Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 31:

  You have an Azure subscription.

  You create an Azure Active Directory (Azure AD) tenant named Tenant1 that has a domain name of tenant1.onmicrosoft.com.

  You need to add the contoso.com domain name to Tenant1.

  Which DNS record should you add to the contoso.com zone to be able to verify from Azure whether you own the contoso.com domain?

  A. signature (SIG)
  B. text (TXT)
  C. host (AAAA)
  D. DNSKEY
  B. text (TXT)

  ---

  You can use a txt record or alternatively an MX record. as MX record isn't an option, the only option left is TXT. You would add the MS=xxxxxxxxx into these record. https://stackoverflow.com/questions/22380653/verify-a-domain-name-in-azure-active-directory https://docs.microsoft.com/en-us/azure/active-directory/add-custom-domain#add-a-dns-entry-forthe-domain-name-at-the-domain-name-registrar

• Question 32:

  A company uses Azure Resource Manager (ARM) templates to deploy virtual machines (VMs). You plan to include the following JSON segment in the ARM template.

  

  You need to provide monitoring and diagnostics capabilities for the VM. Which additional parameter should you include in the template?

  A. condition
  B. existingdiagnosticsStorageAccountName
  C. instanceSize
  D. instanceCount
  B. existingdiagnosticsStorageAccountName

  ---

  The diagnostics extension json snippet above assumes two parameters existingdiagnosticsStorageAccountName and existingdiagnosticsStorageResourceGroup to specify the diagnostics storage account where diagnostics data is stored. Specifying the diagnostics storage account as a parameter makes it easy to change the diagnostics storage account across different environments, for example you may want to use a different diagnostics storage account for testing and a different one for your production deployment.

  References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/extensions-diagnostics-template

• Question 33:

  You administer a solution deployed to a virtual machine (VM) in Azure. The VM hosts a web service that is used by several applications. You are located in the US West region and have a worldwide user base.

  Developers in Asia report that they experience significant delays when they execute the services.

  You need to verify application performance from different locations.

  Which type of monitoring should you configure?

  A. Disk Read
  B. Endpoint
  C. Network Out
  D. CPU
  E. Average Response Time
  B. Endpoint

  ---

  

  The question states: "You need to verify application performance from different locations". The question is not asking you to determine WHY the application is slow, it's asking you to `measure' the performance from different locations.

  Endpoint Monitoring monitors your server with HTTP Get requests from locations that you choose.

  https://azure.microsoft.com/en-us/documentation/articles/web-sites-monitor/#webendpointstatus

  https://azure.microsoft.com/en-us/documentation/articles/app-insights-web-monitor-performance/

• Question 34:

  HOTSPOT

  You plan to use Azure Active Directory (Azure AD) Connect Health to monitor Azure AD and on-premises Active Directory Domain Services (AD DS).

  You need to obtain the appropriate license type and ensure that you monitor the servers.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  References: https://azure.microsoft.com/en-us/pricing/details/active-directory/

• Question 35:

  You manage an Azure web app in standard service tier at the following address: contoso.azurewebsites.net

  Your company has a new domain for the site named www.contoso.com that must be accessible by secure socket layer(SSL) encryption.

  You need to add a custom domain to the Azure web app and assign an SSL certificate.

  Which three actions should you perform? Each correct answer presents part of the solution.

  A. Add SSL binding for the www.contosco.com domain with the IP-based SSL option selected.
  B. Create a CNAME record from www.contoso.com to contoso.azurewebsites.net.
  C. Create a new file that will redirect the site to the new URL and upload it to the Azure Web site.
  D. Add SSL binding for the www.contoso.com domain with the server Name indication (SNL)SSL option selected.
  E. Add www.contoso.com to the list of domain names as a custom domain.
  B. Create a CNAME record from www.contoso.com to contoso.azurewebsites.net.
  D. Add SSL binding for the www.contoso.com domain with the server Name indication (SNL)SSL option selected.
  E. Add www.contoso.com to the list of domain names as a custom domain.

  ---

  Step 1 (B): When adding a CNAME record, you must set the Host Name field to the sub-domain you wish to use.

  For example, www. You must set the Address field to the .azurewebsites.netdomain name of your Azure Website. For example, contoso.azurwebsites.net.

  Step 2: Modify the service definition and configuration files

  Your application must be configured to use the certificate, and an HTTPS endpoint must be added. As a result, the service definition and service configuration files need to be updated. Step 3: IP based SSL associates a certificate with a

  domain name by mapping the dedicated public IP address of the server to the domain name. This requires each domain name (contoso.com, fabricam.com, etc.) associated with your service to have a dedicated IP address. This is the

  traditional method of associating SSL certificates with a web server.

  D: You need bind your SSL certificate.

  E: You need to add it to the custom domain whether you are buying a new one or using an existing domain. https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-ssl https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain

• Question 36:

  You plan to create an Azure virtual machine (VM) that runs the Linux operating system. You must use the following values:

  

  You need to create and connect to the VM.

  Which three commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 37:

  A company has an Azure subscription and plans to deploy virtual machines (VMs).

  The company needs to use an Azure Active Directory Domain Services (Azure AD DS) domain with the VMs.

  You need to ensure that you can join the VMs to the Azure AD DS domain.

  What should you do?

  A. Place the VMs in the same resource group as a domain controller.
  B. Place the VMs on the same virtual network as the Azure AD DS domain.
  C. Create an AD DS domain controller on a VM.
  D. Create a custom domain in the Azure subscription.
  B. Place the VMs on the same virtual network as the Azure AD DS domain.

  ---

  https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-admin-guide-join-windows-vm-portal

• Question 38:

  HOTSPOT

  You manage an Azure subscription.

  You develop a storage plan with the following requirements:

  In the table below, identify the storage redundancy type that must be used. Make only one selection in each column.

  Hot Area:

  

  

  ---

  References: https://azure.microsoft.com/en-us/documentation/articles/storage-redundancy/

• Question 39:

  You administer an Azure Active Directory (Azure AD) tenant that hosts a Software as a Service (SaaS) application named MyApp.

  You control access to MyApp by using the following two Azure AD groups:

  

  a group named SaaSApp that contains 200 users

  

  a group named AdminSaaS that contains 20 users

  You need to revoke all access to MyApp for the SaaSApp by using the least administrative effort. What should you do?

  A. Delete the tenant.
  B. Revoke access to MyApp.
  C. Delete the SaaSApp group from Azure AD.
  D. Revoke application access from users belonging to the SaaSApp group.
  D. Revoke application access from users belonging to the SaaSApp group.

  ---

  https://blogs.technet.microsoft.com/enterprisemobility/2014/05/21/identity-and-access-management-for-the-cloud/

• Question 40:

  Your company is implementing an Intrusion Detection System (IDS). The IDS has the IP address 192.168.3.92. You plan to deploy the network by using Azure Resource Manager (ARM).

  You need to ensure that all subnet traffic goes through the IDS.

  How should you complete the JSON configuration code? To answer, drag the appropriate JSON segments to the correct location or locations. Each JSON segment may be used once, more than once, or not at all. You may need to drag the

  split bar between panes or scroll to view content.

  Select and Place: