Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 281:

  You are an administrator of an Azure subscription for your company.

  Management asks you to configure Azure permissions for a user in your Azure Active Directory (Azure AD). The user must be able to perform all actions on the virtual machines (VMs). The user must not be allowed to create and manage availability sets for the Vms.

  You need to implement the required permissions with the least administrative effort. How should you assign permissions?

  A. Use Windows PowerShell to assign the Classic Virtual Machine Contributor role to the user.
  B. Use Windows PowerShell to create a custom role from the Virtual Machine Contributor role and then use NotActions to customize the role permissions.
  C. Implement a custom role through the Azure Portal and customize the role by adding the appropriate permissions.
  D. Assign the Virtual Machine Contributor role to the user.
  A. Use Windows PowerShell to assign the Classic Virtual Machine Contributor role to the user.

  ---

  https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles#classic-virtual-machine-contributor

• Question 282:

  You administer an Azure Web Site named contosoweb that is used to sell various products.

  Contosoweb experiences heavy traffic during weekends.

  You need to analyze the response time of the product catalog page during peak times, from different locations.

  What should you do?

  A. Configure endpoint monitoring.
  B. Add the Requests metric.
  C. Turn on Failed Request Tracing.
  D. Turn on Detailed Error Messages.
  A. Configure endpoint monitoring.

  ---

  Endpoint monitoring configures web tests from geo-distributed locations that test response time and uptime of web URLs. The test performs an HTTP get operation on the web URL to determine the response time and uptime from each location. Each configured location runs a test every five minutes. After you configure endpoint monitoring, you can drill down into the individual endpoints to view details response time and uptime status over the monitoring interval from each of the test location

  References: https://azure.microsoft.com/en-us/documentation/articles/web-sites-monitor/#webendpointstatus

• Question 283:

  You plan to implement shared storage policies.

  You need to apply a policy to the appropriate resource.

  What should you use?

  A. queues
  B. Recovery Services vault
  C. Azure SQL Database
  D. resource group
  A. queues

  ---

  The following storage resources support stored access policies: Blob containers, File shares, Queues, and Tables.

  A stored access policy provides an additional level of control over service-level shared access signatures (SAS) on the server side. Establishing a stored access policy serves to group shared access signatures and to provide additional restrictions for signatures that are bound by the policy. References: https://docs.microsoft.com/en-us/rest/api/storageservices/establishing-a-stored-access-policy

• Question 284:

  HOTSPOT

  You manage a Kubernetes cluster in Azure Container Service.

  You have the following command output of the Azure CLI.

  

  Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  References: https://thorsten-hans.com/hybrid-kubernetes-cluster-on-azure-container-services-ed6f11bf3cb2

• Question 285:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company plans to use Operations Management Suite (OMS) to track changes within virtual machines (VMs).

  The company required that data collection occur at least every 15 minutes.

  You need to recommend a solution to monitor VMs which ensures that data collection occurs at least every 15 minutes.

  Solution: Monitor files on Linux VMs.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  You can use the Change Tracking solution to easily identify changes in your environment. The solution tracks changes to Windows and Linux software, Windows and Linux files, Windows registry keys, Windows services, and Linux daemons.

  Identifying configuration changes can help you pinpoint operational issues.

  Changes to installed software, Windows services, Windows registry and files, and Linux daemons on the monitored servers are sent to the Log Analytics service in the cloud for processing.

  References: https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-change-tracking

• Question 286:

  You administer an Azure Storage account named contosostorage. The account has a blob container to store image files.

  A user reports being unable to access an image file.

  You need to ensure that anonymous users can successfully read image files from the container.

  Which log entry should you use to verify access?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Check for GetBlob and for AnonymousSuccess.

  Example: Get Blob AnonymousSuccess:

  1.0;2011-07-28T18:52:40.9241789Z;GetBlob;AnonymousSuccess;200;18;10;anonymous;;sally;blob;"http:// sally.blob.core.windows.net/thumbnails/lake.jpg?timeout=30000";"/sally/thumbnails/lake.jpg";a84aa705-8a85-48c5-b064b43bd22979c3;0;123.100.2.10;2009-09-19;252;0;265;100;0;;;"0x8CE1B6EA95033D5";Thursday, 28-Jul-11 18:52:40 GMT;;;;"7/28/2011 6:52:40 PM ba98eb12-700b-4d53-9230-33a3330571fc"

  Reference: https://docs.microsoft.com/en-us/rest/api/storageservices/storage-analytics-log-format

• Question 287:

  You have an Azure subscription.

  In Azure, you create two virtual machines named VM1 and VM2. Both virtual machines are instances in a cloud service named Cloud1.

  You need to ensure that the virtual machines only replicate within the data center in which they were created.

  Which settings should you modify?

  A. virtual machine
  B. storage account
  C. cloud services
  D. Azure subscription
  B. storage account

• Question 288:

  You are an administrator of the Azure subscription for your company.

  You are updating an Azure Resource Manager (ARM) template.

  You need to ensure that the JSON file uses the latest version available.

  Which template element should you modify?

  A. parameters
  B. resources
  C. $schema
  D. variables
  A. parameters

  ---

  This example shows a typical resource section of a template for creating a specified number of VMs:

  "resources": [

  {

  "apiVersion":"2016-04-30-preview",

  "type": "Microsoft.Compute/virtualMachines",

  "name": "[concat('myVM', copyindex())]",

  Etc.

  When you deploy resources using a template, you have to specify a version of the API to use. The example shows the virtual machine resource using this apiVersion element:

  "apiVersion": "2016-04-30-preview",

  The version of the API you specify in your template affects which properties you can define in the template. In general, you should select the most recent API version when creating templates. For existing templates, you can decide whether

  you want to continue using an earlier API version, or update your template for the latest version to take advantage of new features.

  References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/template-description

• Question 289:

  HOTSPOT

  A company uses Azure to host virtual machines (VMs) and web apps. You have the following web apps: App1 and App2. You deploy the web apps as app services.

  You need to ensure that you can enable multi-factor authentication (MFA) for App1 and App2.

  What solution should you implement for each requirement? To answer, select the appropriate option in the answer are.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  Box 1: Enterprise Mobility + Security The Enterprise Mobility Suite (EMS) subscription, includes Azure AD Premium, which include Multi-factor Authentication feature. Box 2: user accounts Configure the mobile app settings in the Azure Multi-Factor Authentication Server

  References: https://blogs.technet.microsoft.com/hybridcloudbp/2016/08/19/hybrid-cloud-identity-part-3-multi-factor-authentication/

• Question 290:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company plans to use Azure Automation.

  Automation runbooks must be started from a single HTTP request.

  You need to create the automation design.

  Solution: You start a runbook using webhooks.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  With Webhooks you can Start runbook from single HTTP request.

  References: https://docs.microsoft.com/en-us/azure/automation/automation-starting-a-runbook