Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 201:

  HOTSPOT

  You are an Azure subscription administrator for your company.

  Management asks you to add a contractor named User1 with a Microsoft account of [email protected] to manage DNS records but have no other permissions. The contractor is not in your Azure Active Directory (Azure AD) but must be able to manage all of the DNS records in the Adatum zone. The Adatum zone is in the ITManaged Resource Group.

  You need to add the contractor.

  How should you configure the environment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  Box 1: DNS Zone Contributor The 'DNS Zone Contributor' role is a built-in role provided by Azure for managing DNS resources. Assigning DNS Zone Contributor permissions to a user or group enables that group to manage DNS resources, but not resources of any other type.

  Box 2: Add [email protected] The simplest way to assign RBAC permissions is via the Azure portal. Open the 'Access control (IAM)' blade for the resource group, then click 'Add', then select the 'DNS Zone Contributor' role and select the required users or groups to grant permissions. You can search the directory with display names, email addresses, and object identifiers.

  References: https://docs.microsoft.com/en-us/azure/dns/dns-protect-zones-recordsets

• Question 202:

  A company has an Azure subscription and hosts a virtual network in the cloud. The company uses authenticated web proxies on their local network.

  You need to grant two specific users on the local network access to the virtual network.

  Which three steps must you perform on the two local machines? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Upload an X.509 certificate to the virtual network.
  B. Configure multifactor access control on the virtual network.
  C. Enable Direct Access on the local devices.
  D. Create an exception to the authentication proxy.
  E. Download and install the VPN client package from the Azure Management Portal.
  F. Install an X.509 certificate on the local devices.
  D. Create an exception to the authentication proxy.
  E. Download and install the VPN client package from the Azure Management Portal.
  F. Install an X.509 certificate on the local devices.

  ---

  References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-classic-azure-portal

• Question 203:

  You are an administrator for your company's Azure environment.

  A developer creates an application that needs to access resources in external systems. The application will be deployed in the domain.

  You need to authenticate the Active Directory application.

  What should you implement?

  A. a certificate and a service principal
  B. a certificate and a service account
  C. a single sign-on and a service principal
  D. a service account and a service principal
  A. a certificate and a service principal

• Question 204:

  You federate your on-premises Active Directory with Azure Active Directory (Azure AD) by using Active Directory Federations Services (AD FS) 2.0. You plan to secure cloud and onpremises resources by using an Azure Multi-Factor Authentication (MFA) server. You install the MFA server on the AD FS proxy server. You configure the MFA server and successfully import all AD users into the MFA user database.

  Development teams in your organization must be able to secure their non-browser based apps.

  You need to document the authentication mechanisms.

  For each requirement, which authentication mechanism is used. To answer, select the appropriate authentication mechanism from each list in the answer area.

  Hot Area:

  

  

  ---

  Securing Azure AD resources using Azure MFA

  First factor: performed on-premises using AD FS.

  Second factor: phone-based method carried out using cloud authentication.

  Securing Azure AD resources using Active Directory FS

  First factor: performed on-premises using AD FS.

  Second factor: performed on-premises by honoring the claim.

  References:

  https://docs.microsoft.com/en-us/azure/multi-factor-authentication/multi-factor-authentication-get-started-adfs

• Question 205:

  DRAG DROP

  You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named ContosoService1.

  You discover unauthorized traffic to CON-CL1. You need to:

  Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet or value to the correct location in the Power Shell command. Each cmdlet or value may be used once, more than once, or not at all. You

  may need to drag the split bat between panes or scroll to view content.

  Select and Place:

  

  

  ---

  * Example 1

  This example uses two commands:

  The first command creates a new ACL object and stores it in a variable named $acl1.

  The second command updates the ACL object with a rule that permits incoming network traffic only from remote subnet 10.0.0.0/8.

  Windows PowerShell

  PS C:\> $acl1 = New-AzureAclConfigC:\PS> Set-AzureAclConfig –AddRule –ACL $acl1 –Order 100 –Action permit –RemoteSubnet “10.0.0.0/8” –*Parameter: -Order

  Specifies the relative order in which this rule should be processed compared to the other rules applied to the ACL object. The lowest order takes precedence. 0 is allowed.

  References:

  http://msdn.microsoft.com/en-us/library/dn495192.aspx

  http://blogs.technet.com/b/heyscriptingguy/archive/2013/08/31/weekend-scripter-creatingacls-for-windows-azure-endpoints-part-1-of-2.aspx

• Question 206:

  HOTSPOT

  You are configuring auto-scaling for a virtual machine (VM). The following excerpt is the rules portion of a resource template.

  

  Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  Box 1: No Here the performance counter is Thread Count, the threshold value is 800 for a scale-out action. If you use a counter such as %Processor Time, the threshold value is set to the percentage of CPU usage that determines a scaling action.

  Box 2: created The direction value determines the action that is taken when the threshold value is achieved. The possible values are Increase or Decrease.

  References: https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview.md

• Question 207:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage an Azure SQL Database. The database has weekly backups that are stored in an Azure Recovery Services vault.

  You need to maximize the time that previous backup versions are stored.

  Solution: You configure a retention policy that is set to 20 years.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Store Azure SQL Database backups for up to 10 years.

  Many applications have regulatory, compliance, or other business purposes that require you to retain database backups beyond the 7-35 days provided by Azure SQL Database automatic backups. By using the long-term backup retention

  feature, you can store your SQL database backups in an Azure Recovery Services vault for up to 10 years.

  References: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-long-term-retention

• Question 208:

  You plan to use Azure Monitor with AutoScale Services. You create a URI to be used with the monitoring service.

  You need to configure an alert that specifies the URI.

  Which Azure Command-Line Interface (CLI) command or Azure PowerShell cmdlet should you run?

  A. New-AzureRmAlertRuleEmail
  B. azure insights logprofile add
  C. azure insights alerts actions webhook create
  D. azure insights alerts rule list
  C. azure insights alerts actions webhook create

  ---

  References: https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/insights-autoscale-to-webhook-email

• Question 209:

  A company plans to store data for the accounting and human resources departments in azure storage accounts. You have the following requirements:

  

  Data for both departments must be encrypted when stored

  

  The accounting department must be able to query each object to verify that it is encrypted.

  

  The human resources department must be able to switch access tiers at any time.

  Which storage types shroud you use?

  A. Blob storage
  B. file storage
  C. table storage
  D. queue storage
  A. Blob storage

  ---

  Blob storage can switch tiers.

  To verify encryption is enabled for their storage accounts, customers can either query the status of encrypted data for blobs and file (not available for table and queue storage), or check account properties. https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

• Question 210:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company has an Azure subscription and plans to deploy virtual machines (VMs).

  The company needs to use an Azure Active Directory Domain Services (Azure AD DS) domain with the VMs.

  You need to ensure that you can join the VMs to the Azure AD DS domain.

  Solution: Install AD DS on an Azure VM.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No