Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 261:

  Your company plans to migrate from On-Premises Exchange to Office 365.

  The existing directory has numerous service accounts in your On-Premises Windows Active Directory (AD), stored in separate AD Organizational Units (OU) for user accounts.

  You need to prevent the service accounts in Windows AD from syncing with Azure AD.

  What should you do?

  A. Create an OU filter in the Azure AD Module for Windows PowerShell.
  B. Configure directory partitions in miisclient.exe.
  C. Set Active Directory ACLs to deny the DirSync Windows AD service account MSOL_AD_SYNC access to the service account OUs.
  D. Create an OU filter in the Azure Management Portal.
  B. Configure directory partitions in miisclient.exe.

  ---

  One customer, who was looking for OU level filtering to import selected users from On-Premises active directory to Office365. Configure OU level filtering for Office365 directory synchronization.

  1.

  Logged in to your Domain controller

  2.

  Created an OU (Organisational Unit) from your AD (Active Directory) a. In my case I named it "DirSync"

  3.

  Move all those users you want to sync, to that DirSync OU.

  4.

  From your DirSync Server navigate to \Program Files\Microsoft Online Directory Sync\SYNCBUS\Synchronization Service\UIShell

  5.

  Double click on miisclient.exe

  6.

  This opens a console something similar to the below screen capture

  7.

  Identity Manager, click Management Agents, and then double-click SourceAD.

  8.

  Click Configure Directory Partitions, and then click Containers, as shown in the below screen capture.

  9.

  Click OK on the SourceAD Properties page.

  10.

  Perform a full sync: on the Management Agent tab, right-click SourceAD, click Run, click Full Import Full Sync, and then click OK. Etc References: http://blogs.msdn.com/b/denotation/archive/2012/11/21/installing-and-configure-dirsync-with-ou-level-filtering-for-office365.aspx

  

  

• Question 262:

  A company plans to integrate Azure Active Directory and google apps using single sign-on (SSO). You need to configure the federation and demonstrate (SSO) with an account named User1. Which three actions should you perform in sequence?

  A. Configure sso in the google apps admin console
  B. Assign an azure ad premium license to user1
  C. Create user1 and add the security assignment
  D. Add the google apps application from the gallery.
  A. Configure sso in the google apps admin console
  C. Create user1 and add the security assignment
  D. Add the google apps application from the gallery.

  ---

  Steps involved consists of two main building blocks:

  1.

  Adding G Suite from the gallery (D)

  2.

  Configuring and testing Azure AD single sign. (C + A)

  References: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-google-apps-tutorial

• Question 263:

  You plan to use Azure Monitor with AutoScale Services. You create a URI to be used with the monitoring service.

  You need to configure an alert that specifies the URI.

  Which Azure Command-Line Interface (CLI) command or Azure PowerShell cmdlet should you run?

  A. New-AzureRmAlertRuleEmail
  B. azure insights logprofile add
  C. New-AzureRmAlertRuleWebhook
  D. New-AzureRmAutoscaleRule
  C. New-AzureRmAlertRuleWebhook

  ---

  The New-AzureRmAlertRuleWebhook cmdlet creates an alert rule webhook.

  Syntax:

  New-AzureRmAlertRuleWebhook

  [-ServiceUri]

  [[-Properties] ]

  []

  Example: Create an alert rule webhook

  New-AzureRmAlertRuleWebhook -ServiceUri "http://contoso.com"

  This command creates an alert rule webhook by specifying only the service URI.

  Incorrect Answers:

  A: The New-AzureRmAlertRuleEmail cmdlet creates an e-mail action for an alert rule.

  Syntax: New-AzureRmAlertRuleEmail [[-CustomEmails] ] [-SendToServiceOwners] []

  B: The azure insights logprofile add command adds a log profile. Example: Add a log profile without retention azure insights logprofile add --name default --storageId /subscriptions/1a66ce04-b633-4a0b-b2bc-a912ec8986a6/resourceGroups/insights-integration/providers/Microsoft.Storage/storageAccounts/insightsintegration7777 --locations global,westus,eastus,northeurope,westeurope

  D: The New-AzureRmAutoscaleRule cmdlet creates an Autoscale rule.

  References: https://docs.microsoft.com/en-us/powershell/module/azurerm.insights/new-azurermalertrulewebhook?view=azurermps-4.3.1

• Question 264:

  DRAG DROP

  You have a virtual network and virtual machines that use the Resource Manager deployment model.

  You plan to create a Network Security Group (NSG). You must apply rules to both inbound and outbound traffic.

  You need to create the NSG.

  In which order will the rules be applied to the virtual network? To answer, drag the appropriate option to the correct location. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or

  scroll to view content.

  Select and Place:

  

  

  ---

  References: https://azure.microsoft.com/en-gb/documentation/articles/virtual-networks-nsg/

• Question 265:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company has deployed web apps by using Azure Active Directory (Azure AD) Application Proxy. The company plans to enable multi-factor authentication for the web apps. All users have Microsoft Exchange Online email accounts using

  Office 365.

  You need to ensure that users in Azure AD and on-premises Active Directory Domain Services (AD DS) can authenticate with the web apps.

  Solution: You deploy Office 365 Multi-Factor Authentication for Exchange Online.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 266:

  Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review scree.

  You create an Ubuntu Linux virtual machine (VM) by using the Azure Portal. You do not specify a password when you create the VM.

  You need to connect to the terminal of the VM.

  Solution: You connect to the public IP address of the VM by using Secure Shell (SSH) and specify your private key.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Enter the virtual machine information. For Authentication type, select SSH public key. When pasting in your SSH public key, take care to remove any leading or trailing white space. When complete, click OK.

  

  References: https://docs.microsoft.com/en-us/azure/virtual-machines/virtual-machines-linux-quick-create-portal?toc=%2fazure%2fvirtual-machines%2flinux%2ftoc.json

• Question 267:

  HOTSPOT

  You deploy an ASP.NET application to an Azure Cloud Service.

  You must collect telemetry data for troubleshooting performance issues and resource usage.

  You need to configure Azure diagnostics.

  For each requirement, which data source should you specify? To answer, select the appropriate data source from each list in the answer area.

  Hot Area:

  

  

  ---

  References: https://azure.microsoft.com/en-us/documentation/articles/azure-diagnostics/#cloud-services

• Question 268:

  You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet, which is used for testing a line of business (LOB) application. The application is deployed to a VM named TestWebServiceVM.

  You need to ensure that TestWebServiceVM always starts by using the same IP address. You need to achieve this goal by using the least amount of administrative effort.

  What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

  A. Run the following Azure PowerShell cmdlet: Set-AzureStaticVNetIP
  B. Use the Azure portal to configure TestWebServiceVM.
  C. Run the following Azure PowerShell cmdlet: Get-AzureReservedIP
  D. Use RDP to configure TestWebServiceVM.
  A. Run the following Azure PowerShell cmdlet: Set-AzureStaticVNetIP
  B. Use the Azure portal to configure TestWebServiceVM.

  ---

  https://msdn.microsoft.com/en-us/library/azure/dn722490.aspx

• Question 269:

  DRAG DROP

  You manage a solution deployed in two Azure subscriptions for testing and production.

  Both subscriptions have virtual networks named fabVNet.

  You plan to add two new virtual machines (VMs) in a new subnet.

  You have the following requirements:

  Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order

  Select and Place:

  

  

  ---

  

  Create a subnet in the Testing subnet, Deploy the VMs to this new subnet, and Export the network configuration for later importing it to Production.

  References:

  http://msdn.microsoft.com/en-us/library/azure/jj156206.aspx

• Question 270:

  DRAG DROP

  You manage an Azure Web Site in Standard mode at the following address:

  contoso.azurewebsites.net.

  Your company has a new domain for the site that needs to be accessible by Secure Socket Layer (SSL) encryption.

  You need to be able to add a custom domain to the Azure Web Site and assign an SSL certificate.

  Which three steps should you perform next in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  More than one order of answer choices may be correct. You will receive credit for any of the correct orders you select

  Select and Place:

  

  

  ---

  First create a CNAME record, then to add the domain name as a custom domain and last add the SNI SSL binding. The advantage of using a CNAME record and a SNI SSL binding is that it does not matter if the IP address of the website

  changes.

  References:

  https://azure.microsoft.com/en-us/documentation/articles/web-sites-configure-sslcertificate/