70-533 Exam Questions - Online Test

70-533 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Testking offers free demo for mcp 70 533 exam. "Implementing Microsoft Azure Infrastructure Solutions", also known as 70 533 study guide pdf exam, is a Microsoft Certification. This set of posts, Passing the Microsoft 70 533 exam questions exam, will help you answer those questions. The microsoft azure certification 70 533 Questions & Answers covers all the knowledge points of the real exam. 100% real Microsoft 70 533 dumps pdf exams and revised by experts!

Q51. DRAG DROP 

You plan to deploy a cloud service named contosoapp. The service includes a web role named contosowebrole. The web role has an endpoint named restrictedEndpoint. 

You need to allow access to restricted Endpoint only from your office machine using the IP address 145.34.67.82. 

Which values should you use within the service configuration file? To answer, drag the appropriate value to the correct location in the service configuration file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 

Q52. You manage an application deployed to virtual machines (VMs) on an Azure virtual network 

named corpVnet1. 

You plan to hire several remote employees who will need access to the application on corpVnet1. 

You need to ensure that new employees can access corpVnet1. You want to achieve this goal by using the most cost effective solution. 

Which two actions should you perform? Each correct answer presents part of the solution. 

A. Create a VPN subnet. 

B. Enable point-to-point connectivity for corpVnet1. 

C. Enable point-to-site connectivity for corpVnet1. 

D. Create a gateway subnet. 

E. Enable site-to-site connectivity for corpVnet1. 

F. Convert corpVnet1 to a regional virtual network. 

Answer: A,C 

Explanation: 

A point-to-site VPN also allows you to create a secure connection to your virtual network. In a point-to-site configuration, the connection is configured individually on each client computer that you want to connect to the virtual network. Point-to-site connections do not require a VPN device. They work by using a VPN client that you install on each client computer. The VPN is established by manually starting the connection from the on-premises client computer. You can also configure the VPN client to automatically restart. 

Reference: About Secure Cross-Premises Connectivity 

Q53. You administer an Azure Storage account with a blob container. You enable Storage account logging for read, write and delete requests. 

You need to reduce the costs associated with storing the logs. 

What should you do? 

A. Execute Delete Blob requests over https. 

B. Create an export job for your container. 

C. Set up a retention policy. 

D. Execute Delete Blob requests over http. 

Answer: C 

Explanation: To ease the management of your logs, we have provided the functionality of retention policy which will automatically cleanup ‘old’ logs without you being charged for the cleanup. It is recommended that you set a retention policy for logs such that your analytics data will be within the 20TB limit allowed for analytics data (logs and metrics combined). 

Reference: Windows Azure Storage Logging: Using Logs to Track Storage Requests, How do I cleanup my logs? 

URL: http://blogs.msdn.com/b/windowsazurestorage/archive/2011/08/03/windows-azure-storage-logging-using-logs-to-track-storage-requests.aspx 

Q54. You manage a software-as-a-service application named SaasApp1 that provides user management features in a multi-directory environment. 

You plan to offer SaasApp1 to other organizations that use Azure Active Directory. 

You need to ensure that SaasApp1 can access directory objects. 

What should you do? 

A. Configure the Federation Metadata URL 

B. Register SaasApp1 as a native client application. 

C. Register SaasApp1 as a web application. 

D. Configure the Graph API. 

Answer: D 

Explanation: The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects. For example, the Graph API supports the following common operations for a user object: / Create a new user in a directory / Get a user’s detailed properties, such as their groups / Update a user’s properties, such as their location and phone number, or change their password / Check a user’s group membership for role-based access / Disable a user’s account or delete it entirely 

Reference: Azure AD Graph API 

URL: http://msdn.microsoft.com/en-us/library/azure/hh974476.aspx 

Q55. Your network environment includes remote employees. 

You need to create a secure connection for the remote employees who require access to your Azure virtual network. 

What should you do? 

A. Deploy Windows Server 2012 RRAS. 

B. Configure a point-to-site VPN. 

C. Configure an ExpressRoute. 

D. Configure a site-to-site VPN. 

Answer: B 

Explanation: New Point-To-Site Connectivity 

With today’s release we’ve added an awesome new feature that allows you to setup VPN connections between individual computers and a Windows Azure virtual network without the need for a VPN device. We call this feature Point-to-Site Virtual Private Networking. This feature greatly simplifies setting up secure connections between Windows Azure and client machines, whether from your office environment or from remote locations. 

It is especially useful for developers who want to connect to a Windows Azure Virtual Network (and to the individual virtual machines within it) from either behind their corporate firewall or a remote location. Because it is point-to-site they do not need their IT staff to perform any activities to enable it, and no VPN hardware needs to be installed or configured. Instead you can just use the built-in Windows VPN client to tunnel to your Virtual Network in Windows Azure. 

Reference: Windows Azure: Improvements to Virtual Networks, Virtual Machines, Cloud Services and a new Ruby SDK 

http://azure.microsoft.com/blog/2013/04/26/virtual-network-adds-new-capabilities-for-cross-premises-connectivity/ 

Q56. You administer a DirSync server configured with Azure Active Directory (Azure AD). 

You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval. 

What are two possible ways to achieve this goal? Each correct answer presents a complete solution. 

A. Restart the DirSync server. 

B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet. 

C. Run the Enable-SyncShare PowerShell cmdlet. 

D. Run the Azure AD Sync tool Configuration Wizard. 

E. Replicate the Directory in Active Directory Sites and Services. 

Answer: B,D 

Explanation: If you don’t want to wait for the recurring synchronizations that occur every three hours, you can force directory synchronization at any time. 

B: Force directory synchronization using Windows PowerShell 

You can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import-Module DirSync, and then press ENTER. 

Type Start-OnlineCoexistenceSync, and then press ENTER. 

D: Azure Active Directory Sync Services (AAD Sync) 

In September 2014 the Microsoft Azure AD Sync tool was released. This changed how 

manual sync requests are issued. 

To perform a manual update we now use the DirectorySyncClientCmd.exe tool. The Delta 

and Initial parameters are added to the command to specify the relevant task. 

This tool is located in: 

C:\Program Files\Microsoft Azure AD Sync\Bin 

You can use the directory synchronization Windows PowerShell cmdlet to force 

synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import-Module DirSync, and then press ENTER. 

Type Start-OnlineCoexistenceSync, and then press ENTER. 

Q57. You administer an Azure Web Site named contoso. You create a job named Cleanlogs.cmd that will be executed manually, twice a week. 

You need to deploy the job. 

To which folder location should you deploy CleanLogs.cmd? 

A. ./App_Code/jobs/triggered/cleanLogs/CleanLogs.cmd 

B. ./App_Data/jobs/triggered/clean Logs/CleanLogs.cmd 

C. ./App_Code/jobs/continuous/cleanLogs/CleanLogs.cmd 

D. ./App_Data/jobs/continuous/cleanLogs/CleanLogs.cmd 

Answer: B 

Explanation: A WebJob is stored under the following directory in your site: 

site\wwwroot\App_Data\jobs\{job type}\{job name} 

Where {job type} can be either continuous for a job that is always running or triggered for a job that starts from an external trigger (on demand / scheduler). 

Reference: How to deploy Azure WebJobs 

URL: http://blog.amitapple.com/post/74215124623/deploy-azure-webjobs/#.VDZam_mSx8E 

Q58. HOTSPOT 

You manage a public-facing web application which allows authenticated users to upload and download large files. On the initial public page there is a promotional video. 

You plan to give users access to the site content and promotional video. 

In the table below, identify the access method that should be used for the anonymous and authenticated parts of the application. Make only one selection in each column. 

Answer: 

Q59. You manage two datacenters in different geographic regions and one branch office. 

You plan to implement a geo-redundant backup solution. 

You need to ensure that each datacenter is a cold site for the other. 

You create a recovery vault. What should you do next? 

A. Install the provider. 

B. Upload a certificate to the vault. 

C. Generate a vault key. 

D. Set all virtual machines to DHCP. 

E. Prepare System Center Virtual Machine Manager (SCVMM) servers. 

F. Create mappings between the virtual machine (VM) networks. 

Answer: C 

Explanation: . Within the Azure Portal screen, scroll down to Recovery Services (on the left menu), and click on “Create a New Vault” (this is where your VMs will be replicated to) which will bring up a Data Services / Recovery Services / Site Recovery Vault option, select Quick Create . For the name of the Vault, give it something you’d remember, in my case, I’ll call it RandsVault, and I’ll choose the Region West US since I’m in the Western United States, then click Create Vault . Once the Vault has been created, click on the Right Arrow next to the name of your vault. Under Setup Recovery, choose “Between an on-premise site and Microsoft Azure” so that you are telling the configuration settings that you are going to be replicating between your on-premise datacenter and Azure in the cloud. . You will now see a list of things you need to do which the first thing is to create a key exchange of certificates between Microsoft Azure and your VMM server. 

Reference: Leveraging Microsoft Azure as your disaster recovery/failover data center 

Q60. DRAG DROP 

You publish a multi-tenant application named MyApp to Azure Active Directory (Azure AD). 

You need to ensure that only directory administrators from the other organizations can access MyApp's web API. 

How should you configure MyApp's manifest JSON file? To answer, drag the appropriate PowerShell command to the correct location in the application's manifest JSON file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: