70-535 | A Review Of Refined 70-535 exam question

Q3. DRAG DROPYou are the administrator for a company that has an Azure Premium Storage account.

You receive a .vhdx file from the development team. You plan to create one unique Azure virtual machine (VM) from the file. You plan to run the VM as a domain controller.

You need to upload the .vhdx file to Azure.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Q4. You are designing an Azure application that provides online backup storage for hundreds of media files. Each file is larger than 1GB.

The data storage solution has the following requirements:

* be capable of storing an average of 2 terabytes (TB) of data for each user

* support sharing of data between all Microsoft Azure instances

* provide random read/write access

You need to recommend a durable data storage solution. What should you recommend?

A. store data in a VHD file

B. Azure Page Blob

C. Azure Block Blob

D. local storage on the VM

Answer: B

Q5. You are designing a distributed application for Azure.

The application must securely integrate with on-premises servers.

You need to recommend a method of enabling Internet Protocol security (IPsec)-protected connections between on-premises servers and the distributed application.

What should you recommend?

A. Azure Access Control

B. Azure Content Delivery Network (CDN)

C. Azure Service Bus

D. Azure Site-to-Site VPN

Answer: D

Explanation:

IPsec can be used on Azure Site-to-Site VPN connections. Distributed applications can used the IPSec VPN connections to communicate.

References: https://msdn.microsoft.com/en-us/library/azure/dn133798.aspx

Q6. You are designing an Azure application that processes graphical image files. The graphical Images are processed in batches by remote applications that run on multiple servers.

You have the following requirements:

*The application must remain operational during batch-processing operations.

*Users must be able to roll back each image to a previous version.

You need to ensure that each remote application has exclusive access to an image while the application processes the image. Which type of storage should you use to store the images?

A. Table service

B. Queue service

C. Blob service

D. A single Azure VHD that is attached to the web role

Answer: C

Explanation:

* Blob Leases allow you to claim ownership to a Blob. Once you have the lease you can then update the Blob or delete the Blob without worrying about another process changing it underneath you. When a Blob is leased, other processes can still read it, but any attempt to update it will fail. You can update Blobs without taking a lease first, but you do run the chance of another process also attempting to modify it at the same time.

* You can opt to use either optimistic or pessimistic concurrency models to manage access to blobs and containers in the blob service.

References: http://justazure.com/azure-blob-storage-part-8-blob-leases/ http://www.azurefromthetrenches.com/?p=1371

Q7. You connect to an existing service over the network by using HTTP. The service listens on HTTP port 80. You plan to create a test environment for this existing service by using an Azure virtual machine (VM) that runs Windows Server.

The service must be accessible from the public Internet over HTTP port 8080. You need to configure the test environment. Which two actions should you take? Each correct answer presents part of the solution

A. Configure an endpoint to route traffic from port 8080 to port 80.

B. Configure an endpoint to route traffic from port 80 to port 8080.

C. Ensure that the public IP address is configured as a static IP address.

D. Configure the Windows Server firewall to allow incoming and outgoing traffic on port 8080.

E. Configure the Windows Server firewall to allow incoming and outgoing traffic on port 80.

Answer: A,E

Q8. You are designing a Windows Azure application that will store data in two SQL Azure databases. The application will insert data in both databases as part of a single logical operation.

You need to recommend an approach for maintaining data consistency across the databases. What should you recommend?

A. Execute database calls on parallel threads

B. Wrap the database calls in a single transaction scope.

C. Use Microsoft Distributed Transaction Coordinator (MSDTC).

D. Handle errors resulting from the database calls by using compensatory logic.

Answer: B

Explanation:

The TransactionScope class establishes an ambient transaction in .NET. (An u201cambient transactionu201d is one that lives in the current thread.) All connections opened within the TransactionScope participate in the transaction. If different databases participate, the transaction is automatically elevated to a distributed transaction. The outcome of the transaction is controlled by setting the scope to complete to indicate a commit.

Note: Elastic database transactions for SQL DB enable applications to make atomic changes to data stored in several different SQL Databases.

Elastic database transactions targets the following scenarios:

* Multi-database applications in Azure: With this scenario, data is vertically partitioned across several databases in SQL DB such that different kinds of data reside on different databases. Some operations require changes to data which is kept in two or more databases. The application uses elastic database transactions to coordinate the changes across databases and ensure atomicity.

Etc.

References: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-transactions-overview

Q9. You administer an Azure Storage account with a blob container. You enable Storage account logging for read, write and delete requests. You need to reduce the costs associated with storing the logs. What should you do?

A. Execute Delete Blob requests over https.

B. Create an export job for your container.

C. Set up a retention policy.

D. Execute Delete Blob requests over http.

Answer: C

Explanation:

There are two ways to delete Storage Analytics data: by manually making deletion requests or by setting a data retention policy. Manual requests to delete Storage Analytics data are billable, but delete requests resulting from a retention policy are not billable.

References: https://docs.microsoft.com/en-us/rest/api/storageservices/Setting-a-Storage-Analytics-Data-Retention-Policy?redirectedfrom=MSDN

Q10. Case Study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.

To start the case study

To display the first question on this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.

Background Overview

Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region.

Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.

Security

Currently, Woodgrove Banku2021s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.

Woodgrove Bank has several apps with regulates data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.

Apps

The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost is processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.

The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API

function to generate a monthly aggregate report from the database.

The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.

Business Requirements WGBLoanMaster app

The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.

WGBLeaseLeader app

The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal and click a button to generate the report.

WGBCreditCruncher app

The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.

Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.

Technical Requirements

WGBLoanMaster app

The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.

The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:

Allow messages to reside in the queue for up to a month. Be able to publish and consume batches of messages.

Allow full integration with the Windows Communication Foundation (WCF) communication stack.

Provide a role-based access model to the queues, including different permissions for senders and receivers.

You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.

WGBLeaseLeader app

The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.

The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:

Require server-side logs of all of the transactions run against your queues. Track progress of a message within the queue.

Process the messages within 7 days.

Provide a differing timeout value per message.

WGBCreditCruncher app

The app must:

Secure inbound and outbound traffic.

Analyze inbound network traffic for vulnerabilities.

Use an instance-level public IP and allow web traffic on port 443 only.

Upgrade the portal to a Single Page Application (SPA) that uses JavaScript, Azure Active Directory (Azure AD), and the OAuth 2.0 implicit authorization grant to secure the Web API back end.

Cache authentication and host the Web API back end using the Open Web Interface for

.NET (OWIN) middleware.

Immediately compress check images received from the mobile web app. Schedule processing of the batched credit transactions on a nightly basis.

Provide parallel processing and scalable computing resources to output financial risk models.

Use simultaneous computer nodes to enable high performance computing and updating of the financial risk models.

Key security area

You need to recommend a business continuity and disaster recovery solution for all of the existing line of business applications.

What are two ways to achieve the goal? Each correct answer presents a complete solution.

A. Create new virtual machines (VMs) in Azure and migrate the line of business applications to the VMs. Migrate any backend databases to SQL Database.

B. Migrate the virtual machines to the Hyper-V cluster and enable Hyper-V replica.

C. Configure ExpressRoute to enable migration to Azure.

D. Install the Azure Backup agent on the virtual machines.

Answer: A,B

Explanation:

References:

https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-hyper-v-site-to-azure

Q11. You need to assign permissions for tier four employees. Which role should you assign?

A. Security Manager

B. Website Contributor

C. Owner

D. Network Contributor

Answer: A

Q12. Your company network includes two branch offices. Users at the company access internal virtual machines (VMs). You want to ensure secure communications between the branch offices and the internal VMs and network.

You need to create a site-to-site VPN connection. What are two possible ways to achieve this goal? Each correct answer presents a complete solution

A. a private IPv4 IP address and a compatible VPN device

B. a private IPv4 IP address and a RRAS running on Windows Server 2012

C. a public-facing IPv4 IP address and a compatible VPN device

D. a public-facing IPv4 IP address and a RRAS running on Windows Server 2012

Answer: C,D

Explanation:

You must have an externally facing IPv4 IP address and a VPN device or RRAS to configure a site-to-site VPN connection.

References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq