70-534 | Refined 70-534 Study Guides 2021

NEW QUESTION 1
Your company plans to migrate from On-Premises Exchange to Exchange Online in Office 365.
You plan to integrate your existing Active Directory Domain Services (AD DS) infrastructure
with Azure AD.
You need to ensure that users can log in by using their existing AD DS accounts and passwords. You need to achieve this goal by using minimal additional systems.
Which two actions should you perform? Each answer presents part of the solution.

• A. Configure Password Sync.
• B. Set up a DirSync Server
• C. Set up an Active Directory Federation Services Server
• D. Set up an Active Directory Federation Services Proxy Server

Answer: AB

Explanation: Azure AD supports the following four directory integration scenarios:
* DirSync with Password Sync – Used when you want to enable your users to sign in to Azure AD and other services using the same user name and password as they use to log onto your corporate network and resources. Password sync is a feature of the Directory Sync tool.
Etc.
References: https://msdn.microsoft.com/en-us/library/azure/jj573653.aspx

NEW QUESTION 2
DRAG DROP
You need to deploy the virtual machines to Azure.
Which four Azure PowerShell scripts should you run in sequence? To answer, move the appropriate scripts from the list of scripts to the answer area and arrange them in the correct order.

Answer:

Explanation: Note:
* In order to upload a VHD file to Azure, we need: References:

NEW QUESTION 3
You are designing an Azure Web App that will use one worker role. The Web App does not use SQL Database.
You have the following requirements:
*Maximize throughput and system resource availability
*Minimize downtime during scaling
You need to recommend an approach for scaling the application.
Which approach should you recommend?

• A. Increase the role instance size.
• B. Set up horizontal partitioning.
• C. Increase the number of role instances.
• D. Set up vertical partitioning.

Answer: C

Explanation: On the Scale page of the Azure Management Portal, you can manually scale your application or you can set parameters to automatically scale it. You can scale applications that are running Web Roles, Worker Roles, or Virtual Machines. To scale an application that is running instances of Web Roles or Worker Roles, you add or remove role instances to accommodate the work load.
References: http://azure.microsoft.com/en-gb/documentation/articles/cloud-services-how- to-scale/

NEW QUESTION 4
HOTSPOT
You have an on-premises data center and an Azure subscription. The Azure subscription has services that are hosted in the East US region. You have servers that run Windows Server 2012 R2. The servers are located on-premises and in both Azure regions. You plan to deploy Microsoft System Center 2012 R2 Data Protection Manager (DPM) to protect all of the servers. The DPM deployment has the following requirements:
* Centralize the management of all backups
* Minimize the costs associated with bandwidth usage
* Protect Microsoft SharePoint and Microsoft SQL Server workloads for up to nine years
You need to recommend which components must be configured to support the planned deployment. What should you include in the recommendation? To answer, select the appropriate options in the answer area.

Answer:

Explanation:
Number of DMP servers: 1
Centralize the management of all backups. Number of Azure backup vaults: 2
References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-dpm- introduction

NEW QUESTION 5
DRAG DROP
You create a web application. You publish the source code of the web application to a GitHub repository by using Microsoft Visual Studio. You create a website by using the Azure management portal. You must continuously deploy the web application from the GitHub repository website to the Azure website. You need to deploy the source code of the web application. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 6
DRAG DROP
Your development team has created a new solution that is deployed in a virtual network named fabDevVNet. Your testing team wants to begin testing the solution in a second Azure subscription.
You need to create a virtual network named fabTestVNet that is identical to fabDevVNet. You want to achieve this goal by using the least amount of administrative effort.
Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: Step 1: In the development subscription, export the network configuration First export network configuration from the development subscription.
Step 2:
Rename the configuration file.
Step 3:
Import the network configuration.

NEW QUESTION 7
DRAG DROP
You have a solution deployed into a virtual network in Azure named fabVNet. The fabVNet virtual network has three subnets named Apps, Web, and DB that are configured as shown in the exhibit. (Click the Exhibits button.)


You want to deploy two new VMs to the DB subnet. You need to modify the virtual network to expand the size of the DB subnet to allow more IP addresses.
Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq

NEW QUESTION 8
HOTSPOT
You plan to deploy four Infrastructure as a Service (IaaS) virtual machines in Azure. All IaaS virtual machines will reside on the same IP subnet.
You need to design an Azure virtual network that can accommodate the deployment. The design must meet the following requirements:
* Minimize the size of the IP subnet.
* Provide the ability to restrict both internal and Internet traffic.
* Ensure that the IP addresses of the virtual machines remain the same.
What should you include in the design? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Not /29.
/29 would normally provide up to 8 IP addresses which should be enough for four VMs. However, Azure reserves five IP addresses so for four VMs, you need a subnet with at least 9 IP addresses.

NEW QUESTION 9
You are designing an Azure application that provides online backup storage for hundreds of media files. Each file is larger than 1GB.
The data storage solution has the following requirements:
* be capable of storing an average of 2 terabytes (TB) of data for each user
* support sharing of data between all Microsoft Azure instances
* provide random read/write access
You need to recommend a durable data storage solution. What should you recommend?

• A. store data in a VHD file
• B. Azure Page Blob
• C. Azure Block Blob
• D. local storage on the VM

Answer: B

NEW QUESTION 10
You are evaluating an Azure application. The application includes the following elements:
*A web role that provides the ASP.NET user interface and business logic
*A single SQL database that contains all application data
Each webpage must receive data from the business logic layer before returning results to the client. Traffic has increased significantly. The business logic is causing high CPU usage.
You need to recommend an approach for scaling the application.
What should you recommend?

• A. Store the business logic results in Azure Table storage.
• B. Vertically partition the SQL database.
• C. Move the business logic to a worker role.
• D. Store the business logic results in Azure local storage.

Answer: C

Explanation: For Cloud Services in Azure applications need both web and worker roles to scale well.
References: https://msdn.microsoft.com/en-us/library/azure/dn574746.aspx

NEW QUESTION 11
You need to implement the loan aggregation process for the WGBLoanMaster app.
Which technology should you use?

• A. Azure virtual machine
• B. Azure Cloud Service worker role
• C. Azure Batch
• D. Azure WebJob

Answer: C

NEW QUESTION 12
DRAG DROP
You administer two virtual machines (VMs) that are deployed to a cloud service. The VMs are part of a virtual network. The cloud service monitor and virtual network configuration are configured as shown in the exhibits. (Click the Exhibits button.)


You need to create an internal load balancer named fabLoadBalancer that has a static IP address of 172.16.0.100. Which value should you use in each parameter of the Power Shell command? To answer, drag the appropriate value to the correct location in the Power Shell command. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: References: https://docs.microsoft.com/en-us/powershell/module/Azure/Add-AzureInternalLoadBalancer?view=azuresmps-4.0.0

NEW QUESTION 13
DRAG DROP
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the
left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region.
Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.
Woodgrove Bank has several apps with regulates data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost is processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.
The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements WGBLoanMaster app
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader app
The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements WGBLoanMaster app
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader app
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
WGBCreditCruncher app The app must:
Key security area

You are evaluating the architecture for the WGBCreditCruncher app.
You need to implement an Azure service to process each portion of the app data.
For each type of app data, what should you implement? To answer, drag the appropriate Azure services to the correct app data types. Each Azure service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 14
You are designing a plan to migrate an existing application to Windows Azure. The application currently resides on a server that has 20 GB of hard disk space.
You need to recommend the smallest compute instance size that provides local storage equivalent to that of the existing server. Which size should you recommend?

• A. ExtraSmall
• B. ExtraLarge
• C. Small
• D. Large

Answer: A

Explanation: ExtraSmall provides the required 20 GB of hard disk space.
References: https://docs.microsoft.com/en-us/azure/cloud-services/cloud-services-sizes- specs

NEW QUESTION 15
You have an Azure subscription named Subscription1. You create several Azure VMs in Subscription1. All of the VMs belong to the same virtual network.
You have an on-premises Hyper-V server named Server1. Server1 hosts a virtual machine named VM1. You plan to replicate VM1 to Azure.
You need to create additional objects in Subscription1 to support the planned deployment. Which three objects should you create? Each correct answer presents part of the solution.

• A. An Azure Site Recovery vault
• B. An endpoint
• C. A protection group
• D. A Hyper-V site
• E. A storage account
• F. A Traffic Manager

Answer: ADE

Explanation: You need to set up a Recovery Services vault to orchestrate and manage replication. Make sure Hyper-V hosts are prepared for Site Recovery deployment.
You need a Microsoft Azure account, Azure networks, and storage accounts.
References: https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-site-walkthrough- overview

NEW QUESTION 16
DRAG DROP
You need to recommend data storage mechanisms for the solution.
What should you recommend? To answer, drag the appropriate data storage mechanism to the correct information type. Each data storage mechanism may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: * Use Table storage for Contractor information
* Use Blob for Project Images
* Scenario: VanArsdel needs a solution to reduce the number of operations on the contractor information table. Currently, data transfer rates are excessive, and queue length for read/write operations affects performance.
/ A mobile service that is used to access contractor information must have automatically scalable, structured storage
/ Images must be stored in an automatically scalable, unstructured form.
Note: Blob is an acronym for Binary Large object. Basically Blob is a sequence of bytes – just what an application needs. Blob can hold audio, video, email messages, archived files, zip files or a word processing document in a very general way.
References: http://www.thewindowsclub.com/understanding-blobqueuetable-storage- windows-azure

NEW QUESTION 17
You administer a cloud service. You plan to host two web applications named contosoweb and contosowebsupport. You need to ensure that you can host both applications and qualify for the Azure Service Level Agreement.
You want to achieve this goal while minimizing costs. How should you host both applications?

• A. in different web roles with two instances in each web role
• B. in the same web role with two instances
• C. in different web roles with one instance in each web role
• D. in the same web role with one instance

Answer: B

Explanation: For Cloud Services, we guarantee that when you deploy two or more role instances in different fault and upgrade domains, your Internet facing roles will have external connectivity at least 99.95% of the time.
References: https://azure.microsoft.com/en-us/support/legal/sla/cloud-services/v1_0/

NEW QUESTION 18
You are planning an upgrade strategy for an existing Azure application. Multiple instances
of the application run in Azure. The management team is concerned about application downtime, due to a business service level agreement (SLA).
You are evaluating which change in your environment will require downtime. You need to identify the changes to the environment that will force downtime. Which change always requires downtime?

• A. Adding an HTTPS endpoint to a web role
• B. Upgrading the hosted service by deploying a new package
• C. Changing the value of a configuration setting
• D. Changing the virtual machine size

Answer: A

Explanation: If you change the number of endpoints for your service, for example by adding a HTTPS endpoint for your existing Web Role, it will require downtime.
References: http://blog.toddysm.com/2010/06/re-deploying-your-windows-azure-service-without-incurring-downtime.html

NEW QUESTION 19
You have several virtual machines (VMs) that run in Azure. You also have a single System Center 2012 R2 Configuration Manager (SCCM) primary site on-premises.
You have the following requirements:
* All VMs must run on the same virtual network.
* Network traffic must be minimized between the on-premises datacenter and Azure.
* The solution minimize complexity.
You need to use SCCM to collect inventory and deploy software to Azure VMs. What should you do first?

• A. Configure client push for the Azure virtual network.
• B. Enable and configure Operations Insights in Azure.
• C. Install a cloud distribution point on an Azure VM.
• D. Install a secondary site underneath the primary site onto an Azure VM.

Answer: C

Explanation: Cloud-based distribution Point, a Configuration Manager Site System Role in the Cloud Much of the Configuration Manager topology is made up of distribution points, they are very
helpful in many situations where bandwidth and geographical separation are the facts of life, but also hard to manage if you have hundreds or even thousands of them.
This feature started with the vision that it makes perfect sense to have big distribution points in the Windows Azure cloud where one should not worry about things like (but not limited to) size, performance, reliability, security, access from all around the world, hardware/software update issues etc.
Note: Content management in System Center 2012 Configuration Manager provides the tools for you to manage content files for applications, packages, software updates, and operating system deployment. Configuration Manager uses distribution points to store files that are required for software to run on client computers. These distribution points function as distribution centers for the content files and let users download and run the software. Clients must have access to at least one distribution point from which they can download the files.
References: http://blogs.technet.com/b/configmgrteam/archive/2013/01/31/new-distribution-points-in-configuration-manager-sp1.aspx

NEW QUESTION 20
You need to ensure that users do not need to re-enter their passwords after they authenticate to cloud applications for the first time.
What should you do?

• A. Enable Microsoft Account authentication.
• B. Set up a virtual private network (VPN) connection between the VanArsdel premises and the Azure datacente
• C. Set up a Windows Active Directory domain controller in Azure V
• D. Implement Integrated Windows authentication.
• E. Deploy ExpressRoute.
• F. Configure Azure Active Directory Sync to use single sign-on (SSO).

Answer: D

Explanation: Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.
References: http://en.wikipedia.org/wiki/Single_sign-on