unnecessary charges, set a retention policy for logging and metrics. Note: By default, Storage Analytics will not delete any logging or metrics data. Blobs and table entities will continue to be written until the shared 20TB limit is reached. Once the 20TB limit is reached, Storage Analytics will stop writing new data and will not resume until free space is available.

  Box 2: 365 You can configure two data retention policies: one for logging and one for metrics. When enabled for both, Storage Analytics will delete logs and table entries older than the specified number of days. The maximum retention period is 365 days (1 year).

  References: https://docs.microsoft.com/en-us/rest/api/storageservices/Setting-a-Storage-Analytics-Data-Retention-Policy

• Question 127:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You use Azure Resource Manager (ARM) templates to deploy resources.

  You need to ensure that storage resources defined in templates cannot be deleted.

  Solution: You define the following JSON in the template.

  

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  As an administrator, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or

  ReadOnly.

  ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.

  CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.

  References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

• Question 128:

  DRAG DROP

  A company plans to store data for the accounting and human resources departments in Azure storage accounts.

  You have the following requirements:

  Data for both departments must be encrypted when stored.

  The accounting department must be able to query each object to verify that it is encrypted.

  The human resources department must be able to switch access tiers at any time.

  You need to configure the storage encryption.

  Which storage typed should you use? To answer, drag the appropriate storage type to the correct department. Each storage type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  References: https://docs.microsoft.com/en-us/azure/cosmos-db/table-storage-overview https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

• Question 129:

  You have an Azure subscription that has a virtual machine named VM1. VM1 runs a line-of-business application named APP1.

  You create two additional virtual machines named VM2 and VM3 to host APP1

  You need to ensure that there is always at least one virtual machine online to host App1.

  Which command should you run? To answer, select the appropriate options in the answer area.

  A. Export-AzureVM
  B. Get-AzureaffinityGroup
  C. Get-AzureEndPoint
  D. Get-AzureVM
  D. Get-AzureVM

  ---

  The Get-AzureVM cmdlet retrieves information about virtual machines running in Azure. It returns an object with information on a specific virtual machine, or if no virtual machine is specified, for all the virtual machines in the specified service of the current subscription.

  Reference: https://msdn.microsoft.com/fr-fr/library/azure/dn495236.aspx

• Question 130:

  You are designing a Windows Azure web application.

  The application will be accessible at a standard cloudapp.net URL. You need to recommend a DNS resource record type that will allow you to configure access to the application through a custom domain name.

  Which type should you recommend?

  A. A
  B. CNAME
  C. MX
  D. SRV
  B. CNAME

  ---

  You can use either a CNAME record or an A record to map a custom DNS name to App Service.

  We [Microsoft] recommend that you use a CNAME for all custom DNS names except a root domain

  References: https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain