Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 291:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage an Azure SQL Database. The database has weekly backups that are stored in an Azure Recovery Services vault.

  You need to maximize the time that previous backup versions are stored.

  Solution: You configure a retention policy that is set to one year.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Store Azure SQL Database backups for up to 10 years.

  Many applications have regulatory, compliance, or other business purposes that require you to retain database backups beyond the 7-35 days provided by Azure SQL Database automatic backups. By using the long-term backup retention

  feature, you can store your SQL database backups in an Azure Recovery Services vault for up to 10 years.

  References: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-long-term-retention

• Question 292:

  You manage a software-as-a-service application named SaasApp1 that provides user management features in a multi-directory environment.

  You plan to offer SaasApp1 to other organizations that use Azure Active Directory.

  You need to ensure that SaasApp1 can access directory objects.

  What should you do?

  A. Configure the Federation Metadata URL.
  B. Register SaasApp1 as a native client application.
  C. Register SaasApp1 as a web application.
  D. Configure the Graph API.
  D. Configure the Graph API.

  ---

  The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects. For example, the Graph API supports the following common operations for a user object: / Create a new user in a directory / Get a user's detailed properties, such as their groups / Update a user's properties, such as their location and phone number, or change their password / Check a user's group membership for role-based access / Disable a user's account or delete it entirely

  References: http://msdn.microsoft.com/en-us/library/azure/hh974476.aspx

• Question 293:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals: Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You plan to enable access to a blob storage account for external clients. The access method must include an expiration time and clients should not be able to access other storage services.

  You need to provide access to the storage account.

  Solution: You create a new Azure Key Vault.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1?toc=%2fazure%2fstorage%2fblobs%2ftoc.json

• Question 294:

  You have an Azure Subscription.

  You have an on-premises site that contains a server named Server1. Server1 runs Windows Server 2012 R2 and has computer digital certificate named Cert1.

  You need to ensure that you can back up Server1 to Azure.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References: https://docs.microsoft.com/en-us/azure/backup/backup-configure-vault-classic

• Question 295:

  A company uses Azure to host virtual machines and web app. A Line Of Business application that turns on a VM must use encrypted storage. You need to ensure that the VMs support the LOB application. What should you do?

  A. Run the add-azurermvmsssecret azure powershell cmdlet
  B. Scan the environment form the azure security manage.
  C. Run the test-azurermvmaemextention azure powershell cmdlet
  D. Run the set-azurermvmdiskencrpytionextension azure powershell cmdlet
  D. Run the set-azurermvmdiskencrpytionextension azure powershell cmdlet

  ---

  The Set-AzureRmVMDiskEncryptionExtension cmdlet can be used to encrypt managed.

  References: https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption#disk-encryption-deployment-scenarios-and-user-experiences

• Question 296:

  A company uses azure resource manager (ARM) templates to create resources.

  The following segment is from one of the company's arm templates.

  "properties":{

  Routes: {

  {

  :name": "myroute";

  "properties" {

  "addressprefix": "{parameters)(`backendsubnetprefix')};

  "nexthoptype": ""virtualappliance",

  "nexthopipaddress" : "[parameters(vmIPaddress')]

  } } ]

  The type of route defined is (Choose the best answer):

  A. UDR-Frontend
  B. UDR-BackEnd
  C. VNet
  D. Internet
  A. UDR-Frontend

  ---

  Explantion:

  To better illustrate how to create UDRs, this document uses the following scenario:

  

  In this scenario, you create one UDR for the Front-end subnet and another UDR for the Back-end subnet, as follows:

  UDR-FrontEnd. The front-end UDR is applied to the FrontEnd subnet, and contain one route: RouteToBackend. This route sends all traffic to the back-end subnet to the FW1 virtual machine. UDR-BackEnd. The back-end UDR is applied to the BackEnd subnet, and contain one route: RouteToFrontend. This route sends all traffic to the front-end subnet to the FW1 virtual machine.

  References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-create-udr-classic-cli

• Question 297:

  You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user information.

  The application access key for TeamSite1 has been compromised.

  You need to ensure that users can continue to use TeamSite1 and that the compromised key does not allow access to the data in your Azure AD tenant.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Remove the compromised key from the application definition for TeamSite1.
  B. Delete the application definition for TeamSite1.
  C. Generate a new application key for TeamSite1.
  D. Generate a new application definition for TeamSite1.
  E. Update the existing application key.
  A. Remove the compromised key from the application definition for TeamSite1.
  C. Generate a new application key for TeamSite1.

  ---

  One of the security aspects of Windows Azure storage is that all access is protected by access keys.

  It is possible to change the access keys (e.g. if the keys become compromised), and if changed, we'd need to update the application to have the new key.

  References: https://azure.microsoft.com/en-us/documentation/articles/active-directory-integrating-applications/

• Question 298:

  You purchase an Azure subscription. You plan to deploy an application that requires four Azure virtual machines (VMs). All VMs use Azure Resource Management (ARM) mode.

  You need to minimize the time that it takes for VMs to communicate with each other.

  What should you do?

  A. Create a multi-site virtual network.
  B. Create a regional virtual network.
  C. Create a site-to-site virtual network.
  D. Add the VMs to the same affinity group.
  B. Create a regional virtual network.

  ---

  In the old Classic Mode, you would use an affinity group. However, the question states that the VMs use Azure Resource Management (ARM) mode and affinity groups are not available in ARM mode. Incorrect Answers:

  D: Affinity groups are not available in ARM mode.

  References: https://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-windows-compare-deployment-models/

• Question 299:

  You plan to implement Azure AD connect. You have an Active Directory Domain Services domain named Contoso.

  You need to determine if the organization's Active Directory is compatible with Azure AD Connect.

  Which command should you run?

  A. dsquery * cn=schema,cn=configuration,dc=contoso,dc=local –scope base –attr objectVersion
  B. nslookup finger contoso/objectVersion > > scope
  C. ldifde –scope contoso –o domain –l objectVersion –p schema
  D. csvde –i –s –j domain/schema –r objectVersion –b contoso –o local
  A. dsquery * cn=schema,cn=configuration,dc=contoso,dc=local –scope base –attr objectVersion

  ---

  http://rickardnobel.se/verify-schema-versions-on-all-domain-controllers/ https://docs.microsoft.com/en-us/azure/active-directory/active-directory-aadconnect-prerequisites

• Question 300:

  You administer an Azure subscription for your company.

  You have an application that updates text files frequently. The text files will not exceed 20 gigabytes (GB) in size. Each write operation must not exceed 4 megabytes (MB).

  You need to allocate storage in Azure for the application.

  Which three storage types will achieve the goal? Each correct answer presents a complete solution.

  A. page blob
  B. queue
  C. append blob
  D. block blob
  E. file share
  A. page blob
  C. append blob
  D. block blob