Microsoft 70-533: Implementing Microsoft Azure Infrastructure Solutions | Q 171 - 186 | Latest July 2017

QUESTION 171

Drag and Drop Question

You are an administrator for an Azure subscription that is used by your company. You have an Azure Web App that contains static content accessed by users. You plan to deliver content based on geographic location. The solution must allow clients to connect to a URL that ends in your corporate domain name of adatum.com. You must use the information provided by the portal for your on- premises modifications. You need to implement the components in Azure to support the above requirements. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

QUESTION 172

Hotspot Question

You federate your on-premises Active Directory with Azure Active Directory (Azure AD) by using Active Directory Federations Services (AD FS) 2.0. You plan to secure cloud and on-premises resources by using an Azure Multi-Factor Authentication (MFA) server. You install the MFA server on the AD FS proxy server. You configure the MFA server and successfully import all AD users into the MFA user database. Development teams in your organisation must be able to secure their non-browser based apps. You need to document the authentication mechanisms. For each requirement, which authentication mechanism is used. To answer, select the appropriate authentication mechanism from each list in the answer area.

QUESTION 173

You administer an Azure Active Directory (Azure AD) tenant that hosts a Software as a Service (SaaS) application named MyApp. You control access to MyApp by using the following two Azure AD groups:
- a group named SaaSApp that contains 200 users
- a group named AdminSaaS that contains 20 users
You need to revoke all access to MyApp for the SaaSApp by using the least administrative effort.
What should you do?

A. Delete the tenant.
B. Revoke access to MyApp.
C. Delete the SaaSApp group from Azure AD.
D. Revoke application access from users belonging to the SaaSApp group.

Answer: D

QUESTION 174

You have an application that needs to use single sign-on (SSO) between the company's Azure Active Directory (Azure AD) and the on-premises Windows Server 2012 R2 Active Directory. You configure the application to use Integrated Windows Authentication (IWA). You install an Application Proxy connector in the same domain as the server that is publishing the application. You need to configure the published application in Azure AD to enable SSO. What should you do?

A. Set the external authentication method to IWA.
B. Set the preauthenticated method to Pass through.
C. Set the internal authentication method to IWA.
D. Enable an access rule to require Multi-Factor Authentication.

Answer: C

QUESTION 175

You plan to implement Azure AD connect. You have an Active Directory Domain Services domain named Contoso. You need to determine if the organization's Active Directory is compatible with Azure AD Connect. Which command should you run?

A. dsquery * cn=schema,cn=configuration,dc=contoso,dc=local -scope base -attr objectVersion
B. nslookup finger contoso/objectVersion > > scope
C. ldifde -scope contoso -o domain -l objectVersion -p schema
D. csvde -i –s -j domain/schema -r objectVersion -b contoso -o local

Answer: A

QUESTION 176

You manage Azure Web Apps for a company. You migrate an on-premises web app to Azure. You plan to update the Azure Web App by modifying the connection string and updating the files that have changed since previous revision. The deployment process must use Secure Socket Layer (SSL) and occur during off-peak hours as an automated batch process. You need to update the Azure Web App. What should you do?

A. Close the Internet Information Services (IIS) virtual machine (VM) to Azure.
B. Deploy the web app from GitHub.
C. Use MSDeploy.exe.
D. Deploy the web app from the Internet Information Services (IIS) Management console.

Answer: B

QUESTION 177

You develop a set of PowerShell scripts that will run when you deploy new virtual machines (Vms).
You need to ensure that the scripts are run automatically when the VM is started. What should you do?
A. Load the scripts to a common file share accessible by the VMs.
B. Create a SetupComplete.cmd batch file to call the scripts after the VM starts.
C. Set the VNs to execute a custom extension.
D. Create a new virtual hard disk (VHD) that contains the scripts.

Answer: B

QUESTION 178

Hotspot Question

You deploy a Web App to Azure. The Web App uses several Basic tier, single instance virtual machines (Vms). The App includes a web tier, services tier, data tier, and a compute-intensive processing tier, as shown in the following diagram:

You have the following requirements:
- The application must be available during all Azure platform events, including planned (VM restarts required) and unplanned (hardware failure) events.
- You must simplify VM deployments by using JSON templates and the Azure Resource Manager (ARM).
- The processing tier must support high volume CPU loads at peak times throughout the year.
- The web tier must support high volumes of incoming Internet traffic during peak times throughout the year.
- The company has authorized downtime for the infrastructure upgrades. Future updates must not include downtime.
- The infrastructure upgrades must provide the most economical solution while meeting all requirements.
- Users report application outages during planned Azure maintenance windows.
You plan to upgrade the application to support upcoming company initiatives as well as address the user reports. You need to upgrade the application and infrastructure. For each tier, which action should you perform? To answer, select the appropriate action from each list in the answer area.

QUESTION 179

Drag and Drop Question

You have a runbook in Azure that evaluates the virtual machines (VMs) in a tenant and deallocates the VMs if they are no longer needed. You use the PowerState to determine if a VM is running. You need to deallocate only those VMs that are running at the time your runbook runs. How should you complete the relevant Azure PowerShell script? To answer, drag the appropriate Azure PowerShell cmdlets to the correct locations. Each Azure PowerShell cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

QUESTION 180

You have an Azure subscription. In Azure, you create two virtual machines named VM1 and VM2. Both virtual machines are instances in a cloud service named Cloud1. You need to ensure that any virtual hard disks that the VMs use are not replicated between datacenters. Which settings should you modify?
A. Azure subscription
B. virtual machine
C. cloud services
D. storage account

Answer: D

QUESTION 181

You deploy several virtual machines (VMs) to Azure by using the Azure Service Manager (classic). You must deploy new VMs by using the Azure Resource Manager (ARM). You need to ensure the new VMs can communicate with the existing Vms. What should you do?

A. Create a new resource group and include all VMs.
B. Create a site-to-site (S2S) VPN connection between the classic VNet and the ARM VNet.
C. Migrate the classic VMs to the ARM VNet.
D. Create a new availability set and include all VMs.

QUESTION 182

Drag and Drop Question

You plan to deploy an application by using three Azure virtual machines (VMs). The application has a web- based component that uses TCP port 443 and a custom component that uses UDP port 2020. The application must be available during planned and unplanned Azure maintenance events. Incoming client requests must be distributed across the three VMs. Clients must be connected to a VM only if both application components are running. You need to configure the VM environment. For each requirement, what should you implement? To answer, drag the appropriate configuration type to the correct target. Each configuration type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

QUESTION 183

Drag and Drop Question

You are managing an Azure SQL Database. You need to export the database to a BACPAC file and verify that the export completes successfully. Which four Azure PowerShell cmdlets or scripts should you run in sequence? To answer, move the appropriate cmdlets or scripts from the list of cmdlets to the answer area and arrange them in the correct order.

QUESTION 184

You have an Azure subscription that contains a backup vault named BV1. BV1 contains five protected servers. Backups run daily. You need to modify the storage replication settings for the backups. What should you do first?

A. Create a new backup vault.
B. Modify the policies associated to BV1.
C. Uninstall the backup agent from the five servers.
D. Run the Remove-OBFileSpec cmdlet.

Answer: B

QUESTION 185

You administer an Azure SQL Database that runs in the S0 service tier. The database stored mission- critical data. You must meet the following requirements:
- minimize costs associated with hosting the database in Azure
- minimize downtime in the event of an outage
- protect the database from unplanned events
What should you do?

A. Implement a secondary database in the paired region.
B. Ensure that a secondary databases are online and readable at all times.
C. Create a continuously replicated copy.
D. Use backups in a geo-redundant Azure storage (GRS) location.

Answer: D

QUESTION 186

Hotspot Question

You manage a public-facing web application which allows authenticated users to upload and download large files. On the initial public page there is a promotional video. You plan to give authenticated users the ability to upload and download large files. Anonymous users should be able to view the promotional video. In the table below, identify the access method that should be used for the anonymous and authenticated parts of the application. Make only one selection in each column.

Answer: 1. Authenticated; 4. Anonymous