
Act now and download your Microsoft 70-535 test today! Do not waste time for the worthless Microsoft 70-535 tutorials. Download Improved Microsoft Architecting Microsoft Azure Solutions exam with real questions and answers and begin to learn Microsoft 70-535 with a classic professional.
P.S. Free 70-535 item pool are available on Google Drive, GET MORE: https://drive.google.com/open?id=1xTpo6SaPBTj1K3waI-NntgOTE04sKa7q
Q1. You administer an Azure Active Directory (Azure AD) tenant where Box is configured for:
* Application Access
* Password Single Sign-on
An employee moves to an organizational unit that does not require access to Box through the Access Panel. You need to remove only Box from the list of applications only for this user. What should you do?
A. Delete the user from the Azure AD tenant
B. Delete the Box Application definition from the Azure AD tenant
C. From the Management Portal, remove the user's assignment to the application.
D. Disable the user's account in Windows AD
Answer: C
Explanation:
References: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-apps-permissions-consent
Q2. A company uses Azure to host all resources and uses Microsoft Visual Studio Team Services to manage product life cycles.
You need to ensure the team can start runbooks from Visual Studio Team Services. Which solution should you use?
A. Azure Portal
B. Hybrid Runbook Workers
C. Azure Automation API
D. Schedule
E. Webhook
Answer: E
Explanation:
References:
https://docs.microsoft.com/en-us/azure/automation/automation-webhooks
Q3. You administer a DirSync server configured with Azure Active Directory (Azure AD). You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Restart the DirSync server
B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet.
C. Run the Enable-SyncShare PowerShell cmdlet.
D. Run the Azure AD Sync tool Configuration Wizard.
E. Replicate the Directory in Active Directory Sites and Services.
Answer: B,D
Explanation:
References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active- directory-aadconnect
Q4. An application sends Azure push notifications to a client application that runs on Windows Phone, iOS, and Android devices. Users cannot use the application on some devices. The authentication mechanisms that the application uses are the source of the problem.
You need to monitor the number of notifications that failed because of authentication errors. Which three metrics should you monitor? Each correct answer presents part of the solution
A. Microsoft Push Notification Service (MPNS) authentication errors
B. External notification system errors
C. Apple Push Notification Service (APNS) authentication errors
D. Channel errors
E. Windows Push Notification Services (WNS) authentication errors
F. Google Cloud Messaging (GCM) authentication errors
Answer: A,C,F
Explanation:
You must provision your app with one or more of the following services: Microsoft Push Notification Service (MPNS) for Windows Phone devices Apple Push Notification Service (APNS) for iPad and iPhone devices Google Cloud Messaging service (GCM) for Android devices
Windows Notification Service (WNS) for Windows devices
References: https://msdn.microsoft.com/en-us/magazine/dn879353.aspx
Q5. You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user information. The application access key for TeamSite1 has been compromised.
You need to ensure that users can continue to use TeamSite1 and that the compromised key does not allow access to the data in your Azure AD tenant. Which two actions should you perform? Each correct answer presents part of the solution.
A. Remove the compromised key from the application definition for TeamSite1.
B. Delete the application definition for TeamSite1.
C. Generate a new application key for TeamSite1
D. Generate a new application definition for TeamSite1.
E. Update the existing application key.
Answer: A,C
Explanation:
References: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-integrating-applications
Q6. Your company has recently signed up for Azure. You plan to register a Data Protection Manager (DPM) server with the Azure Backup service. You need to recommend a method for registering the DPM server with the Azure Backup vault.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Import a self-signed certificate created using the makecert tool.
B. Import a self-signed certificate created using the createcert tool.
C. Import an X.509 v3 certificate with valid clientauthentication EKU.
D. Import an X.509 v3 certificate with valid serverauthentication EKU.
Answer: A,C
Explanation:
The certificate used for the backup vault in Azure must fulfill the following prerequisites: References: https://blogs.technet.microsoft.com/hybridcloud/2014/03/16/using-azure-backup-with-dpm/
Q7. You manage a software-as-a-service application named SaasApp1 that provides user management features in a multi-directory environment. You plan to offer SaasApp1 to other organizations that use Azure Active Directory.
You need to ensure that SaasApp1 can access directory objects. What should you do?
A. Configure the Federation Metadata URL
B. Register SaasApp1 as a native client application
C. Register SaasApp1 as a web application
D. Configure the Graph API
Answer: D
Explanation:
The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects.
References: http://msdn.microsoft.com/en-us/library/azure/hh974476.aspx
Q8. You need to prepare the implementation of data storage for the contractor information app. What should you?
A. Create a storage account and implement multiple data partitions.
B. Create a Cloud Service and a Mobile Service. Implement Entity Group transactions.
C. Create a Cloud Service and a Deployment group. Implement Entity Group transactions.
D. Create a Deployment group and a Mobile Service. Implement multiple data partitions.
Answer: B
Explanation:
* Scenario:
/ VanArsdel needs a solution to reduce the number of operations on the contractor information table. Currently, data transfer rates are excessive, and queue length for read/write operations affects performance.
/ A mobile service that is used to access contractor information must have automatically scalable, structured storage
* The basic unit of deployment and scale in Azure is the Cloud Service. References: https://msdn.microsoft.com/en-us/library/azure/dd894038.aspx
Q9. Your network environment includes remote employees. You need to create a secure connection for the remote employees who require access to your Azure virtual network. What should you do?
A. Deploy Windows Server 2012 RRAS
B. Configure a point-to-site VPN
C. Configure an ExpressRoute
D. Configure a site-to-site VPN
Answer: B
Explanation:
Virtual Network is a service that allows you to create a private, isolated network in Windows Azure and treat it as an extension of your datacenter. You can assign private IP addresses to virtual machines inside a virtual network, specify DNS, and connect it to your on- premises infrastructure using a Cisco or Juniper hardware VPN device in a u2021site-to-siteu2021 manner.
References: https://azure.microsoft.com/en-us/blog/virtual-network-adds-new-capabilities-for-cross-premises-connectivity/
Q10. You need to configure the distribution tracking application. What should you do?
A. Map each role to a single upgrade domain to optimize resource utilization.
B. Design all services as stateless services.
C. Configure operations to queue when a role reaches its capacity.
D. Configure multiple worker roles to run on each virtual machine.
Answer: D
Explanation:
* Scenario: distribution tracking application
The system is processor intensive and should be run in a multithreading environment.
References: http://mark.mymonster.nl/2013/01/29/running-multiple-workers-inside-one-windows-azure-worker-role
100% Improved Microsoft 70-535 Questions & Answers shared by Certleader, Get HERE: https://www.certleader.com/70-535-dumps.html (New Q&As)