Microsoft Implementing Microsoft Azure Infrastructure Solutions - 70-533 Exam Practice Test
A company has an Azure subscription and plans to deploy virtual machines (VMS) The company needs to use an Azure Active Directory Domain Services (Azure AD DS) domain with the VMS.
You need to ensure that you can join the VMS to the Azure AD DS domain.
Solution: Enable Azure AD AS for the existing directory.
Does the solution meet the goal?
You need to ensure that you can join the VMS to the Azure AD DS domain.
Solution: Enable Azure AD AS for the existing directory.
Does the solution meet the goal?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
HOTSPOT
You manage an Azure Web Site named contosoweb.
Some users report that they receive the following error when they access contosoweb:
"http Status 500.0 - Internal Server Error."
You need to view detailed diagnostic information in XML format.
Which option should you enable? To answer, select the appropriate option in the answer area.
You manage an Azure Web Site named contosoweb.
Some users report that they receive the following error when they access contosoweb:
"http Status 500.0 - Internal Server Error."
You need to view detailed diagnostic information in XML format.
Which option should you enable? To answer, select the appropriate option in the answer area.
Correct Answer:
Explanation
Explanation
Failed Request Tracing is the only option that produces its output in XML files as specified in the question.
You plan to use Azure Resource Manager (ARM) templates to deploy resources.
You need to create a policy that permits deployments only for compute and storage resources.
Develop the solution by selecting and ordering the required code segments. You may not need all of the code segments.
You need to create a policy that permits deployments only for compute and storage resources.
Develop the solution by selecting and ordering the required code segments. You may not need all of the code segments.
Correct Answer:
Explanation
A company uses Azure AD Connect to synchronize on-premises and Azure identities.
The company uses Active Directory Federation Services for external users.
You need to ensure that Azure Connect Health can analyze all AD FS audit logs
The company uses Active Directory Federation Services for external users.
You need to ensure that Azure Connect Health can analyze all AD FS audit logs
Correct Answer: B,D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
You administer an Azure Active Directory (Azure AD) tenant.
You add a custom application to the tenant.
The application must be able to:
* Read data from the tenant directly.
* Write data to the tenant on behalf of a user.
In the table below, identify the permission that must be granted to the application. Make only one selection in each column.
You add a custom application to the tenant.
The application must be able to:
* Read data from the tenant directly.
* Write data to the tenant on behalf of a user.
In the table below, identify the permission that must be granted to the application. Make only one selection in each column.
Correct Answer:
Explanation
You can select from two types of permissions in the drop-down menus next to the desired Web API:
* Application Permissions: Your client application needs to access the Web API directly as itself (no user context). This type of permission requires administrator consent and is also not available for Native client applications.
* Delegated Permissions: Your client application needs to access the Web API as the signed-in user, but with access limited by the selected permission. This type of permission can be granted by a user unless the permission is configured as requiring administrator consent.
References:
https://azure.microsoft.com/en-us/documentation/articles/active-directory-integrating-applications/
HOTSPOT
You have an Azure subscription that contains two Azure SQL Database servers named lpqd0zbr8y and bk0b8kf65. lpqd0zbr8y contains a database named Orders.
You need to implement active geo-replication for the Orders database.
Which command should you run? To answer, select the appropriate options in the answer area.
You have an Azure subscription that contains two Azure SQL Database servers named lpqd0zbr8y and bk0b8kf65. lpqd0zbr8y contains a database named Orders.
You need to implement active geo-replication for the Orders database.
Which command should you run? To answer, select the appropriate options in the answer area.
Correct Answer:
Explanation
References:
https://msdn.microsoft.com/en-us/library/dn720220.aspx
DRAG DROP
You plan to deploy a cloud service named contosoapp. The service includes a web role named contosowebrole. The web role has an endpoint named restrictedEndpoint.
You need to allow access to restricted Endpoint only from your office machine using the IP address
145.34.67.82.
Which values should you use within the service configuration file? To answer, drag the appropriate value to the correct location in the service configuration file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
You plan to deploy a cloud service named contosoapp. The service includes a web role named contosowebrole. The web role has an endpoint named restrictedEndpoint.
You need to allow access to restricted Endpoint only from your office machine using the IP address
145.34.67.82.
Which values should you use within the service configuration file? To answer, drag the appropriate value to the correct location in the service configuration file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Explanation
* Rule with lower order are applied first.
* We can selectively permit or deny network traffic (in the management portal or from PowerShell) for a virtual machine input endpoint by creating rules that specify "permit" or "deny". By default, when an endpoint is created, all traffic is permitted to the endpoint. So for that reason, it's important to understand how to create permit/deny rules and place them in the proper order of precedence to gain granular control over the network traffic that you choose to allow to reach the virtual machine endpoint. Note that at the instant you add one or more "permit" ranges, you are denying all other ranges by default. Moving forward from the first permit range, only packets from the permitted IP range will be able to communicate with the virtual machine endpoint.
You deploy an Azure Web App named ContosoApp. ContosoApp runs on five instances.
You need to run an application named App1.exe automatically as a background process for ContosoApp. The solution must ensure that App1.exe runs in one instance only.
How should you deploy App1.exe?
You need to run an application named App1.exe automatically as a background process for ContosoApp. The solution must ensure that App1.exe runs in one instance only.
How should you deploy App1.exe?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).