Microsoft 70-533: Implementing Microsoft Azure Infrastructure Solutions | Q 1 - 30 | Latest May 2017

QUESTION 1

You manage a cloud service that supports features hosted by two instances of an Azure virtual machine (VM). You discover that occasional outages cause your service to fail. You need to minimize the impact of outages to your cloud service. Which two actions should you perform? Each correct answer presents part of the solution.

A. Deploy a third instance of the VM.
B. Configure Load Balancing on the VMs. 
C. Redeploy the VMs to belong to an Affinity Group.
D. Configure the VMs to belong to an Availability Set.

QUESTION 2

You administer an Azure subscription with an existing cloud service named contosocloudservice. Contosocloudservice contains a set of related virtual machines (VMs) named ContosoDC, ContosoSQL and ContosoWeb1. You want to provision a new VM within contosocloudservice. You need to use the latest gallery image to create a new Windows Server 2012 R2 VM that has a target IOPS of 500 for any provisioned disks. Which PowerShell command should you use?

A. Option A 
B. Option B
C. Option C
D. Option D

QUESTION 3

Drag and Drop Question

You administer an Azure Virtual Machine (VM) named server!. The VM is in a cloud service named ContosoService1. You discover that the VM is experiencing storage issues due to increased application logging on the server. You need to create a new 256-GB disk and attach it to the server. Which Power Shell cmdlets should you use? To answer, drag the appropriate cmdlet to the correct location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 4

Your company has two cloud services named CS01 and CS02. You create a virtual machine (VM) in CS02 named Accounts. You need to ensure that users in CS01 can access the Accounts VM by using port 8080. What should you do?

A. Create a firewall rule.
B. Configure load balancing.
C. Configure port redirection.
D. Configure port forwarding.
E. Create an end point.

QUESTION 5

Your company network includes an On-Premises Windows Active Directory (AD) that has a DNS domain named contoso.local and an email domain named contoso.com. You plan to migrate from On-Premises Exchange to Office 365. You configure DirSync and set all Azure Active Directory {Azure AD) usernames as %username%@contoso.onmicrosoft.com. You need to ensure that each user is able to log on by using the email domain as the username. Which two actions should you perform? Each correct answer presents part of the solution.

A. Verify the email domain in Azure AD domains. 
B. Run the Set-MsolUserPrincipalName -UserPrincipalName%username%@contoso.onmicrosoft.com -NewUserPrincipalName %usemame %@contoso.com Power Shell cmdlet. 
C. Edit the ProxyAddress attribute on the On-Premises Windows AD user account.
D. Verify the Windows AD DNS domain in Azure AD domains.
E. Update the On-Premises Windows AD user account UPN to match the email address.

QUESTION 6

You develop a Windows Store application that has a web service backend. You plan to use the Azure Active Directory Authentication Library to authenticate users to Azure Active Directory (Azure AD) and access directory data on behalf of the user. You need to ensure that users can log in to the application by using their Azure AD credentials. Which two actions should you perform? Each correct answer presents part of the solution.

A. Create a native client application in Azure AD.
B. Configure directory integration. 
C. Create a web application in Azure AD.
D. Enable workspace join.
E. Configure an Access Control namespace.

QUESTION 7

Your company plans to migrate from On-Premises Exchange to Office 365. The existing directory has numerous service accounts in your On-Premises Windows Active Directory (AD), stored in separate AD Organizational Units (OU) for user accounts. You need to prevent the service accounts in Windows AD from syncing with Azure AD. What should you do?

A. Create an OU filter in the Azure AD Module for Windows PowerShell.
B. Configure directory partitions in miisclient.exe.
C. Set Active Directory ACLs to deny the DirSync Windows AD service account MSOL_AD_SYNC access to the service account OUs.
D. Create an OU filter in the Azure Management Portal.

QUESTION 8

You manage an Azure Active Directory (AD) tenant. You plan to allow users to log in to a third-party application by using their Azure AD credentials. To access the application, users will be prompted for their existing third-party user names and passwords. You need to add the application to Azure AD. Which type of application should you add?

A. Existing Single Sign-On with identity provisioning 
B. Password Single Sign-On with identity provisioning
C. Existing Single Sign-On without identity provisioning
D. Password Single Sign-On without identity provisioning

QUESTION 9

You plan to use Password Sync on your DirSync Server with Azure Active Directory {Azure AD) on your company network. You configure the DirSync server and complete an initial synchronization of the users. Several remote users are unable to log in to Office 365. You discover multiple event log entries for "Event ID 611 Password synchronization failed for domain." You need to resolve the password synchronization issue. Which two actions should you perform? Each correct answer presents part of the solution.

A. Restart Azure AD Sync Service.
B. Run the Set-FullPasswordSync Power Shell cmdlet. 
C. Force a manual synchronization on the DirSync server.
D. Add the DirSync service account to the Schema Admins domain group.

QUESTION 10

You administer an Access Control Service namespace named contosoACS that is used by a web application. ContosoACS currently utilizes Microsoft and Yahoo accounts. Several users in your organization have Google accounts and would like to access the web application through ContosoACS. You need to allow users to access the application by using their Google accounts. What should you do?

A. Register the application directly with Google.
B. Edit the existing Microsoft Account identity provider and update the realm to include Google.
C. Add a new Google identity provider. 
D. Add a new WS-Federation identity provider and configure the WS-Federation metadata to point to the Google sign-in URL.

QUESTION 11

You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access to the web APIs through OAuth 2.0. MyApp is generating numerous user consent prompts. You need to reduce the amount of user consent prompts. What should you do?

A. Enable Multi-resource refresh tokens. 
B. Enable WS-federation access tokens.
C. Configure the Open Web Interface for .NET.
D. Configure SAML 2.0.

QUESTION 12

Your company network includes users in multiple directories. You plan to publish a software-as-a-service application named SaasApp1 to Azure Active Directory. You need to ensure that all users can access SaasApp1. What should you do?

A. Configure the Federation Metadata URL.
B. Register the application as a web application.
C. Configure the application as a multi-tenant.
D. Register the application as a native client application.

QUESTION 13

Drag and Drop Question

You administer an Azure SQL database named contosodb that is running in Standard/Si tier. The database is in a server named server1 that is a production environment. You also administer a database server named server2 that is a test environment. Both database servers are in the same subscription and the same region but are on different physical clusters. You need to copy contosodb to the test environment. Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION 14

You are migrating a local virtual machine (VM) to an Azure VM. You upload the virtual hard disk (VHD) file to Azure Blob storage as a Block Blob. You need to change the Block Blob to a page blob. What should you do?

A. Delete the Block Blob and re-upload the VHD as a page blob. 
B. Update the type of the blob programmatically by using the Azure Storage .NET SDK.
C. Update the metadata of the current blob and set the Blob-Type key to Page.
D. Create a new empty page blob and use the Azure Blob Copy Power Shell cmdlet to copy the current data to the new blob.

QUESTION 15

You administer a Microsoft Azure SQL Database database in the US Central region named contosodb. Contosodb runs on a Standard tier within the S1 performance level. You have multiple business-critical applications that use contosodb. You need to ensure that you can bring contosodb back online in the event of a natural disaster in the US Central region. You want to achieve this goal with the least amount of downtime. Which two actions should you perform? Each correct answer presents part of the solution.

A. Upgrade to S2 performance level.
B. Use active geo-replication. 
C. Use automated Export.
D. Upgrade to Premium tier. 
E. Use point in time restore.
F. Downgrade to Basic tier.

QUESTION 16

Drag and Drop Question

You manage an application deployed to a cloud service that utilizes an Azure Storage account. The cloud service currently uses the primary access key. Security policy requires that all shared access keys are changed without causing application downtime. Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION 17

You manage an Azure web app in standard service tier at the following address: contoso.azurewebsites.net. Your company has a new domain for the site named www.contoso.com that must be accessible by secure socket layer(SSL) encryption. You need to add a custom domain to the Azure web app and assign an SSL certifcate. Which three actions should you perform? Each correct answer presents part of the solution.

A. Add SSL binding for the www.contosco.com domain with the IP-based SSL option selected. 

B. Create a CNAME record from www.contoso.com to contoso.azurewebsites.net. 

C. Create a new file that will redirect the site to the new URL and upload it to the Azure Web site. 

D. Add SSL binding for the www.contoso.com domain with the server Nameindication (SNL)SSL option selected. 

E. Add www.contoso.com to the list of domain names as a custom domain.

QUESTION 18

You manage two datacenters in different geographic regions and one branch office. You plan to implement a geo-redundant backup solution. You need to ensure that each datacenter is a cold site for the other. You create a recovery vault. What should you do next?

A. Install the provider.
B. Upload a certificate to the vault.
C. Generate a vault key. 
D. Set all virtual machines to DHCP.
E. Prepare System Center Virtual Machine Manager (SCVMM) servers.
F. Create mappings between the virtual machine (VM) networks.

QUESTION 19

You manage a collection of large video files that is stored in an Azure Storage account. A user wants access to one of your video files within the next seven days. You need to allow the user access only to the video file, and then revoke access once the user no longer needs it. What should you do?

A. Give the user the secondary key for the storage account. Once the user is done with the file, regenerate the secondary key.
B. Create an Ad-Hoc Shared Access Signature for the Blob resource. Set the Shared Access Signature to expire in seven days.
C. Create an access policy on the container. Give the external user a Shared Access Signature for the blob by using the policy. Once the user is done with the file, delete the policy. 
D. Create an access policy on the blob. Give the external user access by using the policy. Once the user is done with the file, delete the policy.

QUESTION 20

You administer an Azure Storage account named contoso storage. The account has queue containers with logging enabled. You need to view all log files generated during the month of July 2014. Which URL should you use to access the list?

A. http://contosostorage.queue.core.windows.net/Slogs?restype=container&comp=list&prefix=queue/2014/07
B. http://contosostorage.queue.core.windows.net/Sfiles?restype=container&comp=list&prefix=queue/2014/07
C. http://contosostorage.blob.core.windows.net/Sfiles?restype=container&comp=list&prefix=blob/2014/07
D. http://contosostorage.blob.core.windows.net/Slogs?restype=container&comp=list&prefix=blob/2014/07

QUESTION 21

You manage an Azure subscription with virtual machines (VMs) that are running in Standard mode. You need to reduce the storage costs associated with the VMs. What should you do?

A. Locate and remove orphaned disks. 
B. Add the VMs to an affinity group.
C. Change VMs to the Basic tier.
D. Delete the VHD container.

QUESTION 22

You manage several Azure virtual machines (VMs). You create a custom image to be used by employees on the development team. You need to ensure that the custom image is available when you deploy new servers. Which Azure Power Shell cmdlet should you use?

A. Update-AzureVMImage
B. Add-AzureVhd
C. Add-AzureVMImage 
D. Update-AzureDisk
E. Add-AzureDataDisk

QUESTION 23

You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet which is used for testing a line of business (LOB) application. The application is deployed to a VM named TestWebServiceVM. You need to ensure that TestWebServiceVM always starts by using the same IP address. You need to achieve this goal by using the least amount of administrative effort. What should you do?

A. Use the Management Portal to configure TestWebServiceVM.
B. Use RDP to configure TestWebServiceVM.
C. Run the Set-AzureStaticVNetIP PowerShell cmdlet. 
D. Run the Get-AzureReservedIP PowerShell cmdlet.

QUESTION 24

Drag and Drop Question

You administer two virtual machines (VMs) that are deployed to a cloud service. The VMs are part of a virtual network. The cloud service monitor and virtual network configuration are configured as shown in the exhibits:

You need to create an internal load balancer named fabLoadBalancer that has a static IP address of 172.16.0.100. Which value should you use in each parameter of the Power Shell command? To answer, drag the appropriate value to the correct location in the Power Shell command. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 25

Your network environment includes remote employees. You need to create a secure connection for the remote employees who require access to your Azure virtual network. What should you do?

A. Deploy Windows Server 2012 RRAS. 

B. Configure a point-to-site VPN. 

C. Configure an ExpressRoute. 

D. Configure a site-to-site VPN.

QUESTION 26

Drag and Drop Question

Your development team has created a new solution that is deployed in a virtual network named fabDevVNet. Your testing team wants to begin testing the solution in a second Azure subscription. You need to create a virtual network named fabTestVNet that is identical to fabDevVNet. You want to achieve this goal by using the least amount of administrative effort. Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION 27

Drag and Drop Question

You have a solution deployed into a virtual network in Azure named fabVNet. The fabVNet virtual network has three subnets named Apps, Web, and DB that are configured as shown in the exhibit:

You want to deploy two new VMs to the DB subnet. You need to modify the virtual network to expand the size of the DB subnet to allow more IP addresses. Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION 28

You manage a cloud service that has a web role named fabWeb. You create a virtual network named fabVNet that has two subnets defined as Web and Apps. You need to be able to deploy fabWeb into the Web subnet. What should you do?

A. Modify the service definition (csdef) for the cloud service. 

B. Run the Set-AzureSubnet PowerShell cmdlet. 

C. Run the Set-AzureVNetConfig PowerShell cmdlet. 

D. Modify the network configuration file. 

E. Modify the service configuration (cscfg) for the fabWeb web role.

QUESTION 29

Drag and Drop Question

You manage two solutions in separate Azure subscriptions. You need to ensure that the two solutions can communicate on a private network. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION 30

Your company has recently signed up for Azure. You plan to register a Data Protection Manager (DPM) server with the Azure Backup service. You need to recommend a method for registering the DPM server with the Azure Backup vault. What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A. Import a self-signed certificate created using the makecert tool. 

B. Import a self-signed certificate created using the createcert tool. 

C. Import an X.509 v3 certificate with valid clientauthentication EKU. 

D. Import an X.509 v3 certificate with valid serverauthentication EKU.