70-535 | What Practical 70-535 braindumps Is?

Q1. You manage a virtual Windows Server 2012 web server that is hosted by an on-premises Windows Hyper-V server. You plan to use the virtual machine (VM) in Azure.

You need to migrate the VM to Azure Storage to add it to your repository. Which Azure Power Shell cmdlet should you use?

A. Import-AzureVM

B. New-AzureVM

C. Add-AzureDisk

D. Add-AzureWebRole

E. Add-AzureVhd

Answer: E

Explanation:

The Add-AzureVhd cmdlet uploads on premise Virtual hard disk (VHD) images to a blob storage account as fixed .vhd images.

References: https://docs.microsoft.com/en-us/powershell/module/Azure/Add-AzureVhd?view=azuresmps-4.0.0

Q2. You manage a hybrid environment for a company. The company plans to manage the environment by using Microsoft System Center 2012 R2.

You need to deploy the correct component to enable management across the environment. Which component should you deploy?

A. Windows Azure SQL Database Management Pack

B. System Center Management Pack for Windows Azure Pack

C. Cross Platform Audit Collection Services Management Pack

D. System Center Management Pack for Windows Server Cluster

Answer: B

Q3. You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet, which is used for testing a line of business (LOB) application.

The application is deployed to a VM named TestWebServiceVM. You need to ensure that TestWebServiceVM always starts by using the same IP address.

You need to achieve this goal by using the least amount of administrative effort. What should you do?

A. Use the Management Portal to configure TestWebServiceVM

B. Use RDP to configure TestWebServiceVM.

C. Run the Set-AzureStaticVNetIP PowerShell cmdlet.

D. Run the Get-AzureReservedIP PowerShell cmdlet.

Answer: C

Explanation:

The Set-AzureStaticVNetIP cmdlet sets the static virtual network (VNet) IP address information for a virtual machine object.

References: https://docs.microsoft.com/en-us/powershell/module/azure/set-azurestaticvnetip?view=azuresmps-4.0.0

Q4. Your company network has two physical locations configured in a geo-clustered environment.

You create a Blob storage account in Azure that contains all the data associated with your company.

You need to ensure that the data remains available in the event of a site outage. Which storage option should you enable?

A. Locally redundant storage

B. Geo-redundant storage

C. Zone-redundant storage

D. Read-only geo-redundant storage

Answer: D

Explanation:

Read-access geo-redundant storage (RA-GRS) maximizes availability for your storage account, by providing read-only access to the data in the secondary location, in addition to the replication across two regions provided by GRS.

When you enable read-only access to your data in the secondary region, your data is available on a secondary endpoint, in addition to the primary endpoint for your storage account.

References: https://docs.microsoft.com/en-us/azure/storage/storage-redundancy

Q5. You administer an Azure Storage account named contoso storage. The account has queue containers with logging enabled. You need to view all log files generated during the month of July 2014. Which URL should you use to access the list?

A. http://contosostorage.queue.core.windows.net/$logs?restype=container&comp=list&prefix= queue/2014/07

B. http://contosostorage.queue.core.windows.net/$files?restype=container&comp=list&prefix= queue/2014/07

C. http://contosostorage.blob.core.windows.net/$files?restype=container&comp=list&prefix=bl ob/2014/07

D. http://contosostorage.blob.core.windows.net/$logs?restype=container&comp=list&prefix=bl ob/2014/07

Answer: D

Explanation:

All logs are stored in block blobs, not queues, in a container named $logs, not $files, which is automatically created when Storage Analytics is enabled for a storage account. The

$logs container is located in the blob namespace of the storage account, for example: http://<accountname>.blob.core.windows.net/$logs.

References: https://docs.microsoft.com/en-us/rest/api/storageservices/About-Storage- Analytics-Logging?redirectedfrom=MSDN

Q6. You are designing a plan to deploy a new application to Azure. The solution must provide a single sign-on experience for users.

You need to recommend an authentication type. Which authentication type should you recommend?

A. SAML credential tokens

B. Azure managed access keys

C. Windows Authentication

D. MS-CHAP

Answer: A

Explanation:

A Microsoft cloud service administrator who wants to provide their Azure Active Directory (AD) users with sign-on validation can use a SAML 2.0 compliant SP-Lite profile based Identity Provider as their preferred Security Token Service (STS) / identity provider. This is useful where the solution implementer already has a user directory and password store on- premises that can be accessed using SAML 2.0. This existing user directory can be used for sign-on to Office 365 and other Azure AD-secured resources.

References: https://msdn.microsoft.com/en- us/library/azure/dn641269.aspx?f=255&MSPPError=-2147217396

Q7. You need to ensure that users do not need to re-enter their passwords after they authenticate to cloud applications for the first time.

What should you do?

A. Enable Microsoft Account authentication.

B. Set up a virtual private network (VPN) connection between the VanArsdel premises and the Azure datacenter. Set up a Windows Active Directory domain controller in Azure VM. Implement Integrated Windows authentication.

C. Deploy ExpressRoute.

D. Configure Azure Active Directory Sync to use single sign-on (SSO).

Answer: D

Explanation:

Single sign-on (SSO) is a property of access control of multiple related, but independent software systems. With this property a user logs in once and gains access to all systems without being prompted to log in again at each of them.

References: http://en.wikipedia.org/wiki/Single_sign-on

Q8. You are developing a web application that connects to an existing virtual network. The web application needs to access a database that runs on a virtual machine.

In the Azure portal, you use the virtual network integration user interface to select from a list of virtual networks. The virtual network that the web application needs to connect to is not selectable.

You need to update the existing virtual network so you can connect to it. What should you do?

A. Enable ExpressRoute.

B. Enable site-to-site VPN.

C. Enable point-to-site VPN with a dynamic routing gateway.

D. Enable point-to-site VPN with a static routing gateway.

Answer: B

Q9. You administer a DirSync server configured with Azure Active Directory (Azure AD). You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval.

What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

A. Restart the DirSync server

B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet.

C. Run the Enable-SyncShare PowerShell cmdlet.

D. Run the Azure AD Sync tool Configuration Wizard.

E. Replicate the Directory in Active Directory Sites and Services.

Answer: B,D

Explanation:

References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active- directory-aadconnect

Q10. Your network environment includes remote employees. You need to create a secure connection for the remote employees who require access to your Azure virtual network. What should you do?

A. Deploy Windows Server 2012 RRAS

B. Configure a point-to-site VPN

C. Configure an ExpressRoute

D. Configure a site-to-site VPN

Answer: B

Explanation:

Virtual Network is a service that allows you to create a private, isolated network in Windows Azure and treat it as an extension of your datacenter. You can assign private IP addresses to virtual machines inside a virtual network, specify DNS, and connect it to your on- premises infrastructure using a Cisco or Juniper hardware VPN device in a u2021site-to-siteu2021 manner.

References: https://azure.microsoft.com/en-us/blog/virtual-network-adds-new-capabilities-for-cross-premises-connectivity/