[2021-New] Microsoft 70-533 Dumps With Update Exam Questions (41-50)

70-533 Dumps

70-533 Exam Questions - Online Test

70-533 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. You manage a cloud service on two instances. The service name is Service1 and the role name is ServiceRole1.

Service1 has performance issues during heavy traffic periods.

You need to increase the existing deployment of Service1 to three instances.

Which Power Shell cmdlet should you use?

A. PS C:\>Set-AzureService -ServiceName "Service1” -Label "ServiceRole1' -Description "Instance count=3"

B. PS C:\>Set-AzureRole -ServiceName "Service1" -Slot "Production” -RoleName "ServiceRole1" -Count 3

C. PS C:\>Add-AzureWebRole -Name 'ServiceRole1" -Instances 3

D. PS C:\> $instancecount = New-Object Hashtable$settings['INSTANCECOUNT=3] PS C:\> Set-AzureWebsite -AppSettings $instancecount ServiceRole1

Answer: B

Explanation: The Set-AzureRole cmdlet sets the number of instances of a specified role to run in an Azure deployment

Example This command sets the "MyTestRole3" role running in production on the "MySvc1" service to three instances.

Windows PowerShell C:\PS>Set-AzureRole –ServiceName "MySvc1" –Slot "Production" –RoleName

"MyTestRole3" –Count 3 Reference: Set-AzureRole

Q2. You administer a Microsoft Azure SQL Database database in the US Central region named contosodb. Contosodb runs on a Standard tier within the SI performance level.

You have multiple business-critical applications that use contosodb.

You need to ensure that you can bring contosodb back online in the event of a natural disaster in the US Central region. You want to achieve this goal with the least amount of downtime.

Which two actions should you perform? Each correct answer presents part of the solution.

A. Upgrade to S2 performance level.

B. Use active geo-replication.

C. Use automated Export.

D. Upgrade to Premium tier.

E. Use point in time restore.

F. Downgrade to Basic tier.

Answer: B,D

Explanation: B: The Active Geo-Replication feature implements a mechanism to provide database redundancy within the same Microsoft Azure region or in different regions (geo-redundancy). One of the primary benefits of Active Geo-Replication is that it provides a database-level disaster recovery solution. Using Active Geo-Replication, you can configure a user database in the Premium service tier to replicate transactions to databases on different Microsoft Azure SQL Database servers within the same or different regions. Cross-region redundancy enables applications to recover from a permanent loss of a datacenter caused by natural disasters, catastrophic human errors, or malicious acts.

D: Active Geo-Replication is available for databases in the Premium service tier only.

Reference: Active Geo-Replication for Azure SQL Database

http://msdn.microsoft.com/en-us/library/azure/dn741339.aspx

Q3. You plan to use Password Sync on your DirSync Server with Azure Active Directory {Azure AD) on your company network. You configure the DirSync server and complete an initial synchronization of the users.

Several remote users are unable to log in to Office 365. You discover multiple event log entries for "Event ID 611 Password synchronization failed for domain."

You need to resolve the password synchronization issue.

Which two actions should you perform? Each correct answer presents part of the solution.

A. Restart Azure AD Sync Service.

B. Run the Set-FullPasswordSync Power Shell cmdlet.

C. Force a manual synchronization on the DirSync server.

D. Add the DirSync service account to the Schema Admins domain group.

Answer: A,B

Explanation: On the computer that has the Azure Active Directory Sync tool installed, follow these steps: . Perform.a full password sync for all users who are synced through directory synchronization. To do this, follow these steps: Set-FullPasswordSync . Restart the Forefront Identity Manager Synchronization Service. To do this, follow

these steps: Reference: User passwords don't sync if your organization is using Azure Active Directory synchronization

http://support2.microsoft.com/kb/2915221

Q4. Your company is launching a public website that allows users to stream videos.

You upload multiple video files to an Azure storage container.

You need to give anonymous users read access to all of the video files in the storage container.

What should you do?

A. Edit each blob's metadata and set the access policy to Public Blob.

B. Edit the container metadata and set the access policy to Public Container.

C. Move the files into a container sub-directory and set the directory access level to Public Blob.

D. Edit the container metadata and set the access policy to Public Blob.

Answer: C

Explanation:

By default, the container is private and can be accessed only by the account owner. To allow public read access to the blobs in the container, but not the container properties and metadata, use the "Public Blob" option. To allow full public read access for the container and blobs, use the "Public Container" option.

Q5. You administer an Azure Active Directory (Azure AD) tenant where Box is configured for: . Application Access . Password Single Sign-on An employee moves to an organizational unit that does not require access to Box through

the Access Panel.

You need to remove only Box from the list of applications only for this user.

What should you do?

A. Delete the user from the Azure AD tenant.

B. Delete the Box Application definition from the Azure AD tenant.

C. From the Management Portal, remove the user's assignment to the application.

D. Disable the user's account in Windows AD.

Answer: C

Explanation: Note: Use Azure AD to manage user access, provision user accounts, and enable single sign-on with Box. Requires an existing Box subscription.

Q6. You manage an application deployed to virtual machines (VMs) on an Azure virtual network

named corpVnet1.

You plan to hire several remote employees who will need access to the application on corpVnet1.

You need to ensure that new employees can access corpVnet1. You want to achieve this goal by using the most cost effective solution.

Which two actions should you perform? Each correct answer presents part of the solution.

A. Create a VPN subnet.

B. Enable point-to-point connectivity for corpVnet1.

C. Enable point-to-site connectivity for corpVnet1.

D. Create a gateway subnet.

E. Enable site-to-site connectivity for corpVnet1.

F. Convert corpVnet1 to a regional virtual network.

Answer: A,C

Explanation:

A point-to-site VPN also allows you to create a secure connection to your virtual network. In a point-to-site configuration, the connection is configured individually on each client computer that you want to connect to the virtual network. Point-to-site connections do not require a VPN device. They work by using a VPN client that you install on each client computer. The VPN is established by manually starting the connection from the on-premises client computer. You can also configure the VPN client to automatically restart.

Reference: About Secure Cross-Premises Connectivity

Q7. You develop a set of Power Shell scripts that will run when you deploy new virtual machines (VMs).

You need to ensure that the scripts are executed on new VMs. You want to achieve this goal by using the least amount of administrative effort.

What should you do?

A. Create a new GPO to execute the scripts as a logon script.

B. Create a SetupComplete.cmd batch file to call the scripts after the VM starts.

C. Create a new virtual hard disk (VHD) that contains the scripts.

D. Load the scripts to a common file share accessible by the VMs.

E. Set the VMs to execute a custom script extension.

Answer: E

Explanation: After you deploy a Virtual Machine you typically need to make some changes before it’s ready to use. This is something you can do manually or you could use Remote PowerShell to automate the configuration of your VM after deployment for example.

But now there’s a third alternative available allowing you customize your VM: the CustomScript extension.

This CustomScript extension is executed by the VM Agent and it’s very straightforward: you specify which files it needs to download from your storage account and which file it needs to execute. You can even specify arguments that need to be passed to the script. The only requirement is that you execute a .ps1 file.

Reference: Customizing your Microsoft Azure Virtual Machines with the new CustomScript extension

http://fabriccontroller.net/blog/posts/customizing-your-microsoft-azure-virtual-machines-with-the-new-customscript-extension/

Q8. Your company network includes two branch offices. Users at the company access internal virtual machines (VMs).

You want to ensure secure communications between the branch offices and the internal VMs and network.

You need to create a site-to-site VPN connection.

What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A. a private IPv4 IP address and a compatible VPN device

B. a private IPv4 IP address and a RRAS running on Windows Server 2012

C. a public-facing IPv4 IP address and a compatible VPN device

D. a public-facing IPv4 IP address and a RRAS running on Windows Server 2012

Answer: C,D

Explanation: C (not A): VPN Device IP Address.- This is public facing IPv4 address of your on-premises VPN device that you’ll use to connect to Azure. The VPN device cannot be located behind a NAT. D (Not B): At least one or preferably two publicly visible IP addresses: One of the IP addresses is used on the Windows Server 2012 machine that acts as the VPN device by using RRAS. The other optional IP address is to be used as the Default gateway for out-bound traffic from the on-premises network. If the second IP address is not available, it is possible to configure network address translation (NAT) on the RRAS machine itself, to be discussed in the following sections. It is important to note that the IP addresses must be public. They cannot be behind NAT and/or a firewall.

Reference: Configure a Site-to-Site VPN in the Management Portal

Site-to-Site VPN in Azure Virtual Network using Windows Server 2012 Routing and Remote Access Service (RRAS)

Q9. DRAG DROP

You plan to deploy a cloud service named contosoapp that has a web role named contosoweb and a worker role named contosoimagepurge.

You need to ensure the service meets the following requirements:

. Contosoweb can be accessed over the Internet by using http.

. Contosoimagepurge can only be accessed through tcp port 5001 from

contosoweb.

. Contosoimagepurge cannot be accessed directly over the Internet.

Which configuration should you use? To answer, drag the appropriate configuration setting to the correct location in the service configuration file. Each configuration setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Q10. You are the administrator for three Azure subscriptions named Dev, Test, and Prod.

Your Azure Power Shell profile is configured with the Dev subscription as the default.

You need to create a new virtual machine in the Test subscription by using the least

administrative effort.

Which Power Shell command should you use?

A. Option A

B. Option B

C. Option C

D. Option D

Answer: A

Explanation:

Example: Set the current subscription

This command makes "ContosoEngineering" the current subscription.

Windows PowerShell

C:\PS> Select-AzureSubscription -SubscriptionName ContosoEngineering -Current

Reference: Select-AzureSubscription

URL: http://msdn.microsoft.com/en-us/library/dn722499.aspx