Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 301:

  You develop a set of PowerShell scripts that will run when you deploy new virtual machines (Vms).

  You need to ensure that the scripts are run automatically when the VM is started.

  What should you do?

  A. Load the scripts to a common file share accessible by the VMs.
  B. Create a SetupComplete.cmd batch file to call the scripts after the VM starts.
  C. Set the VMs to execute a custom extension.
  D. Create a new virtual hard disk (VHD) that contains the scripts.
  B. Create a SetupComplete.cmd batch file to call the scripts after the VM starts.

  ---

  You can make further customizations after Windows Setup completes by adding commands to the %WINDIR%\Setup\Scripts\SetupComplete.cmd file. This file enables you to install additional applications, run custom Windows scripts (cscript/ wscript), or make other modifications to the system before a user logs on.

  References: https://technet.microsoft.com/en-us/library/cc766314(v=ws.10).aspx

• Question 302:

  You administer a DirSync server configured with Azure Active Directory (Azure AD).

  You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval.

  What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

  A. Restart the DirSync server.
  B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet.
  C. Run the Enable-SyncShare PowerShell cmdlet.
  D. Run the Azure AD Sync tool ConfigurationWizard.
  E. Replicate the Directory in Active Directory Sites and Services.
  B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet.
  D. Run the Azure AD Sync tool ConfigurationWizard.

  ---

  If you don't want to wait for the recurring synchronizations that occur every three hours, you can force directory synchronization at any time.

  B: Force directory synchronization using Windows PowerShell

  You can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool.

  On the computer that is running the Directory Sync tool, start PowerShell, type Import-Module DirSync, and then press ENTER.

  Type Start-OnlineCoexistenceSync, and then press ENTER.

  D: Azure Active Directory Sync Services (AAD Sync)

  In September 2014 the Microsoft Azure AD Sync tool was released. This changed how manual sync requests are issued.

  To perform a manual update we now use the DirectorySyncClientCmd.exe tool. The Delta and Initial parameters are added to the command to specify the relevant task.

  This tool is located in: C:\Program Files\Microsoft Azure AD Sync\Bin

  You can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool.

  On the computer that is running the Directory Sync tool, start PowerShell, type Import-Module DirSync, and then press ENTER.

  Type Start-OnlineCoexistenceSync, and then press ENTER.

  References: https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect/

• Question 303:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company has an Azure subscription and plans to deploy virtual machines (VMs).

  The company needs to use an Azure Active Directory Domain Services (Azure AD DS) domain with the VMs.

  You need to ensure that you can join the VMs to the Azure AD DS domain.

  Solution: Enable Azure AD DS for the existing directory.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-getting-started

• Question 304:

  You manage a web application published to Azure Cloud Services.

  Your service level agreement (SLA) requires that you are notified in the event of poor performance from customer locations in the US, Asia, and Europe.

  You need to configure the Azure Management Portal to notify you when the SLA performance targets are not met.

  What should you do?

  A. Create an alert rule to monitor web endpoints.
  B. Create a Notification Hub alert with response time metrics.
  C. Add an endpoint monitor and alert rule to the Notification Hub.
  D. Configure the performance counter on the cloud service.
  A. Create an alert rule to monitor web endpoints.

  ---

  *

  An alert rule enables you to monitor an available metric within a supported Azure service. When the value of a specified metric violates the threshold assigned for a rule, the alert rule becomes active and registers an alert. When you create an alert rule, you can select options to send an email notification to the service administrator and co- administrators, or another administrator, when the rule becomes active, and when an alert condition is resolved.

  *

  You can configure cloud service alert rules on: Web endpoint status metrics Monitoring metrics from the cloud service host operating system Performance counters collected from the cloud service guest virtual machine. References: http://msdn.microsoft.com/en-us/library/azure/dn306639.aspx

• Question 305:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company has deployed web apps by using Azure Active Directory (Azure AD) Application Proxy. The company plans to enable multi-factor authentication for the web apps. All users have Microsoft Exchange Online email accounts using

  Office 365.

  You need to ensure that users in Azure AD and on-premises Active Directory Domain Services (AD DS) can authenticate with the web apps.

  Solution: You synchronize on-premises and Azure passwords with Azure AD Connect.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 306:

  DRAG DROP

  You have a virtual machine (VM) that runs in Azure. The VM is located in a geographically distant location from you.

  You experience performance issues when you connect to the VM.

  You need to resolve the performance issue.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 307:

  DRAG DROP

  Fourth Coffee has an on-premises, multiple-forest Activity Directory (AD) domain. The company hosts web applications and mobile application services. Fourth Coffee uses Microsoft Office 365 and uses Azure Active Directory (Azure AD).

  You have the following requirements:

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References: https://azure.microsoft.com/en-gb/documentation/articles/active-directory-passwordsgetting-started/#writeback-prerequisites https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnect-getstarted-custom/

• Question 308:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals: Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You plan to enable access to a blob storage account for external clients. The access method must include an expiration time and clients should not be able to access other storage services.

  You need to provide access to the storage account.

  Solution: You regenerate the storage account keys.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1?toc=%2fazure%2fstorage%2fblobs%2ftoc.json

• Question 309:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company uses Azure to host virtual machines (VMs) and web apps. You have an app service named App1 that uses the Basic app service tier.

  You need to ensure that diagnostic data for App1 is permanently stored.

  Solution: You specify a storage account in the Diagnostics.xml file.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  App Service diagnostic data is available through logging which you enable and configure in Settings. https://docs.microsoft.com/en-us/azure/app-service/app-service-diagnostics https://docs.microsoft.com/en-us/azure/app-service/web-sites-enable-diagnostic-log

• Question 310:

  A Company has an Azure subscription and plans to deploy virtual machines (VMS).

  The company needs to use an Azure Active Directory Domain Services (Azure AD DS) domain with the VMS. You need to ensure that you can join the VMS to the Azure AD DS domain.

  Solution Create a dedicated virtual network for Azure AD DS.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Select either the virtual network in which your managed domain is deployed or a virtual network that is connected to it by using virtual network peering. If you select an unconnected virtual network, you cannot join the virtual machine to the

  managed domain.

  We recommend deploying your managed domain into a dedicated subnet.

  References: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-admin-guide-join-windows-vm-portal