P.S. Verified 70-535 testing software are available on Google Drive, GET MORE: https://drive.google.com/open?id=1UuKlgij932q2nltL-0BGuqms3V1D5d2M
Q4. You need to ensure that authentication requirements are met. What should you do?
A. Enable multi-factor authentication.
B. Enable Azure AD Identity Protection.
C. Require users to authenticate by using Windows Hello for Business.
D. Require users to authenticate by using certificate-based authentication.
Answer: A
Explanation: https://docs.microsoft.com/en-us/azure/multi-factor-authentication/multi-factor-authentication
Q5. A company hosts a website and exposes web services on the company intranet. The intranet is secured by using a firewall. Company policies prohibit changes to firewall rules.
Devices outside the firewall must be able to access the web services. You need to recommend an approach to enable inbound communication. What should you recommend?
A. the Azure Access Control Service
B. Windows Azure Pack
C. the Azure WCF Relay
D. a web service in an Azure role that relays data to the internal web services
Answer: C
Explanation:
References:
https://docs.microsoft.com/en-us/azure/service-bus-relay/relay-what-is-it
Q6. DRAG DROPYou have a web application on Azure.
The web application does not employ Secure Sockets Layer (SSL).
You need to enable SSL for your production deployment web application on Azure. Which four actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
References: http://azure.microsoft.com/en-gb/documentation/articles/cloud-services-configure-ssl-certificate/
Q7. You need to configure the deployment of the storage analysis application. What should you do?
A. Create a new Mobile Service.
B. Configure the deployment from source control.
C. Add a new deployment slot.
D. Turn on continuous integration.
Answer: B
Explanation:
Scenario: Data analysis results:
The solution must provide a web service that allows applications to access the results of analysis.
Q8. You manage on-premises network and Azure virtual networks.
You need a secure private connection between the on-premises networks and the Azure virtual networks. The connection must offer a redundant pair of cross connections to provide high availability.
What should you recommend?
A. virtual network peering
B. Azure Load Balancer
C. VPN Gateway
D. ExpressRoute
Answer: B
Explanation:
References:
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
Q9. A company has custom ASP.net and Java applications that run on old versions of Windows and Linux. The company plans to place applications in containers.
You need to design a solution that includes networking, service discovery, and load balancing for the applications. The solution must support storage orchestration.
Solution: You create an Azure virtual network, a public IP address, and load balancer. Then add virtual machines (VMs) to the solution and deploy individual containers on them.
Does the solution meet the goal?
A. Yes
B. No
Answer: B
Q10. You are designing an Azure development environment. Team members learn Azure development techniques by training in the development environment.
The development environment must automatically scale and load balance additional virtual machine (VM) instances.
You need to recommend the most cost-effective compute-instance size that allows team
members to work with Azure in the development environment. What should you recommend?
A. Azure A1 standard VM Instance
B. Azure A2 basic VM Instance
C. Azure A3 basic VM Instance
D. Azure A9 standard VM Instance
Answer: A
Explanation:
Azure A1 standard VM Instance would be cheapest with 1 CPU core, 0.75 GB RAM, and 40 GB HD. It would be good enough for training purposes.
References: http://azure.microsoft.com/en-us/pricing/details/virtual-machines/
Q11. DRAG DROPYou need to provide a data access solution for the NorthRide app.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Box 1: Create a service namespace under Service Bus
Box 2: Obtain the default management credentials for the namespace. Box 3: Configure the application to use Service Bus Relay
Box 4: Configure Service Bus Queue
Note:
Box 1: Create a service namespace under Service Bus
To begin using Service Bus queues in Azure, you must first create a service namespace. A
namespace provides a scoping container for addressing Service Bus resources within your application.
Box 2: Obtain the default management credentials for the namespace.
In order to perform management operations, such as creating a queue on the new namespace, you must obtain the management credentials for the namespace.
Box 3: Configure the application to use Service Bus Relay
When you create an application that uses Service Bus, you must add a reference to the Service Bus assembly and include the corresponding namespaces.
The Service Bus NuGet package is the easiest way to get the Service Bus API and to configure your application with all of the Service Bus dependencies.
After installing this package you are now ready to write code for Service Bus.
Box 4: Configure Service Bus Queue This would include:
* set up a Service Bus connection string
* create a queue
* provide code to send/receive messages from the queue
References: https://azure.microsoft.com/en-gb/documentation/articles/service-bus-dotnet-how-to-use-queues/
Q12. A partner manages on-premises and Azure environments. The partner deploys an on- premises solution that needs to use Azure services. The partner deploys a virtual appliance.
All network traffic that is directed to a specific subnet must flow through the virtual appliance.
You need to recommend solutions to manage network traffic.
Which two options should you recommend? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Configure Azure Traffic Manager.
B. Configure a routing table with forced tunneling.
C. Implement an Azure virtual network.
D. Implement Azure ExpressRoute.
Answer: A,D
Explanation:
References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview https://docs.microsoft.com/en-us/azure/expressroute/expressroute-routing
Topic 2, Trey Research (NEW)
Background
You are an architect for Trey Research Inc., a software as a service (SaaS) company. The company is developing a new product named Tailspin for consumer and small business financial monitoring. The product will be offered as an API to banks and financial instructions. Banks and financial institutions will integrate Tailspin into their own online banking offerings.
All employees of Trey Research are members of an Active Directory Domain Services (AD DS) group named TREY.
Technical Requirement Architecture
All application and customer data will be stored in Azure SQL Database instances.
API calls that modify data will be implemented as queue messages in an Azure Storage Queue. Queue messages must expire after 90 minutes.
Security
The solution has the following security requirements:
u2711 Common security issues such as SQL injection and XSS must be prevented.
u2711 Database-related security issues must not result in customers' data being exposed.
u2711 Exposure of application source code and deployment artifacts must not result in customer data being exposed.
Every 90 days, all application code must undergo a security review to ensure that new or changed code does not introduce a security risk.
Remote code execution in the Web App must not result in the loss of security secrets.
Auditing, Monitoring, Alerting
The solution has the following requirements for auditing, monitoring, and alerting:
u2711 Changes to administrative group membership must be auditable.
u2711 Operations involving encryption keys must be auditable by users in the Azure Key Vault Auditors user role.
u2711 Resources must have monitoring and alerting configured in Azure Security Center.
Authorization, authentication
The solution has the following authentication and authorization requirements:
u2711 Azure Active Directory (Azure AD) must be used to authenticate users.
u2711 Compromised user accounts should be disabled as quickly as possible.
u2711 Only employees of Trey Research Inc. should be able to address automated security recommendations.
Service Level agreement
Failure of any one Azure region must not impact service availability. Customer data must not be lost once accepted by the application.
Performance, resource utilization
The solution must meet the following performance and resource usage requirements:
u2711 Azure costs must be minimized.
u2711 Application performance must remain level, regardless of the geographic location of users.
u2711 All application diagnostic and activity logs must be captured without loss.
u2711 Compute resources must be shared across all databases used by the solution.
Q13. You need to recommend a technology for processing customer pickup requests. Which technology should you recommend?
A. Notification hub
B. Queue messaging
C. Mobile Service with push notifications
D. Service Bus messaging
Answer: D
Explanation:
Service Bus queues are part of a broader Azure messaging infrastructure that supports queuing as well as publish/subscribe, Web service remoting, and integration patterns. Service Bus Queue support Push-style API (while Azure Queue messaging does not).
Incorrect:
Not A: Notification Hub is only used to push notification, not for processing requests. Not B As a solution architect/developer, you should consider using Azure Queues when:
* Your application must store over 80 GB of messages in a queue, where the messages have a lifetime shorter than 7 days.
* Your application wants to track progress for processing a message inside of the queue. This is useful if the worker processing a message crashes. A subsequent worker can then use that information to continue from where the prior worker left off.
You require server side logs of all of the transactions executed against your queues. Not C: To process the messages we do not need push notification.
P.S. Easily pass 70-535 Exam with Examcollectionplus Verified Dumps & pdf vce, Try Free: https://www.examcollectionplus.net/vce-70-535/ ( New Questions)