70-534 | Realistic 70-534 Dumps Questions 2021

NEW QUESTION 1
DRAG DROP
You are the administrator for a company that has an Azure Premium Storage account.
You receive a .vhdx file from the development team. You plan to create one unique Azure virtual machine (VM) from the file. You plan to run the VM as a domain controller.
You need to upload the .vhdx file to Azure.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 2
DRAG DROP
You need to provide a data access solution for the NorthRide app.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: Box 1: Create a service namespace under Service Bus
Box 2: Obtain the default management credentials for the namespace. Box 3: Configure the application to use Service Bus Relay
Box 4: Configure Service Bus Queue
Note:
Box 1: Create a service namespace under Service Bus
To begin using Service Bus queues in Azure, you must first create a service namespace. A namespace provides a scoping container for addressing Service Bus resources within your application.
Box 2: Obtain the default management credentials for the namespace.
In order to perform management operations, such as creating a queue on the new namespace, you must obtain the management credentials for the namespace.
Box 3: Configure the application to use Service Bus Relay
When you create an application that uses Service Bus, you must add a reference to the Service Bus assembly and include the corresponding namespaces.
The Service Bus NuGet package is the easiest way to get the Service Bus API and to configure your application with all of the Service Bus dependencies.
After installing this package you are now ready to write code for Service Bus. Box 4: Configure Service Bus Queue
This would include:
* set up a Service Bus connection string
* create a queue
* provide code to send/receive messages from the queue
References: https://azure.microsoft.com/en-gb/documentation/articles/service-bus-dotnet-how-to-use-queues/

NEW QUESTION 3
You are designing an Azure Web App.
All users must authenticate by using Active Directory Domain Services (AD DS) credentials.
You need to recommend an approach to enable single sign-on to the application for domain-authenticated users.
Which two actions should you recommend? Each correct answer presents part of the solution.

• A. Use Forms authentication to generate claims.
• B. Use the SQL membership provider in the web application.
• C. Use Windows Identity Foundation in the web application.
• D. Use Active Directory Federation Services (AD FS) to generate claims.

Answer: CD

Explanation: References: https://msdn.microsoft.com/en-us/library/ee748475.aspx https://msdn.microsoft.com/en-us/library/azure/dn441213.aspx

NEW QUESTION 4
You need to configure the Northwind website.
Which two solutions should you use? Each correct answer presents part of the solution.

• A. Configure a hybrid connection to the database.
• B. Create Azure virtual machines that run Windows and Linux servers in Azure data centers.
• C. Use Azure Zone Redundant Storage to provide redundancy across Azure global data centers.
• D. Deploy the Northwind site to an Azure web app.
• E. Implement Azure ExpressRoute to increase the bandwidth for users of the Northwind public website.

Answer: AD

NEW QUESTION 5
You develop an ASP.NET Web API that is hosted as an Azure Web App. The API uses a WebJob to process information. The WebJob has a very long start up time.
You configure to WebJob to run continuously. You observe that the WebJob is not running and processing information as expected.
You need to ensure the WebJob runs continuously. What should you do?

• A. Enable the Always On configuration setting for the Web App.
• B. Update the API self-host by using the Open Web Interface for .NET (OWIN). Migrate the API to Azure Service Fabric.
• C. Schedule the WebJob by using the Azure Scheduler.
• D. Include a settings.job JSON file at the root of the WebJob zip file and include a valid CRON expression.

Answer: A

NEW QUESTION 6
DRAG DROP
Your company manages several Azure Web Sites that are running in an existing web- hosting plan named plan1. You need to move one of the websites, named contoso, to a new web-hosting plan named plan2. Which Azure PowerShell cmdlet should you use with each PowerShell command line? To answer, drag the appropriate Azure PowerShell cmdlet to the correct location in the PowerShell code. Each PowerShell cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 7
You administer an Azure Storage account named contoso storage. The account has queue containers with logging enabled. You need to view all log files generated during the month of July 2014. Which URL should you use to access the list?

• A. http://contosostorage.queue.core.windows.net/$logs?restype=container&comp=list&prefix=queue/2014/07
• B. http://contosostorage.queue.core.windows.net/$files?restype=container&comp=list&prefix=queue/2014/07
• C. http://contosostorage.blob.core.windows.net/$files?restype=container&comp=list&prefix=bl ob/2014/07
• D. http://contosostorage.blob.core.windows.net/$logs?restype=container&comp=list&prefix=bl ob/2014/07

Answer: D

Explanation: All logs are stored in block blobs, not queues, in a container named $logs, not $files, which is automatically created when Storage Analytics is enabled for a storage account. The
$logs container is located in the blob namespace of the storage account, for example: http://<accountname>.blob.core.windows.net/$logs.
References: https://docs.microsoft.com/en-us/rest/api/storageservices/About-Storage-Analytics-Logging?redirectedfrom=MSDN

NEW QUESTION 8
HOTSPOT
You have an on-premises Active Directory Domain Services domain. You are considering moving your infrastructure to Azure Active Directory.
You need to describe the features that each directory service provides.
For each feature, what should you implement? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are designing the deployment of resources in Azure. You plan to use templates to customize deployment options.
You need to ensure that Azure services are deployed and updated identically. Solution: You customize the parameters element of the template.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 10
DRAG DROP
You need to design the role-based access control strategy for the company. What should you do? To answer, drag the appropriate role to the correct user tier. Each role may be used one, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Azure platform roles include:
Azure also provides several resource-specific roles. Some common ones are: References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview

NEW QUESTION 11
You design an Azure web application. The web application is accessible by default as a standard cloudapp.net URL.
You need to recommend a DNS resource record type that will allow you to configure access to the web application by using a custom domain name.
Which DNS record type should you recommend?

• A. SRV
• B. MX
• C. CNAME
• D. A

Answer: C

Explanation: A CNAME record maps a specific domain, such as contoso.com or www.contoso.com, to a
canonical domain name. In this case, the canonical domain name is the
<myapp>.cloudapp.net domain name of your Azure hosted application. Once created, the CNAME creates an alias for the <myapp>.cloudapp.net. The CNAME entry will resolve to the IP address of your <myapp>.cloudapp.net service automatically, so if the IP address of the cloud service changes, you do not have to take any action.
Incorrect: Not D:
* Since an A record is mapped to a static IP address, it cannot automatically resolve changes to the IP address of your Cloud Service.
* An A record maps a domain, such as contoso.com or www.contoso.com, or a wildcard domain such as *.contoso.com, to an IP address. In the case of an Azure Cloud Service, the virtual IP of the service. So the main benefit of an A record over a CNAME record is that you can have one entry that uses a wildcard, such as *.contoso.com, which would handle requests for multiple sub-domains such as mail.contoso.com, login.contoso.com, or www.contso.com.

NEW QUESTION 12
HOTSPOT
You are developing an Azure cloud service for a company. The cloud service monitors a queue for incoming messages and then processes invoices based on the contents of these messages. Some messages are formed incorrectly and cause exceptions.
There is no time limit for how long the service takes to process an individual message. All messages must be processed at least once by using the ProcessMessage method. Messages must not be processed more than twice by using the ProcessMessage method.
Messages that fail normal processing must be processed by using the ProcessPoisonMessage method. You need to configure message processing. How should you complete the relevant code? To answer, select the appropriate option or options in the answer area.

Answer:

Explanation: Step 1:
Check if msg is null.
Step 2:
Messages must not be processed more than twice by using the ProcessMessage method.
Step 3:
Delete the message after successful processing.

NEW QUESTION 13
You are building an Azure Web App that uses Azure Active Directory B2C for identity. The app will use social providers such as Facebook, Microsoft Account, and LinkedIn. The Web App has a customized home page that is based on the user’s name. The Web App does not function if the user’s name cannot be retrieved.
You need to retrieve the user’s name and email address when they authenticate with one of the supported identity providers.
What should you do?

• A. Perform a Graph API query of the identity provider.
• B. Query the underlying Active Directory provided by Azure Active Directory.
• C. Retrieve the values from the Scope of the authentication request.
• D. Inspect the Claims in the authorization token.

Answer: D

NEW QUESTION 14
An application sends Azure push notifications to a client application that runs on Windows Phone, iOS, and Android devices. Users cannot use the application on some devices. The authentication mechanisms that the application uses are the source of the problem.
You need to monitor the number of notifications that failed because of authentication errors. Which three metrics should you monitor? Each correct answer presents part of the solution

• A. Microsoft Push Notification Service (MPNS) authentication errors
• B. External notification system errors
• C. Apple Push Notification Service (APNS) authentication errors
• D. Channel errors
• E. Windows Push Notification Services (WNS) authentication errors
• F. Google Cloud Messaging (GCM) authentication errors

Answer: ACF

Explanation: You must provision your app with one or more of the following services: Microsoft Push Notification Service (MPNS) for Windows Phone devices Apple Push Notification Service (APNS) for iPad and iPhone devices Google Cloud Messaging service (GCM) for Android devices
Windows Notification Service (WNS) for Windows devices
References: https://msdn.microsoft.com/en-us/magazine/dn879353.aspx

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are designing the deployment of resources in Azure. You plan to use templates to customize deployment options.
You need to ensure that Azure services are deployed and updated identically. Solution: You customize the $schema element of the template.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 16
A company has 10 on-premises SQL databases. The company plans to move the databases to SQL Server 2012 that runs in Azure Infrastructure-as-a-Service (IaaS). After migration, the databases will support a limited number of Azure websites in the same Azure Virtual Network.
You have the following requirements:
* You must restore copies of existing on-premises SQL databases to the SQL servers that run in Azure IaaS.
* You must be able to manage the SQL databases remotely.
* You must not open a direct connection from all of the machines on the on-premises network to Azure.
* Connections to the databases must originate from only five Windows computers.
You need to configure remote connectivity to the databases. Which technology solution should you implement?

• A. Azure Virtual Network site-to-site VPN
• B. Azure Virtual Network multi-point VPN
• C. Azure Virtual Network point-to-site VPN
• D. Azure ExpressRoute

Answer: C

Explanation: A point-to-site VPN would meet the requirements.
References: https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-point- to-site-create/

NEW QUESTION 17
You are designing a web app deployment in Azure.
You need to ensure that inbound requests to the web app are routed based on the endpoint that has the lowest latency.
What should you use?

• A. Azure health probes
• B. Azure Fabric Controller
• C. Azure Load Balancer
• D. Azure Traffic Manager

Answer: D

NEW QUESTION 18
HOTSPOT
You are reviewing an Azure Resource Manager (ARM) template that is used to deploy a Web App to multiple regions. The template contains the following JSON code:

How should you implement the deployment configuration? To answer, select the
appropriate option in the answer area.

Answer:

Explanation:

NEW QUESTION 19
You manage a cloud service on two instances. The service name is Service1 and the role name is ServiceRole1. Service1 has performance issues during heavy traffic periods.
You need to increase the existing deployment of Service1 to three instances. Which Power Shell cmdlet should you use?

• A. PS C:>Set-AzureService -ServiceName "Service1" -Label "ServiceRole1' -Description "Instance count=3"
• B. PS C:>Set-AzureRole -ServiceName "Service1" -Slot "Production" -RoleName "ServiceRole1" -Count 3
• C. PS C:>Add-AzureWebRole -Name 'ServiceRole1" -Instances 3
• D. PS C:> $instancecount = New-Object Hashtable$settings['INSTANCECOUNT=3] PS C:> Set-AzureWebsite -AppSettings $instancecount ServiceRole1

Answer: B

Explanation: The Set-AzureRole cmdlet sets the number of instances of a specified role to run in an
Azure deployment.
References: https://docs.microsoft.com/en-us/powershell/module/Azure/Set-AzureRole?view=azuresmps-4.0.0

NEW QUESTION 20
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region.
Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.
Woodgrove Bank has several apps with regulates data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost is processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.
The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements WGBLoanMaster app
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader app
The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements WGBLoanMaster app
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader app
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
WGBCreditCruncher app The app must:
Key security area

You need to run the script for a new release. Which technology should you use?

• A. Azure WebJob
• B. Azure App Service API App
• C. Azure Function
• D. Azure App Service Logic App

Answer: B