Exam 70-533: Implementing Microsoft Azure Infrastructure Solutions Part 2
Posted by Superadmin on December 03 2018 05:37:46

Question ID 13691

You manage a cloud service that supports features hosted by two instances of an Azure
virtual machine (VM).
You discover that occasional outages cause your service to fail.
You need to minimize the impact of outages to your cloud service.
Which two actions should you perform? Each correct answer presents part of the solution.
Option A

Deploy a third instance of the VM.
Option B

Configure Load Balancing on the VMs.
Option C

Redeploy the VMs to belong to an Affinity Group.
Option D

Configure the VMs to belong to an Availability Set.
Correct Answer A,B
Description 
Update Date and Time 2017-10-20 12:06:04

Question ID 13692

You manage an Azure virtual machine (VM) named AppVM. The application hosted on
AppVM continuously writes small files to disk. Recently the usage of applications on
AppVM has increased greatly.
You need to improve disk performance on AppVM.
Which Microsoft Azure Power Shell cmdlet should you use with each Power Shell
command line? To answer, drag the appropriate Microsoft Azure Power Shell cmdlet to the
correct location in the Power Shell code. Each Power Shell cmdlet may be used once,
more than once, or not at all. You may need to drag the split bar between panes or scroll to
view content.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-20 12:08:02

Question ID 13693

You administer an Azure subscription with an existing cloud service named
contosocloudservice. Contosocloudservice contains a set of related virtual machines (VMs)
named ContosoDC, ContosoSQL and ContosoWeb1.
You want to provision a new VM within contosocloudservice.
You need to use the latest gallery image to create a new Windows Server 2012 R2 VM that
has a target IOPS of 500 for any provisioned disks.
Which PowerShell command should you use?
Option A

Option A
Option B

Option B
Option C

Option C
Option D

Option D
Correct Answer B
Description Explanation: We must use the ServiceName parameter as the new VM is to be provisioned within an existing service. New-AzureVM -ServiceName -ServiceName specifies the new or existing service name. References:
Update Date and Time 2017-10-21 06:18:51

Question ID 13694

Your company manages several Azure Web Sites that are running in an existing web-
hosting plan named plan1.
You need to move one of the websites, named contoso, to a new web-hosting plan named
plan2.
Which Azure PowerShell cmdlet should you use with each PowerShell command line? To
answer, drag the appropriate Azure PowerShell cmdlet to the correct location in the
PowerShell code. Each PowerShell cmdlet may be used once, more than once, or not at
all. You may need to drag the split bar between panes or scroll to view content.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:21:17


 

Question ID 13695

You create a virtual network named fabVNet01.
You design the virtual network to include two subnets, one named DNS-subnet and one
named Apps-subnet, as shown in the exhibit. (Click the Exhibits button.)

In the table below, identify the number of IP addresses that will be available for virtual
machines (VMs) or cloud services in each subnet. Make only one selection in each column.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:25:12

Question ID 13696

You manage an Azure Web Site named contosoweb. Logging is enabled for contosoweb.
You need to view only errors from your log files in a continuous stream as they occur.
Which Windows Power Shell command should you execute?
Option A

Get-AzureWebSiteLog -Name contosoweb -OutBuffer Error
Option B

Save-AzureWebSiteLog -Name contosoweb -Output Errors
Option C

Get-AzureWebSiteLog -Name contosoweb -Tail –Message Error
Option D

Get-Azure WebSiteLog -Name contosoweb -Message Error
Correct Answer C
Description Explanation: Example This example starts log streaming and show error logs only. Windows PowerShell C:\PS>Get-AzureWebsiteLog -Tail -Message Error References:
Update Date and Time 2017-10-21 06:26:05


 

Question ID 13697

You are the server administrator for several on-premises systems.
You need to back up all the systems to the cloud by using Azure Backup.
In which order should you perform the actions? To answer, move all actions from the list of
actions to the answer area and arrange them in the correct order.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:28:30

Question ID 13698

Your company plans to migrate from On-Premises Exchange to Office 365.
The existing directory has numerous service accounts in your On-Premises Windows
Active Directory (AD), stored in separate AD Organizational Units (OU) for user accounts.
You need to prevent the service accounts in Windows AD from syncing with Azure AD.
What should you do?
Option A

Create an OU filter in the Azure AD Module for Windows PowerShell.
Option B

 Configure directory partitions in miisclient.exe.
Option C

Set Active Directory ACLs to deny the DirSync Windows AD service account MSOL_AD_SYNC access to the service account OUs.
Option D

Create an OU filter in the Azure Management Portal.
Option F

Answer : B

Explanation: One customer, who was looking for OU level filtering to import selected users from On- Premises active directory to Office365. Configure OU level filtering for Office365 directory synchronization.
Correct Answer B
Description 
Update Date and Time 2017-10-21 06:32:38

 

 

 

Question ID 13699

An organization has several web applications and uses Azure Active Directory (Azure AD).
You are developing a new web application that supports sign-on using the WS-Federation
to Azure AD.
You need to describe the authentication process flow to your team.
In which order are the actions performed? To answer, move all actions from the list of
actions to the answer area and arrange them in the correct order.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:35:25

Question ID 13700

Your company has two physical locations configured in a geo-clustered environment that
includes:
Your company has recently signed up for Azure.
You plan to leverage your current network environment to provide a backup solution for
your VMs.
You need to recommend a solution that ensures all VMs are redundant and deployable
between locations. You also want the solution to minimize downtime in the event of an
outage at either physical location.
Which solution should you recommend?
Option A

Configure a backup vault in Azure and use Data Protection Manager to back up The Windows Servers.
Option B

Use Data Protection Manager and back up the VMs in each location.
Option C

Use Azure site recovery in an on-premises to Azure protection configuration.
Option D

Use Azure site recovery in an on-premises to on-premises protection configuration.
Correct Answer D
Description Explanation: On-Premises to On-Premises (Hyper-V replication) * Cloud metadata is sent to Azure Site Recovery. Replicated data is stored in location specified on target Hyper-V server. * Azure account with Azure Site Recovery enabled. * Virtual machines replicate from source on-premises Hyper-V server to another. You can set up reverse replication to replicate back to the source location. * Requires source and target VMM servers with at least one cloud on each, or a single VMM server with two clouds. Clouds must contain at least one Hyper-V host server or cluster. References:
Update Date and Time 2017-10-21 06:36:20

Question ID 13701

You manage a cloud service named fabrikamReports that is deployed in an Azure data
center.
You deploy a virtual machine (VM) named fabrikamSQL into a virtual network named
fabrikamVNet.
FabrikamReports must communicate with fabrikamSQL.
You need to add fabrikam Reports to fabrikamVNet.
Which file should you modify?
Option A

the network configuration file for fabrikamVNet
Option B

the service definition file (.csdef) for fabrikamReports
Option C

the service definition file (.csdef) for fabrikamSQL
Option D

the service configuration file (.cscfg) for fabrikamReports
Option E

the service configuration file (.cscfg) fabrikamSQL
Correct Answer B
Description Explanation: Azure Service Definition Schema (.csdef File) The service definition file defines the service model for an application. The file contains the definitions for the roles that are available to a cloud service, specifies the service endpoints, and establishes configuration settings for the service. References:
Update Date and Time 2017-10-21 06:37:15

Question ID 13702

You have a virtual machine (VM) that runs in Azure. The VM is located in a geographically
distant location from you.
You experience performance issues when you connect to the VM.
You need to resolve the performance issue.
Which four actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:39:26

Question ID 13703

You deploy a web application to an Azure Cloud Service. The application uses a storage
account that contains a large number of storage objects.
You need to grant clients access to application data for a specified interval of time while
minimizing effort.
What should you create?
Option A

a stored access policy
Option B

a service shared access signature
Option C

 an account shared access signature
Option D

a network security group
Correct Answer C
Description Explanation: References: https://azure.microsoft.com/en-gb/documentation/articles/storage-dotnet-shared-access- signature-part-1/
Update Date and Time 2017-10-21 06:40:41

 

Question ID 13704

You administer a virtual machine (VM) that is deployed to Azure. The VM hosts a web
service that is used by several applications.
You need to ensure that the VM sends a notification in the event that the average response
time for the web service exceeds a pre-defined response time for an hour or more.
Which three steps should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:42:30

Question ID 13705

You manage an Azure Web Site named contososite.
You download the subscription publishing credentials named Contoso-
Enterprise.publishsettings.
You need to use Azure Power Shell to achieve the following:
Which commands should you use? To answer, drag the appropriate Azure PowerShell
command to the correct location in the solution. Each command may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view
content.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:44:23

Question ID 13706

You manage several Azure virtual machines (VMs). You create a custom image to be used
by employees on the development team.
You need to ensure that the custom image is available when you deploy new servers.
Which Azure Power Shell cmdlet should you use?
Option A

 Update-AzureVMImage
Option B

Add-AzureVhd
Option C

Add-AzureVMImage
Option D

Update-AzureDisk
Option E

 Add-AzureDataDisk
Correct Answer C
Description Explanation: The Add-AzureVMImage cmdlet adds an operating system image to the image repository. The image should be a generalized operating system image, using either Sysprep for Windows or, for Linux, using the appropriate tool for the distribution. Example This example adds an operating system image to the repository. Windows PowerShell C:\PS>Add-AzureVMImage -ImageName imageName -MediaLocation http://yourstorageaccount.blob.core.azure.com/container/sampleImage.vhd -Label References:
Update Date and Time 2017-10-21 06:45:52

Question ID 13707

You have an Azure Virtual Network named fabVNet with three subnets named Subnet-1,
Subnet-2 and Subnet-3. You have a virtual machine (VM) named fabVM running in the
fabProd service.
You need to modify fabVM to be deployed into Subnet-3. You want to achieve this goal by
using the least amount of time and while causing the least amount of disruption to the
existing deployment.
What should you do? To answer, drag the appropriate Power Shell cmdlet to the correct
location in the Power Shell command. Each cmdlet may be used once, more than once, or
not at all. You may need to drag the split bar between panes or scroll to view content.
Option A

Correct Answer A
Description 
Update Date and Time 2017-10-21 06:47:39

 

Question ID 13708

You have a solution deployed into a virtual network in Azure named fabVNet. The fabVNet
virtual network has three subnets named Apps, Web, and DB that are configured as shown
in the exhibit. (Click the Exhibits button.)

You want to deploy two new VMs to the DB subnet.
You need to modify the virtual network to expand the size of the DB subnet to allow more
IP addresses.
Which three steps should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
Option A

Correct Answer A

Description 
Update Date and Time 2017-10-21 06:51:45

 

Question ID 13709

You manage a cloud service that has a web application named WebRole1. WebRole1
writes error messages to the Windows Event Log.
Users report receiving an error page with the following message: "Event 26 has occurred.
Contact your system administrator."
You need to access the WebRole1 event log.
Which three actions should you perform? Each correct answer presents part of the
solution.
Option A

Enable verbose monitoring.
Option B

Update the WebRole1 web.config file.
Option C

Update the cloud service definition file and the service configuration file.
Option D

Run the Set-AzureVMDiagnosticsExtension PowerShell cmdlet.
Option E

Run the Enable-AzureWebsiteApplicationDiagnostic PowerShell cmdlet.
Option F

Create a storage account.
Correct Answer B,C,E
Description 
Update Date and Time 2017-10-21 06:52:42

 

Question ID 13710

You have an Azure subscription that has five virtual machines (VMs). You provision the
VMs in an availability set to support an existing web service.
You anticipate additional traffic. You identify the following additional requirements for the
VMs:
You need to scale the service.
What should you recommend?
Option A

 P10 Premium Storage. P20 Premium Storage
Option B

a Basic Tier VM
Option C

a Standard Tier VM
Correct Answer B

Description Explanation: References: https://azure.microsoft.com/en-gb/documentation/articles/storage-premium- storage/#premium-storage-scalability-and-performance-targets
Update Date and Time 2017-10-21 06:53:31

 

Question ID 13711

You have a virtual network and virtual machines that use the Resource Manager
deployment model.
You plan to create a Network Security Group (NSG). You must apply rules to both inbound
and outbound traffic.
You need to create the NSG.
In which order will the rules be applied to the virtual network? To answer, drag the
appropriate option to the correct location. Each option may be used once, more than once,
or not at all. You may need to drag the split bar between panes or scroll to view content.
Option A

Correct Answer A
Description
Update Date and Time 2017-10-21 07:00:02

 

Question ID 13712

You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single
subnet, which is used for testing a line of business (LOB) application. The application is
deployed to a VM named TestWebServiceVM.
You need to ensure that TestWebServiceVM always starts by using the same IP address.
You need to achieve this goal by using the least amount of administrative effort.
What are two possible ways to achieve the goal? Each correct answer presents a complete
solution.
Option A

Run the following Azure PowerShell cmdlet:Set-AzureStaticVNetIP
Option B

Use the Azure portal to configure TestWebServiceVM.
Option C

Run the following Azure PowerShell cmdlet:Get-AzureReservedIP
Option D

Use RDP to configure TestWebServiceVM.
Correct Answer A,B
Description Explanation: References: https://msdn.microsoft.com/en-us/library/azure/dn722490.aspx
Update Date and Time 2017-10-21 07:00:49

 

 

 

Question ID 13713

You have an Azure subscription that contains a backup vault named BV1. BV1 contains
five protected servers. Backups run daily. You need to modify the storage replication
settings for the backups.
What should you do first?
Option A

Create a new backup vault.
Option B

Run the Remove-OBPolicy cmdlet.. Configure the backup agent properties on all five servers.
Option C

Run the Remove-OBFileSpec cmdlet.
Correct Answer C
Description Explanation: References: https://azure.microsoft.com/en-gb/documentation/articles/backup-azure-backup-cloud-as- tape/
Update Date and Time 2017-10-21 07:03:36

 

Question ID 13714

You manage an Azure Web Site that is running in Shared mode.
You discover that the website is experiencing increased average response time during
periods of heavy user activity.
You need to update the website configuration to address the performance issues as they
occur.
What should you do?
Option A

Set the website to Standard mode and configure automatic scaling based on CPU utilization.
Option B

 Configure automatic seating during specific dates.
Option C

Modify the website instance size.
Option D

Configure automatic scaling based on memory utilization.
Option E

Set the website to Basic mode and configure automatic scaling based on CPU utilization.
Option F

Answer : A

Explanation: Scaling to Standard Plan Mode Selecting Standard expands the Capacity section to reveal the Instance Size and Instance Count options, which are also available in Basic mode. The Edit Scale Settings for Schedule and Scale by Metric options are available only in Standard mode.
Correct Answer A
Description
Update Date and Time 2017-10-21 07:05:19

 

Question ID 13715

You have an Azure subscription that contains two Azure SQL Database servers named
lpqd0zbr8y and bk0b8kf65. lpqd0zbr8y contains a database named Orders.
You need to implement active geo-replication for the Orders database.
Which command should you run? To answer, select the appropriate options in the answer
area.

 
Option A

Correct Answer A
Description
Update Date and Time 2017-10-21 07:07:40

 

Question ID 13716

You manage an Azure virtual network environment for a company that has an office in
Boston. The company plans to open a new office location in Paris.
You must replicate the Boston virtual network environment in Paris.
How should you complete the relevant Azure PowerShell commands? To answer, drag the
appropriate Azure PowerShell segment to the correct location. Each Azure PowerShell
segment may be used once, more than once, or not at all. You may need to drag the split
bar between panes or scroll to view content.
Option A

Correct Answer A

Description
Update Date and Time 2017-10-21 07:13:53

 

 

 

Question ID 13717

Your company plans to migrate from On-Premises Exchange to Exchange Online in Office
365.
You plan to integrate your existing Active Directory Domain Services (AD DS) infrastructure
with Azure AD.
You need to ensure that users can log in by using their existing AD DS accounts and
passwords. You need to achieve this goal by using minimal additional systems.
Which two actions should you perform? Each answer presents part of the solution.
Option A

Configure Password Sync.
Option B

Set up a DirSync Server.
Option C

Set up an Active Directory Federation Services Server.
Option D

Set up an Active Directory Federation Services Proxy Server.
Correct Answer B,C
Description
Update Date and Time 2017-10-21 07:15:24

 

Question ID 13718

You administer two virtual machines (VMs) that are deployed to a cloud service. The VMs
are part of a virtual network.
The cloud service monitor and virtual network configuration are configured as shown in the
exhibits. (Click the Exhibits button.)

You need to create an internal load balancer named fabLoadBalancer that has a static IP
address of 172.16.0.100.
Which value should you use in each parameter of the Power Shell command?
To answer, drag the appropriate value to the correct location in the Power Shell command.
Each value may be used once, more than once, or not at all. You may need to drag the
split bar between panes or scroll to view content.
Option A

Correct Answer A
Description
Update Date and Time 2017-10-21 07:21:24

 

 

 

 

Question ID 13719

You manage an application running on Azure Web Sites Standard tier. The application
uses a substantial amount of large image files and is used by people around the world.
Users from Europe report that the load time of the site is slow.
You need to implement a solution by using Azure services.
What should you do?
Option A

Configure Azure blob storage with a custom domain.
Option B

Configure Azure CDN to cache all responses from the application web endpoint.
Option C

Configure Azure Web Site auto-scaling to increase instances at high load.
Option D

 Configure Azure CDN to cache site images and content stored in Azure blob storage.
Correct Answer D
Description Explanation: Blobs that benefit the most from Azure CDN caching are those that are accessed frequently during their time-to-live (TTL) period. A blob stays in the cache for the TTL period and then is refreshed by the blob service after that time is elapsed. Then the process repeats. References:
Update Date and Time 2017-10-21 07:22:16

 

Question ID 13720

A company has an Azure subscription with four virtual machines (VM) that are provisioned
in an availability set. The VMs support an existing web service. The company expects
additional demand for the web service. You add 10 new VMs to the environment.
You need to configure the environment.
How many Update Domains (UDs) and Fault Domains (FDs) should you create?
Option A

2 UDs and 5 FDs
Option B

5 UDs and 2 FDs
Option C

14 UDs and 2 FDs
Option D

 14 UDs and 14 FDs
Correct Answer B
Description
Update Date and Time 2017-10-21 07:41:56

 

 

 

Question ID 13721

You have an Azure subscription.
You create an Azure Active Directory (Azure AD) tenant named Tenant1 that has a domain
name of tenant1.onmicrosoft.com. You need to add the contoso.com domain name to
Tenant1.
Which DNS record should you add to the contoso.com zone to be able to verify from Azure
whether you own the contoso.com domain?
Option A

standard alias (CNAME)
Option B

mail exchanger (MX)
Option C

host (AAAA)
Option D

signature (SIG)
Correct Answer A
Description
Update Date and Time 2017-10-21 07:42:33

 

Question ID 13722

You administer a solution deployed to a virtual machine (VM) in Azure. The VM hosts a
web service that is used by several applications. You are located in the US West region
and have a worldwide user base.
Developers in Asia report that they experience significant delays when they execute the
services.
You need to verify application performance from different locations.
Which type of monitoring should you configure?
Option A

Disk Read
Option B

Endpoint
Option C

Network Out
Option D

CPU
Option E

 Average Response Time
Correct Answer A
Description
Update Date and Time 2017-10-21 07:43:15

Question ID 13723

You administer a DirSync server configured with Azure Active Directory (Azure AD).
You need to provision a user in Azure AD without waiting for the default DirSync
synchronization interval.
What are two possible ways to achieve this goal? Each correct answer presents a
complete solution.
Option A

Restart the DirSync server.
Option B

Run the Start-OnlineCoexistenceSync PowerShell cmdlet.
Option C

Run the Enable-SyncShare PowerShell cmdlet.
Option D

Run the Azure AD Sync tool Configuration Wizard.
Option E

Replicate the Directory in Active Directory Sites and Services.
Correct Answer B,D
Description Explanation: If you dont want to wait for the recurring synchronizations that occur every three hours, you can force directory synchronization at any time. B: Force directory synchronization using Windows PowerShell You can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import- Module DirSync, and then press ENTER. Type Start-OnlineCoexistenceSync, and then press ENTER. D: Azure Active Directory Sync Services (AAD Sync) In September 2014 the Microsoft Azure AD Sync tool was released. This changed how manual sync requests are issued. To perform a manual update we now use the DirectorySyncClientCmd.exe tool. The Delta and Initial parameters are added to the command to specify the relevant task. This tool is located in: C:\Program Files\Microsoft Azure AD Sync\Bin You can use the directory synchronization Windows PowerShell cmdlet to force synchronization. The cmdlet is installed when you install the Directory Sync tool. On the computer that is running the Directory Sync tool, start PowerShell, type Import- Module DirSync, and then press ENTER. Type Start-OnlineCoexistenceSync, and then press ENTER.
Update Date and Time 2017-10-21 07:44:57

 

Question ID 13724

You manage an Azure Web Site named contosoweb.
Some users report that they receive the following error when they access contosoweb:
http Status 500.0 - Internal Server Error.
You need to view detailed diagnostic information in XML format.
Which option should you enable? To answer, select the appropriate option in the answer
area.
Option A

Correct Answer A
Description
Update Date and Time 2017-10-21 07:46:34

Question ID 13725

You create a virtual machine (VM) in Azure. The VM runs an important line of business
application.
Users report that the application is slow and unstable.
You need to enable diagnostics for the VM.
In which order should you perform the actions? To answer, move all actions from the list of
actions to the answer area and arrange them in the correct order.
Option A

Correct Answer A
Description
Update Date and Time 2017-10-21 07:48:23

 

Question ID 13726

You manage an application running on Azure web apps in a Standard tier. The application
uses a substantial amount of large image files from a storage account and is used by
people around the world.
Users from Europe report that the load time of the site is slow.
You need to implement a solution by using Azure services.
Which two actions will achieve the goal? Each correct answer presents a complete
solution.
Option A

 Configure Azure web app auto-scaling to increase instances at high load.
Option B

Configure Azure CDN to cache all responses from the application web endpoint.. Configure Azure CDN to cache site images and content stored in Azure blob storage.
Option C

Configure Azure blob storage with a custom domain.
Correct Answer B,C

Description
Update Date and Time 2017-10-21 07:48:58

 

 

 

 

Question ID 13727

You administer a cloud service.
You plan to host two web applications named contosoweb and contosowebsupport.
You need to ensure that you can host both applications and qualify for the Azure Service
Level Agreement. You want to achieve this goal while minimizing costs.
How should you host both applications?
Option A

 in different web roles with two instances in each web role
Option B

 in the same web role with two instances
Option C

 in different web roles with one instance in each web role
Option D

in the same web role with one instance
Correct Answer B
Description Explanation: A cloud service must have at least two instances of every role to qualify for the Azure Service Level Agreement, which guarantees external connectivity to your Internet-facing roles at least 99.95 percent of the time. References:
Update Date and Time 2017-10-21 07:49:45

 

Question ID 13728

A company is developing a new on-premises desktop application.
The app must be able to access Azure Active Directory (Azure AD) in addition to the on-
premises Active Directory. You need to configure the application.
Which two actions should you perform? Each correct answer presents part of the solution.
Option A

Install and run Azure AD Connect
Option B

Add an application manifest JSON file to the application and configure the oauth2Permissions section.
Option C

Update the application to be multi-tenant.
Option D

 Update the application to use OAuth 2.0 authentication.
Option E

In the Azure Management portal, register the application.
Correct Answer A,E
Description
Update Date and Time 2017-10-21 09:12:45

 

 

 

 

 

 

 

Question ID 13729

You publish a multi-tenant application named MyApp to Azure Active Directory (Azure AD).
You need to ensure that only directory administrators from the other organizations can
access MyApp's web API.
How should you configure MyApp's manifest JSON file? To answer, drag the appropriate
PowerShell command to the correct location in the application's manifest JSON file. Each
value may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.
Option A

Correct Answer A
Description
Update Date and Time 2017-10-21 09:15:59

 

Question ID 13730

You plan to deploy a cloud service named contosoapp. The service includes a web role
named contosowebrole. The web role has an endpoint named restrictedEndpoint.
You need to allow access to restricted Endpoint only from your office machine using the IP
address 145.34.67.82.
Which values should you use within the service configuration file? To answer, drag the
appropriate value to the correct location in the service configuration file. Each value may be
used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.
Option A

Correct Answer A
Description
Update Date and Time 2017-10-21 09:18:02

 

 

 

Question ID 13731

You are migrating a local virtual machine (VM) to an Azure VM. You upload the virtual hard
disk (VHD) file to Azure Blob storage as a Block Blob.
You need to change the Block blob to a page blob.
What should you do?
Option A

Delete the Block Blob and re-upload the VHD as a page blob.
Option B

Update the type of the blob programmatically by using the Azure Storage .NET SDK.
Option C

Update the metadata of the current blob and set the Blob-Type key to Page.
Option D

 Create a new empty page blob and use the Azure Blob Copy Power Shell cmdlet to copy the current data to the new blob.
Correct Answer A
Description Explanation: * To copy the data files to Windows Azure Storage by using one of the following methods: AzCopy Tool, Put Blob (REST API) and Put Page (REST API), or Windows Azure Storage Client Library for .NET or a third-party storage explorer tool. Important: When using this new enhancement, always make sure that you create a page blob not a block blob. * Azure has two main files storage format: Page blob : mainly used for vhds (CloudPageBlob) Block Blob : for other files (CloudBlockBlob) References:
Update Date and Time 2017-10-21 09:18:58

 

Question ID 13732

You manage a cloud service that utilizes data encryption.
You need to ensure that the certificate used to encrypt data can be accessed by the cloud
service application.
What should you do?
Option A

Upload the certificate referenced in the application package.
Option B

Deploy the certificate as part of the application package.
Option C

Upload the certificate’s public key referenced in the application package.
Option D

Use RDP to install the certificate.
Correct Answer A

Description
Update Date and Time 2017-10-21 09:19:37

 

 

 

 

 

Question ID 13733

Your company has a subscription to Azure.
You configure your contoso.com domain to use a private Certificate Authority. You deploy a
web site named MyApp by using the Shared (Preview) web hosting plan.
You need to ensure that clients are able to access the MyApp website by using https.
What should you do?
Option A

Back up the Site and import into a new website.
Option B

Use the internal Certificate Authority and ensure that clients download the certificate chain.
Option C

Add custom domain SSL support to your current web hosting plan.
Option D

Change the web hosting plan to Standard.
Correct Answer D
Description Explanation: Enabling HTTPS for a custom domain is only available for the Standard web hosting plan mode of Azure websites. References:
Update Date and Time 2017-10-21 09:21:05

 

Question ID 13734

You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web
application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user
information.
The application access key for TeamSite1 has been compromised.
You need to ensure that users can continue to use TeamSite1 and that the compromised
key does not allow access to the data in your Azure AD tenant.
Which two actions should you perform? Each correct answer presents part of the solution.
Option A

Remove the compromised key from the application definition for TeamSite1.
Option B

Delete the application definition for TeamSite1.
Option C

Generate a new application key for TeamSite1.
Option D

Generate a new application definition for TeamSite1.
Option E

Update the existing application key.
Correct Answer A,C

Description Explanation: One of the security aspects of Windows Azure storage is that all access is protected by access keys. It is possible to change the access keys (e.g. if the keys become compromised), and if changed, wed need to update the application to have the new key.
Update Date and Time 2017-10-21 09:27:58