Microsoft 70-533: Implementing Microsoft Azure Infrastructure Solutions | Q 31 - 60 | Latest May 2017

QUESTION 31

Hotspot Question

You manage an Azure subscription. You develop a storage plan with the following requirements:
- Database backup files that are generated once per year are retained for ten years.
- High performance system telemetry logs are created constantly and processed for analysis every month.
In the table below, identify the storage redundancy type that must be used. Make only one selection in each column.

QUESTION 32

You administer an Azure Storage account with a blob container. You enable Storage account logging for read, write and delete requests. You need to reduce the costs associated with storing the logs. What should you do?

A. Execute Delete Blob requests over https
B. Create an export job for your container
C. Set up a retention policy 
D. Execute Delete Blob requests over http

QUESTION 33

You administer an Azure Storage account named contosostorage. The account has a blob container to store image files. A user reports being unable to access an image file. You need to ensure that anonymous users can successfully read image files from the container. Which log entry should you use to verify access?

A. Option A 
B. Option B
C. Option C
D. Option D

QUESTION 34

Hotspot Question

You have an Azure SQL Database named Contosodb. Contosodb is running in the Standard/S2 tier and has a service level objective of 99 percent. You review the service tiers in Microsoft Azure SQL Database as well as the results of running performance queries for the usage of the database for the past week as shown in the exhibits:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

QUESTION 35

Your company is launching a public website that allows users to stream videos. You upload multiple video files to an Azure storage container. You need to give anonymous users read access to all of the video files in the storage container. What should you do?

A. Edit each blob's metadata and set the access policy to Public Blob.
B. Edit the container metadata and set the access policy to Public Container.
C. Move the files into a container sub-directory and set the directory access level to Public Blob.
D. Edit the container metadata and set the access policy to Public Blob.

QUESTION 36

Hotspot Question

You manage a public-facing web application which allows authenticated users to upload and download large files. On the initial public page there is a promotional video. You plan to give users access to the site content and promotional video. In the table below, identify the access method that should be used for the anonymous and authenticated parts of the application. Make only one selection in each column.

QUESTION 37

Drag and Drop Question

Your company network includes a single forest with multiple domains. You plan to migrate from On-Premises Exchange to Exchange Online. You want to provision the On-Premises Windows Active Directory (AD) and Azure Active Directory (Azure AD) service accounts. You need to set the required permissions for the Azure AD service account. Which settings should you use? To answer, drag the appropriate permission to the service account. Each permission may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 38

Hotspot Question

You administer an Azure Active Directory (Azure AD) tenant. You add a custom application to the tenant. The application must be able to:
- Read data from the tenant directly.
- Write data to the tenant on behalf of a user.
In the table below, identify the permission that must be granted to the application. Make only one selection in each column.

QUESTION 39

Your company plans to migrate from On-Premises Exchange to Exchange Online in Office 365. You plan to integrate your existing Active Directory Domain Services (AD DS) infrastructure with Azure AD. You need to ensure that users can log in by using their existing AD DS accounts and passwords. You need to achieve this goal by using minimal additional systems. Which two actions should you perform? Each answer presents part of the solution.

A. Configure Password Sync. 
B. Set up a DirSync Server. 
C. Set up an Active Directory Federation Services Server.
D. Set up an Active Directory Federation Services Proxy Server.

QUESTION 40

Drag and Drop Question

You publish a multi-tenant application named MyApp to Azure Active Directory (Azure AD). You need to ensure that only directory administrators from the other organizations can access MyApp's web API. How should you configure MyApp's manifest JSON file? To answer, drag the appropriate PowerShell command to the correct location in the application's manifest JSON file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 41

You manage a software-as-a-service application named SaasApp1 that provides user management features in a multi-directory environment. You plan to offer SaasApp1 to other organizations that use Azure Active Directory. You need to ensure that SaasApp1 can access directory objects. What should you do?

A. Configure the Federation Metadata URL.
B. Register SaasApp1 as a native client application.
C. Register SaasApp1 as a web application.
D. Configure the Graph API.

QUESTION 42

You administer an Azure Active Directory (Azure AD) tenant where Box is configured for:
- Application Access
- Password Single Sign-on
An employee moves to an organizational unit that does not require access to Box through the Access Panel. You need to remove only Box from the list of applications only for this user. What should you do?

A. Delete the user from the Azure AD tenant.
B. Delete the Box Application definition from the Azure AD tenant.
C. From the Management Portal, remove the user's assignment to the application.
D. Disable the user's account in Windows AD.

QUESTION 43

You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user information. The application access key for TeamSite1 has been compromised. You need to ensure that users can continue to use TeamSite1 and that the compromised key does not allow access to the data in your Azure AD tenant. Which two actions should you perform? Each correct answer presents part of the solution.

A. Remove the compromised key from the application definition for TeamSite1. 
B. Delete the application definition for TeamSite1.
C. Generate a new application key for TeamSite1. 
D. Generate a new application definition for TeamSite1.
E. Update the existing application key.

QUESTION 44

You administer a DirSync server configured with Azure Active Directory (Azure AD). You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval. What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A. Restart the DirSync server.
B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet. 
C. Run the Enable-SyncShare PowerShell cmdlet.
D. Run the Azure AD Sync tool Configuration Wizard. 
E. Replicate the Directory in Active Directory Sites and Services.

QUESTION 45

Hotspot Question

You manage an Internet Information Services (IIS) 6 website named contososite1. Contososite1 runs a legacy ASP.NET 1.1 application named LegacyApp1. LegacyApp1 does not contain any integration with any other systems or programming languages. You deploy contososite1 to Azure Web Sites. You need to configure Azure Web Sites. You have the following requirements:
- LegacyApp1 runs correctly.
- The application pool does not recycle.
Which settings should you configure to meet the requirements? To answer, select the appropriate settings in the answer area.

QUESTION 46

Drag and Drop Question

Your company manages several Azure Web Sites that are running in an existing web- hosting plan named plan1. You need to move one of the websites, named contoso, to a new web-hosting plan named plan2. Which Azure PowerShell cmdlet should you use with each PowerShell command line? To answer, drag the appropriate Azure PowerShell cmdlet to the correct location in the PowerShell code. Each PowerShell cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 47

You administer an Azure Web Site named contosoweb that is used to sell various products. Contosoweb experiences heavy traffic during weekends. You need to analyze the response time of the product catalog page during peak times, from different locations. What should you do?

A. Configure endpoint monitoring. 
B. Add the Requests metric.
C. Turn on Failed Request Tracing.
D. Turn on Detailed Error Messages.

QUESTION 48

Hotspot Question

You manage an Azure Web Site for a consumer-product company. The website runs in Standard mode on a single medium instance. You expect increased traffic to the website due to an upcoming sale during a holiday weekend. You need to ensure that the website performs optimally when user activity is at its highest. Which option should you select? To answer, select the appropriate option in the answer area.

QUESTION 49

Your company has a subscription to Azure. You configure your contoso.com domain to use a private Certificate Authority. You deploy a web site named MyApp by using the Shared (Preview) web hosting plan. You need to ensure that clients are able to access the MyApp website by using https. What should you do?

A. Back up the Site and import into a new website.
B. Use the internal Certificate Authority and ensure that clients download the certificate chain.
C. Add custom domain SSL support to your current web hosting plan.
D. Change the web hosting plan to Standard.

QUESTION 50

Drag and Drop Question

You administer an Azure Web Site named contosoweb that uses a production database. You deploy changes to contosoweb from a deployment slot named contosoweb-staging. You discover issues in contosoweb that are affecting customer data. You need to resolve the issues in contosoweb while ensuring minimum downtime for users. You swap contosoweb to contosoweb-staging. Which four steps should you perform next in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION 51

Drag and Drop Question

You manage an Azure Web Site named salessite1. You notice some performance issues with salessite1. You create a new database for salessite1. You need to update salessite1 with the following changes, in the order shown:
1. Display the list of current connection strings.
2. Create a new connection string named conn1 with a value of:
Server=tcp:samplel.database.windows.net,1433;
Database=NewDB;
User ID=User@samplel;
Password=Passwordl;
Trusted_Connection=False;
Encrypt=True;
Connec tion Timeout=30;.
3. Download the application logs for analysis.
Which three xplat-cli commands should you perform in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

QUESTION 52

Hotspot Question

You manage an Azure Service Bus for your company. You plan to enable access to the Azure Service Bus for an application named ContosoLOB. You need to create a new shared access policy for subscriptions and queues that has the following requirements:
- Receives messages from a queue
- Deadletters a message
- Defers a message for later retrieval
- Enumerates subscriptions
- Gets subscription description
In the table below, identify the permission you need to assign to ensure that ContosoLOB is able to accomplish the above requirements. Make only one selection in each column.

QUESTION 53

Your network includes a legacy application named LegacyApp1. The application only runs in the Microsoft .NET 3.5 Framework on Windows Server 2008. You plan to deploy to Azure Cloud Services. You need to ensure that LegacyApp1 will run correctly in the new environment. What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A. Upload a VHD with Windows Server 2008 installed.
B. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 2. 
C. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 1. 
D. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 3.

QUESTION 54

Drag and Drop Question

You administer a cloud service named contosoapp that has a web role and worker role. Contosoapp requires you to perform an in-place upgrade to the service. You need to ensure that at least six worker role instances and eight web role instances are available when you apply upgrades to the service. You also need to ensure that updates are completed for all instances by using the least amount of time. Which value should you use with each configuration? To answer, drag the appropriate value to the correct configuration. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 55

You migrate a Windows Server .NET web application to Azure Cloud Services. You need enable trace logging for the application. Which two actions should you perform? Each correct answer presents part of the solution.

A. Update the service definition file. 
B. Update the Azure diagnostics configuration.
C. Update the service configuration file.
D. Enable verbose monitoring.
E. Update the application web.config file.

QUESTION 56

Drag and Drop Question

You plan to deploy a cloud service named contosoapp. The service includes a web role named contosowebrole. The web role has an endpoint named restrictedEndpoint. You need to allow access to restricted Endpoint only from your office machine using the IP address 145.34.67.82. Which values should you use within the service configuration file? To answer, drag the appropriate value to the correct location in the service configuration file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 57

You manage a cloud service that utilizes an Azure Service Bus queue. You need to ensure that messages that are never consumed are retained. What should you do?

A. Check the MOVE TO THE DEAD-LETTER SUBQUEUE option for Expired Messages in the Azure Portal. 
B. From the Azure Management Portal, create a new queue and name it Dead-Letter.
C. Execute the Set-AzureServiceBus PowerShell cmdlet.
D. Execute the New-AzureSchedulerStorageQueueJob PowerShell cmdlet.

QUESTION 58

You manage a web application published to Azure Cloud Services. Your service level agreement (SLA) requires that you are notified in the event of poor performance from customer locations in the US, Asia, and Europe. You need to configure the Azure Management Portal to notify you when the SLA performance targets are not met. What should you do?

A. Create an alert rule to monitor web endpoints. 
B. Create a Notification Hub alert with response time metrics.
C. Add an endpoint monitor and alert rule to the Notification Hub.
D. Configure the performance counter on the cloud service.

QUESTION 59

You manage a cloud service that hosts a customer-facing application. The application allows users to upload images and create collages. The cloud service is running in two medium instances and utilizes Azure Queue storage for image processing. The storage account is configured to be locally redundant. The sales department plans to send a newsletter to potential clients. As a result, you expect a significant increase in global traffic. You need to recommend a solution that meets the following requirements:
- Configure the cloud service to ensure the application is responsive to the traffic increase.
- Minimize hosting and administration costs.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A. Configure the cloud service to run in two Large instances.
B. Configure the cloud service to auto-scale to three instances when processor utilization is above 80%.
C. Configure the storage account to be geo-redundant.
D. Deploy a new cloud service in a separate data center. Use Azure Traffic Manager to load balance traffic between the cloud services.
E. Configure the cloud service to auto-scale when the queue exceeds 1000 entries per machine.

QUESTION 60

You manage a cloud service on two instances. The service name is Service1 and the role name is ServiceRole1. Service1 has performance issues during heavy traffic periods. You need to increase the existing deployment of Service1 to three instances. Which Power Shell cmdlet should you use?

A. PS C:\>Set-AzureService -ServiceName "Service1" -Label "ServiceRole1' -Description "Instance count=3"
B. PS C:\>Set-AzureRole -ServiceName "Service1" -Slot "Production" -RoleName "ServiceRole1" -Count 3
C. PS C:\>Add-AzureWebRole -Name 'ServiceRole1" -Instances 3
D. PS C:\>$instancecount = New-Object Hashtable$settings['INSTANCECOUNT=3] PS C:\>Set-AzureWebsite -AppSettings $instancecount ServiceRole1