Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 151:

  Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review scree.

  You create an Ubuntu Linux virtual machine (VM) by using the Azure Portal. You do not specify a password when you create the VM.

  You need to connect to the terminal of the VM.

  Solution: You connect to the public IP address of the VM by using Secure Shell (SSH) and specify your public key.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Enter the virtual machine information. For Authentication type, select SSH public key. When pasting in your SSH public key, take care to remove any leading or trailing white space. When complete, click OK.

  

  References: https://docs.microsoft.com/en-us/azure/virtual-machines/virtual-machines-linux-quick-create-portal?toc=%2fazure%2fvirtual-machines%2flinux%2ftoc.json

• Question 152:

  HOTSPOT

  You have an Azure subscription that contains two Azure SQL Database servers named lpqd0zbr8y and bk0b8kf65. lpqd0zbr8y contains a database named Orders.

  You need to implement active geo-replication for the Orders database.

  Which command should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 153:

  You administer a Windows Server virtual machine (VM).

  You upload the VM to Azure.

  You need to ensure that you are able to deploy the BGInfo and VMAccess extensions.

  What should you do?

  A. Select the Install the VM Agent checkbox while provisioning a VM based on your uploaded VHD.
  B. Select the Enable the VM Extensions checkbox while provisioning a VM based on your uploaded VHD.
  C. Install the VM Agent MSI and execute the following Power Shell commands:$vm = Get-AzureVM -serviceName $svc -Name $name$vm.VM.ProvisionGuestAgent = $trueUpdate-AzureVM -Name Sname -VM $vm.VM -ServiceName $svc
  D. Install the VM Agent MSI and execute the following Power Shell commands:$vm = Get-AzureVM -serviceName $svc -Name $nameSet-AzureVMBGInfoExtension -VM $vm.VMSet-AzureVM Access Extension -VM $vm.VMUpdate-AzureVM -Name Sname -VM $vm.VM -ServiceName $svc
  C. Install the VM Agent MSI and execute the following Power Shell commands:$vm = Get-AzureVM -serviceName $svc -Name $name$vm.VM.ProvisionGuestAgent = $trueUpdate-AzureVM -Name Sname -VM $vm.VM -ServiceName $svc

• Question 154:

  You are the Azure administrator for your company. The company has developed a mobile application used to support sales people in the field.

  The application uses Azure Active Directory (Azure AD) accounts for authentication. The application sends and receives HTTP requests on publicly accessible endpoints.

  You need to provide the ability to authenticate the application using Azure.

  Which tool should you use?

  A. OAuth 2.0 authorization code grant
  B. Azure AD Connect
  C. Azure Portal
  D. Azure AD Graph API
  A. OAuth 2.0 authorization code grant

  ---

  Azure Active Directory (Azure AD) uses OAuth 2.0 to enable you to authorize access to web applications and web APIs in your Azure AD tenant.

  Note: The authorization code grant type is used to obtain both access tokens and refresh tokens and is optimized for confidential clients. Since this is a redirection-based flow, the client must be capable of interacting with the resource owner's user-agent (typically a web browser) and capable of receiving incoming requests (via redirection) from the authorization server. https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-code https://tools.ietf.org/html/rfc6749#section-4.1

• Question 155:

  Your network includes a legacy application named LegacyApp1. The application only runs in the Microsoft .NET 3.5 Framework on Windows Server 2008.

  You plan to deploy to Azure Cloud Services.

  You need to ensure that LegacyApp1 will run correctly in the new environment.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  A. Upload a VHD with Windows Server 2008 installed.
  B. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 2.
  C. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 1.
  D. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 3.
  A. Upload a VHD with Windows Server 2008 installed.
  B. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 2.

  ---

  B: Guest OS Family 3 and Guest OS Family 4 supports .NET 4.0 and .Net 4.5.

• Question 156:

  You have an application that needs to use single sign-on (SSO) between the company's Azure Active Directory (Azure AD) and the on-premises Windows Server 2012 R2 Active Directory. You configure the application to use Integrated

  Windows Authentication (IWA). You install an Application Proxy connector in the same domain as the server that is publishing the application.

  You need to configure the published application in Azure AD to enable SSO.

  What should you do?

  A. Set the external authentication method to IWA.
  B. Set the preauthenticated method to Pass through.
  C. Set the internal authentication method to IWA.
  D. Enable an access rule to require Multi-Factor Authentication.
  C. Set the internal authentication method to IWA.

  ---

  https://docs.microsoft.com/en-us/azure/active-directory/active-directory-application-proxy-sso-using-kcd

• Question 157:

  You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet which is used for testing a line of business (LOB) application. The application is deployed to a VM named TestWebServiceVM. You need to ensure that TestWebServiceVM always starts by using the same IP address. You need to achieve this goal by using the least amount of administrative effort.

  What should you do?

  A. Use the Management Portal to configure TestWebServiceVM.
  B. Use RDP to configure TestWebServiceVM.
  C. Run the Set-AzureStaticVNetIP PowerShell cmdlet.
  D. Run the Get-AzureReservedIP PowerShell cmdlet.
  C. Run the Set-AzureStaticVNetIP PowerShell cmdlet.

  ---

  Specify a static internal IP for a previously created VM

  If you want to set a static IP address for a VM that you previously created, you can do so by using the following cmdlets. If you already set an IP address for the VM and you want to change it to a different IP address, you'll need to remove the

  existing static IP address before running these cmdlets. See the instructions below to remove a static IP. For this procedure, you'll use the Update-AzureVM cmdlet. The Update-AzureVM cmdlet restarts the VM as part of the update process.

  The DIP that you specify will be assigned after the VM restarts. In this example, we set the IP address for VM2, which is located in cloud service StaticDemo.

  Get-AzureVM -ServiceName StaticDemo -Name VM2 | Set-AzureStaticVNetIP -IPAddress 192.168.4.7 | Update-AzureVM

  References: http://msdn.microsoft.com/en-us/library/azure/dn630228.aspx

• Question 158:

  DRAG DROP

  You manage an application hosted on cloud services. The development team creates a new version of the application. The updated application has been packaged and stored in an Azure Storage account.

  You have the following requirements:

  Which four steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Once you have uploaded the compiled package to Azure Storage, you would create a new staging deployment. You can then provide the URL to the development team. Once approved, you would promote the new deployment to production

  by performing a VIP swap. You can then stop the instance of the old production deployment and keep it at hand in the staging slot.

  References:

  http://msdn.microsoft.com/en-us/library/ff803371.aspx

• Question 159:

  You manage an application that has a front-end tier, a middle tier, and a back-end tier. Each tier is located on a different subnet. You need to apply access to and between the tiers as follows:

  

  Only the front-end tier must be able to access the Internet.

  

  You must permit network access between the front-end tier and the middle tier.

  

  You must permit network access between the middle tier and the back-end tier.

  You must prevent all other network traffic.

  You need to apply this configuration to all virtual machines inside the subnets.

  What should you do?

  A. Use a Network Security Group (NSG).
  B. Add a VPN gateway.
  C. Add a regional VNET.
  D. Add an Availability Set.
  A. Use a Network Security Group (NSG).

  ---

  A network security group (NSG) contains a list of security rules that allow or deny network traffic to resources connected to Azure Virtual Networks (VNet). NSGs can be associated to subnets, individual VMs (classic), or individual network interfaces (NIC) attached to VMs (Resource Manager). When an NSG is associated to a subnet, the rules apply to all resources connected to the subnet. Traffic can further be restricted by also associating an NSG to a VM or NIC.

  Incorrect Answers:

  D: An Availability Set is a logical grouping capability that you can use in Azure to ensure that the VM resources you place within it are isolated from each other when they are deployed within an Azure datacenter. Azure ensures that the VMs you place within an Availability Set run across multiple physical servers, compute racks, storage units, and network switches. If a hardware or Azure software failure occurs, only a subset of your VMs are impacted, and your overall application stays up and continues to be available to your customers. Availability Sets are an essential capability when you want to build reliable cloud solutions. https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-nsg https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets

• Question 160:

  A company is developing a new on-premises desktop application.

  The app must be able to access Azure Active Directory (Azure AD) in addition to the on-premises Active Directory. You need to configure the application.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Install and run Azure AD Connect
  B. Add an application manifest JSON file to the application and configure the oauth2Permissions section.
  C. Update the application to be multi-tenant.
  D. Update the application to use OAuth 2.0 authentication.
  E. In the Azure Management portal, register the application.
  A. Install and run Azure AD Connect
  E. In the Azure Management portal, register the application.