Microsoft 70-533 Online Practice Questions and Exam Preparation

Microsoft 70-533 Online Questions & Answers

• Question 71:

  You plan to use azure active directory connect health to monitor azure ad and on-premises active directory domain services.

  You need to obtain the appropriates license type and ensure that you monitor the server.

  What should you do?

  A. azure ad standard
  B. azure ad premium
  C. enterprise mobility + security
  D. operations management suite
  B. azure ad premium

  ---

  Azure Ad Premium enables hybrid users to seamlessly access on-premises and cloud capabilities. References: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-whatis

• Question 72:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  A company uses Azure to host virtual machines (VMs) and web apps. You have an app service named App1 that uses the Basic app service tier.

  You need to ensure that diagnostic data for App1 is permanently stored.

  Solution: You specify a storage account in the ServiceConfiguration.cscfg file

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  You specify the storage account that you want to use in the ServiceConfiguration.cscfg. However, App Service diagnostic data is available through logging which you enable and configure in Settings. https://docs.microsoft.com/en-us/azure/app-service/app-service-diagnostics https://docs.microsoft.com/en-us/azure/app-service/web-sites-enable-diagnostic-log https://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection#data-collection-tier

• Question 73:

  DRAG DROP

  You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named ContosoService1.

  You want to create a new VM named MyApp that will have a fixed IP address and be hosted by an Azure Datacenter in the US West region.

  You need to assign a fixed IP address to the MyApp VM.

  Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet or value to the correct location in the PowerShell command. Each cmdlet or value may be used once, more than once, or not at all. You

  may need to drag the split bar between panes or scroll to view content

  Select and Place:

  

  

  ---

  Create a Reserved IP and associate it with a cloud service (Virtual Machines)

  Use the following script as a template to create a Reserved IP and then use the Reserved IP to create a cloud service deployment (Virtual Machines).

  $ReservedIP = New-AzureReservedIP -ReservedIPName "FirewallIP" -Label

  "WebAppFirewallIP" -Location "Japan West"

  New-AzureVMConfig -Name "WebAppVM" -InstanceSize Small -ImageName

  $images[60].ImageName | Add-AzureProvisioningConfig -Windows -AdminUsername cloudguy -Password Abc123 | New-AzureVM -ServiceName "WebApp" –ReservedIPName

  $ReservedIP -Location "Japan West"

• Question 74:

  You manage a cloud service that utilizes an Azure Service Bus queue. You need to ensure that messages that are never consumed are retained. What should you do?

  A. Check the MOVE TO THE DEAD-LETTER SUBQUEUE option for Expired Messages in the Azure Portal.
  B. From the Azure Management Portal, create a new queue and name it Dead-Letter.
  C. Execute the Set-AzureServiceBus PowerShell cmdlet.
  D. Execute the New-AzureSchedulerStorageQueueJob PowerShell cmdlet.
  A. Check the MOVE TO THE DEAD-LETTER SUBQUEUE option for Expired Messages in the Azure Portal.

  ---

  The EnableDeadLetteringOnMessageExpiration property allows to enable\disable the dead-lettering on message expiration. References: https://www.simple-talk.com/cloud/cloud-data/an-introduction-to-windows-azure-service-bus-brokered-messaging/

• Question 75:

  HOTSPOT

  You are implementing Azure Role-Based Control (RBAC).

  You need to create two new administrator accounts. The accounts must meet the following requirements:

  Admin1 must be able to manage only the storage accounts that are used by virtual machines (VMs) and other resources.

  Admin2 must be able to manage and delete resources in the Recovery Services vault.

  Which role should you assign to each account? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  Box 1: Storage Account Contributor

  A Storage Account Contributor can manage storage accounts, but not access to them.

  Incorrect Answers:

  Not Data Factory Contributor: Can create and manage data factories, and child resources within them.

  Not Virtual Machine Contributor: Can manage virtual machines, but not the virtual network or storage account to which they are connected.

  Box 2: Backup Contributor

  A Backup Contributor can manage all backup management actions, except creating Recovery Services vault and giving access to others.

  Incorrect Answers:

  Not Automation Operator: Able to start, stop, suspend, and resume jobs.

  Not BackupOperator: Can manage backup except removing backup, in Recovery Services vault.

  References: https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles

• Question 76:

  An application uses Windows Azure Table storage.

  The application uses five tables.

  One table used by the application is approaching the limit for storage requests per second. You need to recommend an approach for avoiding data access throttling.

  What should you recommend?

  A. Use a single partition key for the table.
  B. Compress data before storing it in the table.
  C. Create additional partition keys for the table.
  D. Continually remove unnecessary data from the table.
  C. Create additional partition keys for the table.

• Question 77:

  HOTSPOT

  You plan to use Azure Resource Manager (ARM) templates to deploy resources in Azure. You define the following variables in the template.

  

  Use drop-down meus to select the answer choice that answers each question based on the information presents in the template. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 78:

  Your company network includes users in multiple directories.

  You plan to publish a software-as-a-service application named SaasApp1 to Azure Active Directory.

  You need to ensure that all users can access SaasApp1.

  What should you do?

  A. Configure the Federation Metadata URL
  B. Register the application as a web application.
  C. Configure the application as a multi-tenant.
  D. Register the application as a native client application.
  C. Configure the application as a multi-tenant.

  ---

  *

  When you get deeper into using Windows Azure Active Directory, you'll run into new terminology. For instance, is called "directory" is also referred to as a Windows Azure AD Tenant or simply as "tenant." This stems from the fact that WAAD () Windows Azure Active Directory is a shared service for many clients. In this service, every client gets its own separate space for which the client is the tenant. In the case of WAAD this space is a directory. This might be a little confusing, because you can create multiple directories, in WAAD terminology multiple tenants, even though you are a single client.

  *

  Multitenant Applications in Azure A multitenant application is a shared resource that allows separate users, or "tenants," to view the application as though it was their own. A typical scenario that lends itself to a multitenant application is one in which all users of the application may wish to customize the user experience but otherwise have the same basic business requirements. Examples of large multitenant applications are Office 365, Outlook.com, and visualstudio.com. http://msdn.microsoft.com/en-us/library/azure/dn151789.aspx

• Question 79:

  DRAG DROP

  You have an Azure Virtual Network named fabVNet with three subnets named Subnet-1, Subnet-2 and Subnet-3. You have a virtual machine (VM) named fabVM running in the fabProd service.

  You need to modify fabVM to be deployed into Subnet-3. You want to achieve this goal by using the least amount of time and while causing the least amount of disruption to the existing deployment.

  What should you do? To answer, drag the appropriate Power Shell cmdlet to the correct location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes

  or scroll to view content.

  Select and Place:

  

  

  ---

  Example This example changes the size of the virtual machine "MyVM3", running in "MySvc1", to "Medium". Windows PowerShell C:\PS>Get-AzureVM -ServiceName "MySvc1" -Name "MyVM3" `| Set-AzureVMSize –InstanceSize "Medium" `| Update-AzureVM References: http://msdn.microsoft.com/en-us/library/dn495230.aspx

• Question 80:

  You deploy an Azure web app named contosoApp. ContosoApp is available by using HTTP or HTTPS.

  You need to ensure that a web administrator receives an email notification if the average response time for contosoAPP exceeds 50 milliseconds.

  Which two tasks should you perform? Each correct answer presents part of the solution.

  A. Create an HTTPS monitoring endpoint.
  B. Create a metric
  C. Create a rule.
  D. Create an HTTP monitoring endpoint.
  E. Add a multi-factor authentication provider.
  B. Create a metric
  C. Create a rule.

  ---

  Metrics for an App or App Service plan can be hooked up to alerts.

  Create an alert rule on a metric with the Azure portal

  1.

  In the portal, locate the resource you are interested in monitoring and select it.

  2.

  Select Alerts (Classic) under the MONITORING section. The text and icon may vary slightly for different resources. If you do not find Alerts (Classic), you might find them under Alerts or Alert Rules

  3.

  Select the Add metric alert (classic) command and fill in the fields.

  4.

  Name your alert rule, and choose a Description, which also shows in notification emails. https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/insights-alerts-portal