Want to Pass 70-533 Exam In Next HOURS? Get it now →
October 11, 2017

Facts about 70 533 study guide pdf

we provide Download Microsoft microsoft 70 533 exam price which are the best for clearing 70 533 azure test, and to get certified by Microsoft Implementing Microsoft Azure Infrastructure Solutions. The 70 533 study guide pdf Questions & Answers covers all the knowledge points of the real 70 533 exam dumps pdf exam. Crack your Microsoft mcp 70 533 Exam with latest dumps, guaranteed!

Q1. DRAG DROP 

You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named ContosoService1. 

You discover unauthorized traffic to CON-CL1. You need to: 

. Create a rule to limit access to CON-CL1. 

. Ensure that the new rule has the highest precedence. 

Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet or value to the correct location in the Power Shell command. Each cmdlet or value may be used once, more than once, or not at all. You may need to drag the split bat between panes or scroll to view content. 

Answer: 


Q2. DRAG DROP 

Your company network includes a single forest with multiple domains. You plan to migrate from On-Premises Exchange to Exchange Online. 

You want to provision the On-Premises Windows Active Directory (AD) and Azure Active Directory (Azure AD) service accounts. 

You need to set the required permissions for the Azure AD service account. 

Which settings should you use? To answer, drag the appropriate permission to the service account. Each permission may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 


Q3. You administer a DirSync server configured with Azure Active Directory (Azure AD). 

You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval. 

What are two possible ways to achieve this goal? Each correct answer presents a complete solution. 

A. Restart the DirSync server. 

B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet. 

C. Run the Enable-SyncShare PowerShell cmdlet. 

D. Run the Azure AD Sync tool Configuration Wizard. 

E. Replicate the Directory in Active Directory Sites and Services. 

Answer: B,D 

Explanation: If you don’t want to wait for the recurring synchronizations that occur every three hours, you can force directory synchronization at any time. 

B: Force directory synchronization using Windows PowerShell 

You can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import-Module DirSync, and then press ENTER. 

Type Start-OnlineCoexistenceSync, and then press ENTER. 

D: Azure Active Directory Sync Services (AAD Sync) 

In September 2014 the Microsoft Azure AD Sync tool was released. This changed how 

manual sync requests are issued. 

To perform a manual update we now use the DirectorySyncClientCmd.exe tool. The Delta 

and Initial parameters are added to the command to specify the relevant task. 

This tool is located in: 

C:\\Program Files\\Microsoft Azure AD Sync\\Bin 

You can use the directory synchronization Windows PowerShell cmdlet to force 

synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import-Module DirSync, and then press ENTER. 

Type Start-OnlineCoexistenceSync, and then press ENTER. 


Q4. Your company has a subscription to Azure. 

You configure your contoso.com domain to use a private Certificate Authority. You deploy a web site named MyApp by using the Shared (Preview) web hosting plan. 

You need to ensure that clients are able to access the MyApp website by using https. 

What should you do? 

A. Back up the Site and import into a new website. 

B. Use the internal Certificate Authority and ensure that clients download the certificate chain. 

C. Add custom domain SSL support to your current web hosting plan. 

D. Change the web hosting plan to Standard. 

Answer:

Explanation: Enabling HTTPS for a custom domain is only available for the Standard web hosting plan mode of Azure websites. 

Reference: Enable HTTPS for an Azure website 

http://azure.microsoft.com/en-us/pricing/details/websites/ 


Q5. You manage a web application published to Azure Cloud Services. 

Your service level agreement (SLA) requires that you are notified in the event of poor performance from customer locations in the US, Asia, and Europe. 

You need to configure the Azure Management Portal to notify you when the SLA performance targets are not met. 

What should you do? 

A. Create an alert rule to monitor web endpoints. 

B. Create a Notification Hub alert with response time metrics. 

C. Add an endpoint monitor and alert rule to the Notification Hub. 

D. Configure the performance counter on the cloud service. 

Answer:

Explanation: * An alert rule enables you to monitor an available metric within a supported Azure service. When the value of a specified metric violates the threshold assigned for a rule, the alert rule becomes active and registers an alert. When you create an alert rule, you can select options to send an email notification to the service administrator and co-administrators, or another administrator, when the rule becomes active, and when an alert condition is resolved. 

* You can configure cloud service alert rules on: 

Web endpoint status metrics Monitoring metrics from the cloud service host operating system Performance counters collected from the cloud service guest virtual machine 

: Understanding Monitoring Alerts and Notifications in Azure 

URL: http://msdn.microsoft.com/en-us/library/azure/dn306639.aspx 


Q6. HOTSPOT 

You have an Azure SQL Database named Contosodb. Contosodb is running in the Standard/S2 tier and has a service level objective of 99 percent. 

You review the service tiers in Microsoft Azure SQL Database as well as the results of running performance queries for the usage of the database for the past week as shown in the exhibits. (Click the Exhibits button.) 

For each of the following statements, select Yes if the statement is true. Otherwise, select No. 

Answer: 


Q7. Your company network includes two branch offices. Users at the company access internal virtual machines (VMs). 

You want to ensure secure communications between the branch offices and the internal VMs and network. 

You need to create a site-to-site VPN connection. 

What are two possible ways to achieve this goal? Each correct answer presents a complete solution. 

A. a private IPv4 IP address and a compatible VPN device 

B. a private IPv4 IP address and a RRAS running on Windows Server 2012 

C. a public-facing IPv4 IP address and a compatible VPN device 

D. a public-facing IPv4 IP address and a RRAS running on Windows Server 2012 

Answer: C,D 

Explanation: C (not A): VPN Device IP Address.- This is public facing IPv4 address of your on-premises VPN device that you’ll use to connect to Azure. The VPN device cannot be located behind a NAT. D (Not B): At least one or preferably two publicly visible IP addresses: One of the IP addresses is used on the Windows Server 2012 machine that acts as the VPN device by using RRAS. The other optional IP address is to be used as the Default gateway for out-bound traffic from the on-premises network. If the second IP address is not available, it is possible to configure network address translation (NAT) on the RRAS machine itself, to be discussed in the following sections. It is important to note that the IP addresses must be public. They cannot be behind NAT and/or a firewall. 

Reference: Configure a Site-to-Site VPN in the Management Portal 

Site-to-Site VPN in Azure Virtual Network using Windows Server 2012 Routing and Remote Access Service (RRAS) 


Q8. DRAG DROP 

You administer an Azure Virtual Machine (VM) named server1. The VM is in a cloud service named ContosoService1. 

You discover that the VM is experiencing storage issues due to increased application logging on the server. 

You need to create a new 256-GB disk and attach it to the server. 

Which Power Shell cmdlets should you use? To answer, drag the appropriate cmdlet to the correct location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 


Q9. Your company has a subscription to Azure. You plan to deploy 10 websites. You have the following requirements: 

. Each website has at least 15 GB of storage. 

. All websites can use azurewebsite.net. 

You need to deploy the 10 websites while minimizing costs. 

Which web tier plan should you recommend? 

A. Free 

B. Small Business 

C. Standard 

D. Basic 

Answer:

Explanation: Standard offers 50 GB of storage space, while Basic only gives 10 GB: 

Reference: Websites Pricing Details 

URL: http://azure.microsoft.com/en-us/pricing/details/websites/ 

http://azure.microsoft.com/en-us/documentation/articles/azure-subscription-service-limits/ 


Q10. You manage a software-as-a-service application named SaasApp1 that provides user management features in a multi-directory environment. 

You plan to offer SaasApp1 to other organizations that use Azure Active Directory. 

You need to ensure that SaasApp1 can access directory objects. 

What should you do? 

A. Configure the Federation Metadata URL 

B. Register SaasApp1 as a native client application. 

C. Register SaasApp1 as a web application. 

D. Configure the Graph API. 

Answer:

Explanation: The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects. For example, the Graph API supports the following common operations for a user object: / Create a new user in a directory / Get a user’s detailed properties, such as their groups / Update a user’s properties, such as their location and phone number, or change their password / Check a user’s group membership for role-based access / Disable a user’s account or delete it entirely 

Reference: Azure AD Graph API 

URL: http://msdn.microsoft.com/en-us/library/azure/hh974476.aspx 



see more free 70-533 exam dumps