Download New Updated (June) Microsoft 70-533 Practice Test 21-30

Ensurepass

QUESTION 21

HOTSPOT

You manage an Azure Web Site for a consumer-product company.

 

The website runs in Standard mode on a single medium instance.

 

You expect increased traffic to the website due to an upcoming sale during a holiday weekend.

 

You need to ensure that the website performs optimally when user activity is at its highest.

 

Which option should you select?

 

To answer, select the appropriate option in the answer area.

 

clip_image001

 

Correct Answer:

clip_image002

 

QUESTION 22

Your company plans to migrate from On-Premises Exchange to Exchange Online in Office 365.

 

You plan to integrate your existing Active Directory Domain Services (AD DS) infrastructure with Azure AD.

 

You need to ensure that users can log in by using their existing AD DS accounts and passwords. You need to achieve this goal by using minimal additional systems.

 

Which two actions should you perform? Each answer presents part of the solution.

 

A.

Configure Password Sync.

B.

Set up a DirSync Server.

C.

Set up an Active Directory Federation Services Server.

D.

Set up an Active Directory Federation Services Proxy Server.

 

Correct Answer: AB

Explanation:

Directory Sync with Password Sync Scenario’ Applies To: Azure, Office 365, Windows Intune

 

Password sync is an extension to the Directory Sync Scenario. With directory sync, you can manage the entire lifecycle of your cloud user and group accounts using your on- premise Active Directory management tools.

 

When password sync is enabled on your directory sync computer, your users will be able to sign into Microsoft cloud services, such as Office 365, Dynamics CRM, and Windows InTune, using the same password as they use when logging into your on-premises network. When your users change their passwords in your corporate network, those changes are synchronized to the cloud.

 

Reference: Directory Sync with Password Sync Scenario’

 

URL: http://technet.microsoft.com/en-us/library/dn441214.aspx

 

 

QUESTION 23

You administer a virtual machine (VM) that is deployed to Azure. You configure a rule to generate an alert when the average availability of a web service on your VM drops below 95 percent for 15 minutes.

 

The development team schedules a one-hour maintenance period.

 

You have the following requirements:

 

No alerts are created during the maintenance period. Alerts can be restored when the maintenance is complete.

 

You want to achieve this goal by using the least amount of administrative effort.

 

What should you do from the Management Portal?

 

A.

Select and disable the rule from the Dashboard page of the virtual machine.

B.

Select and delete the rule from the Configure page of the virtual machine.

C.

Select and disable the rule from the Monitor page of the virtual machine.

D.

Select and disable the rule on the Configure page of the virtual machine.

 

Correct Answer: C

Explanation:

Example:

clip_image003

 

Virtual Machines

 

You can configure virtual machine alert rules on:

 

clip_image005Monitoring metrics from the virtual machine host operating system

clip_image005[1]Web endpoint status metrics

 

Reference: Understanding Monitoring Alerts and Notifications in Azure

 

 

QUESTION 24

You administer a solution deployed to a virtual machine (VM) in Azure. The VM hosts a web service that is used by several applications. You are located in the US West region and have a worldwide user base.

 

Developers in Asia report that they experience significant delays when they execute the services.

 

You need to verify application performance from different locations.

 

Which type of monitoring should you configure?

 

A.

Disk Read

B.

Endpoint

C.

Network Out

D.

CPU

E.

Average Response Time

 

Correct Answer: E

Explanation:

Example:

clip_image007

 

Incorrect:

Not B: Health Endpoint Monitoring Pattern is used for checking the health of the program:

Implement functional checks within an application that external tools can access through exposed endpoints at regular intervals. This pattern can help to verify that applications and services are performing correctly.

 

Reference: How to Monitor and Analyze Performance of the Windows Azure Storage Service

 

 

QUESTION 25

DRAG DROP

You administer an Azure Web Site named contosoweb that uses a production database. You deploy changes to contosoweb from a deployment slot named contosoweb-staging.

 

You discover issues in contosoweb that are affecting customer data.

 

You need to resolve the issues in contosoweb while ensuring minimum downtime for users.

 

You swap contosoweb to contosoweb-staging.

 

Which four steps should you perform next in sequence?

 

To answer, move the appropriate actions from the list of action
s to the answer area and arrange them in the correct order.

 

clip_image008

 

Correct Answer:

clip_image009

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 26

You manage an application running on Azure Web Sites Standard tier. The application uses a substantial amount of large image files and is used by people around the world.

 

Users from Europe report that the load time of the site is slow.

 

You need to implement a solution by using Azure services.

 

What should you do?

 

A.

Configure Azure blob storage with a custom domain.

B.

Configure Azure CDN to cache all responses from the application web endpoint.

C.

Configure Azure Web Site auto-scaling to increase instances at high load.

D.

Configure Azure CDN to cache site images and content stored in Azure blob storage.

 

Correct Answer: A

Explanation:

You can configure a custom domain for accessing blob data in your Azure storage account. The default endpoint for the Blob service is https://<mystorageaccount&gt
;.blob.core.windows.net. If you map a custom domain and subdomain such as www.contoso.com to the blob endpoint for your storage account, then your users can also access blob data in your storage account using that domain.

 

Reference: Configure a custom domain name for blob data in an Azure storage account

URL: http://azure.microsoft.com/en-us/documentation/articles/storage-custom-domain-name/

 

 

QUESTION 27

You develop a Windows Store application that has a web service backend.

 

You plan to use the Azure Active Directory Authentication Library to authenticate users to Azure Active Directory (Azure AD) and access directory data on behalf of the user.

 

You need to ensure that users can log in to the application by using their Azure AD credentials.

 

Which two actions should you perform? Each correct answer presents part of the solution.

 

A.

Create a native client application in Azure AD.

B.

Configure directory integration.

C.

Create a web application in Azure AD.

D.

Enable workspace join.

E.

Configure an Access Control namespace.

 

Correct Answer: BC

Explanation:

B: An application that wants to outsource authentication to Azure AD must be registered in Azure AD, which registers and uniquely identifies the app in the directory.

C (not A): NativeClient-WindowsStore

A Windows Store application that calls a web API that is secured with Azure AD.

 

clip_image011

 

Reference: AzureADSamples/NativeClient-WindowsStore

 

Authentication Scenarios for Azure AD, Basics of Authentication in Azure AD

 

http://msdn.microsoft.com/en-us/library/azure/dn499820.aspx#BKMK_Auth

https://github.com/AzureADSamples/NativeClient-WindowsStore

 

 

QUESTION 28

You manage a cloud service that hosts a customer-facing application. The application allows users to upload images and create collages. The cloud service is running in two medium instances and utilizes Azure Queue storage for image processing. The storage account is configured to be locally redundant.

 

The sales department plans to send a newsletter to potential clients. As a result, you expect a significant increase in global traffic.

 

You need to recommend a solution that meets the following requirements:

 

clip_image005[2]Configure the cloud service to ensure the application is responsive to the traffic increase.

clip_image005[3]Minimize hosting and administration costs.

 

What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

 

A.

Configure the cloud service to run in two Large instances.

B.

Configure the cloud service to auto-scale to three instances when processor utilization is above 80%.

C.

Configure the storage account to be geo-redundant

D.

Deploy a new cloud service in a separate data center. Use Azure Traffic Manager to load balance traffic between the cloud services.

E.

Configure the cloud service to auto-scale when the queue exceeds 1000 entries per machine.

Correct Answer: BE

Explanation:

* An autoscaling solution reduces the amount of manual work involved in dynamically scaling an application. It can do this in two different ways: either preemptively by setting constraints on the number of role instances based on a timetable, or reactively by adjusting the number of role instances in response to some counter(s) or measurement(s) that you can collect from your application or from the Azure environment.

 

Reference: Autoscaling and Microsoft Azure

 

 

QUESTION 29

DRAG DROP

You publish a multi-tenant application named MyApp to Azure Active Directory (Azure AD).

 

You need to ensure that only directory administrators from the other organizations can access MyApp’s web API.

 

How should you configure MyApp’s manifest JSON file?

 

To answer, drag the appropriate PowerShell command to the correct location in the application’s manifest JSON file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

 

clip_image012

 

Correct Answer:

clip_image013

 

 

QUESTION 30

You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access to the web APIs through OAuth 2.0.

 

MyApp is generating numerous user consent prompts.

 

You need to reduce the amount of user consent prompts.

 

What should you do?

 

A.

Enable Multi-resource refresh tokens.

B.

Enable WS-federation access tokens.

C.

Configure the Open Web Interface for .NET.

D.

Configure SAML 2.0.

 

Correct Answer: A

Explanation:

When using the Authorization Code Grant Flow, you can configure the client to call multiple resources. Typically, this would require a call to the authorization endpoint for each target service. To avoid multiple calls and multiple user consent prompts, and reduce the number of refresh tokens the client needs to cache, Azure Active Directory (Azure AD) has implemented multi-resource refresh tokens. This feature allows you to use a single refresh token to request access tokens for multiple resources.

 

Reference:Azure, OAuth 2.0, Refresh Tokens for Multiple Resources

 

Free VCE & PDF File for Microsoft 70-533 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…