This page was exported from Braindump2go Exam Dumps Free Download [ https://www.pass4surevce.com ] Export date:Thu Mar 28 16:26:25 2024 / +0000 GMT ___________________________________________________ Title: Free Braindump2go Microsoft 70-533 VCE Exam Questions and Answers Download (1-10) --------------------------------------------------- Braindump2go New Published Microsoft 70-533 Dumps PDF Contanins the latest questions from Microsoft Exam Center! 100% Certification got guaranteed! Vendor: MicrosoftExam Code: 70-533Exam Name: Implementing Microsoft Azure Infrastructure SolutionsKeywords: 70-533 Exam Dumps,70-533 Practice Tests,70-533 Practice Exams,70-533 Exam Questions,70-533 PDF,70-533 VCE Free,70-533 Book,70-533 E-Book,70-533 Study Guide,70-533 Braindump,70-533 Prep Guide QUESTION 1You manage a cloud service that supports features hosted by two instances of an Azure virtual machine (VM).You discover that occasional outages cause your service to fail.You need to minimize the impact of outages to your cloud service.Which two actions should you perform? Each correct answer presents part of the solution. A.    Deploy a third instance of the VM.B.    Configure Load Balancing on the VMs.C.    Redeploy the VMs to belong to an Affinity Group.D.    Configure the VMs to belong to an Availability Set. Answer: BDExplanation:Adding your virtual machine to an availability set helps your application stay available during network failures, local disk hardware failures, and any planned downtime.Combine the Azure Load Balancer with an Availability Set to get the most application resiliency. The Azure Load Balancer distributes traffic between multiple virtual machines.http://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-manage-availability/ QUESTION 2You administer an Azure subscription with an existing cloud service named contosocloudservice. Contosocloudservice contains a set of related virtual machines (VMs) named ContosoDC, ContosoSQL and ContosoWeb1.You want to provision a new VM within contosocloudservice.You need to use the latest gallery image to create a new Windows Server 2012 R2 VM that has a target IOPS of 500 for any provisioned disks.Which PowerShell command should you use?  A.    Option AB.    Option BC.    Option CD.    Option D Answer: AExplanation:This example creates a new Windows virtual machine configuration with operating system disk, data disk and provisioning configuration. This configuration is then used to create a new virtual machine.C:PS> $image = (Get-AzureVMImage).ImageNameC:PS>New-AzureVMConfig -Name "MyVM1" -InstanceSize ExtraSmall -ImageName $image ` | Add-AzureProvisioningConfig -Windows -Password $adminPassword ` | Add- AzureDataDisk -CreateNew -DiskSizeInGB 50 -DiskLabel 'datadisk1' -LUN 0 ` | New- AzureVM ­ServiceName "MySvc1"http://msdn.microsoft.com/en-us/library/dn495159.aspx QUESTION 3Drag and Drop QuestionYou administer an Azure Virtual Machine (VM) named server!. The VM is in a cloud service named ContosoService1.You discover that the VM is experiencing storage issues due to increased application logging on the server.You need to create a new 256-GB disk and attach it to the server.Which Power Shell cmdlets should you use? To answer, drag the appropriate cmdlet to the correct location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Answer:   QUESTION 4Your company has two cloud services named CS01 and CS02. You create a virtual machine (VM) in CS02 named Accounts.You need to ensure that users in CS01 can access the Accounts VM by using port 8080.What should you do? A.    Create a firewall rule.B.    Configure load balancing.C.    Configure port redirection.D.    Configure port forwarding.E.    Create an end point. Answer: EExplanation:All virtual machines that you create in Azure can automatically communicate using a private network channel with other virtual machines in the same cloud service or virtual network. However, other resources on the Internet or other virtual networks require endpoints to handle the inbound network traffic to the virtual machine.http://azure.microsoft.com/en-us/documentation/articles/virtual-machines-set-up-endpoints/ QUESTION 5Your company network includes an On-Premises Windows Active Directory (AD) that has a DNS domain named contoso.local and an email domain named contoso.com. You plan to migrate from On-Premises Exchange to Office 365.You configure DirSync and set all Azure Active Directory {Azure AD) usernames as %username%@contoso.onmicrosoft.com.You need to ensure that each user is able to log on by using the email domain as the username.Which two actions should you perform? Each correct answer presents part of the solution. A.    Verify the email domain in Azure AD domains.B.    Run the Set-MsolUserPnncipalName -UserPnncipalName %username%@co ntoso.onmicrosoft.com -NewUserPrincipalName %usemame %@contoso.com Power Shell cmdlet.C.    Edit the ProxyAddress attribute on the On-Premises Windows AD user account.D.    Verify the Windows AD DNS domain in Azure AD domains.E.    Update the On-Premises Windows AD user account UPN to match the email address. Answer: CDExplanation:* There are two main traffic flows originating from the server hosting the Azure Active Directory Sync tool:The Azure Active Directory Sync tool queries a domain controller on the on-premises network for changes to accounts and passwords.The Azure Active Directory Sync tool sends the changes to accounts and passwords to the Azure AD instance of your Office 365 subscription. These changes are sent through the on- premises network's proxy server. * Verify that your virtual machine is joined to the domain by checking your internal DNS to make sure that an Address (A) record was added for the virtual machine with the correct IP address from Azure. For the Azure Active Directory Sync tool to gain access to Internet resources, you must configure the server that runs the Azure Active Directory Sync tool to use the on-premises network's proxy server. QUESTION 6You develop a Windows Store application that has a web service backend.You plan to use the Azure Active Directory Authentication Library to authenticate users to Azure Active Directory (Azure AD) and access directory data on behalf of the user.You need to ensure that users can log in to the application by using their Azure AD credentials.Which two actions should you perform? Each correct answer presents part of the solution. A.    Create a native client application in Azure AD.B.    Configure directory integration.C.    Create a web application in Azure AD.D.    Enable workspace join.E.    Configure an Access Control namespace. Answer: BCExplanation:B: An application that wants to outsource authentication to Azure AD must be registered in Azure AD, which registers and uniquely identifies the app in the directory.C (not A): NativeClient-WindowsStoreA Windows Store application that calls a web API that is secured with Azure AD. Authentication Scenarios for Azure AD, Basics of Authentication in Azure ADhttp://msdn.microsoft.com/en-us/library/azure/dn499820.aspx#BKMK_Authhttps://github.com/AzureADSamples/NativeClient-WindowsStore QUESTION 7Your company plans to migrate from On-Premises Exchange to Office 365.The existing directory has numerous service accounts in your On-Premises Windows Active Directory (AD), stored in separate AD Organizational Units (OU) for user accounts.You need to prevent the service accounts in Windows AD from syncing with Azure AD.What should you do? A.    Create an OU filter in the Azure AD Module for Windows PowerShell.B.    Configure directory partitions in miisclient.exe.C.    Set Active Directory ACLs to deny the DirSync Windows AD service account MSOL_AD_SYNC access to the service account OUs.D.    Create an OU filter in the Azure Management Portal. Answer: BExplanation:One customer, who was looking for OU level filtering to import selected users from On-Premises active directory to Office365.Configure OU level filtering for Office365 directory synchronization.1. Logged in to your Domain controller2. Created an OU (Organisational Unit) from your AD (Active Directory) a. In my case I named it "DirSync"3. Move all those users you want to sync, to that DirSync OU.4. From your DirSync Server navigate to <Drive>Program FilesMicrosoft Online Directory SyncSYNCBUSSynchronization ServiceUIShell5. Double click on miisclient.exe6. This opens a console something similar to the below screen capture Identity Manager, click Management Agents, and then double-click SourceAD.8. Click Configure Directory Partitions, and then click Containers, as shown in the below screen capture. 11. Click OK on the SourceAD Properties page.12. Perform a full sync: on the Management Agent tab, right-click SourceAD, click Run, click Full Import Full Sync, and then click OK.Etc.http://blogs.msdn.com/b/denotation/archive/2012/11/21/installing-and-configure-dirsync-with-ou-level-filtering-for-office365.aspx QUESTION 8You manage an Azure Active Directory (AD) tenantYou plan to allow users to log in to a third-party application by using their Azure AD credentials.To access the application, users will be prompted for their existing third-party user names and passwords.You need to add the application to Azure AD.Which type of application should you add? A.    Existing Single Sign-On with identity provisioningB.    Password Single Sign-On with identity provisioningC.    Existing Single Sign-On without identity provisioningD.    Password Single Sign-On without identity provisioning Answer: AExplanation:* Azure AD supports two different modes for single sign-on:/ Federation using standard protocolsConfiguring Federation-based single sign-on enables the users in your organization to be automatically signed in to a third-party SaaS application by Azure AD using the user account information from Azure AD./ Password-based single sign-on* Support for user provisioningUser provisioning enables automated user provisioning and deprovisioning of accounts in third-party SaaS applications from within the Azure Management Portal, using your Windows Server Active Directory or Azure AD identity information. When a user is given permissions in Azure AD for one of these applications, an account can be automatically created (provisioned) in the target SaaS application.http://msdn.microsoft.com/en-us/library/azure/dn308588.aspx QUESTION 9You plan to use Password Sync on your DirSync Server with Azure Active Directory {Azure AD) on your company network. You configure the DirSync server and complete an initial synchronization of the users.Several remote users are unable to log in to Office 365. You discover multiple event log entries for "Event ID 611 Password synchronization failed for domain."You need to resolve the password synchronization issue.Which two actions should you perform? Each correct answer presents part of the solution. A.    Restart Azure AD Sync Service.B.    Run the Set-FullPasswordSync Power Shell cmdlet.C.    Force a manual synchronization on the DirSync server.D.    Add the DirSync service account to the Schema Admins domain group. Answer: ABExplanation:On the computer that has the Azure Active Directory Sync tool installed, follow these steps:Perform a full password sync for all users who are synced through directory synchronization. To do this, follow these steps:Set-FullPasswordSyncRestart the Forefront Identity Manager Synchronization Service. To do this, follow these steps:http://support2.microsoft.com/kb/2915221 QUESTION 10You administer an Access Control Service namespace named contosoACS that is used by a web application. ContosoACS currently utilizes Microsoft and Yahoo accounts.Several users in your organization have Google accounts and would like to access the web application through ContosoACS.You need to allow users to access the application by using their Google accounts.What should you do? A.    Register the application directly with Google.B.    Edit the existing Microsoft Account identity provider and update the realm to include Google.C.    Add a new Google identity provider.D.    Add a new WS-Federation identity provider and configure the WS-Federation metadata to point to the Google sign-in URL. Answer: CExplanation:Configuring Google as an identity provider eliminates the need to create and manage authentication and identity management mechanism. It helps the end user experience if there are familiar authentication procedures.http://msdn.microsoft.com/en-us/library/azure/gg185976.aspx Guaranteed 100% Microsoft 70-533 Exam Pass OR Full Money Back! Braindump2go Provides you the latest 70-533 Dumps PDF & VCE for Instant Download! http://www.braindump2go.com/70-533.html --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2015-06-04 02:26:47 Post date GMT: 2015-06-04 02:26:47 Post modified date: 2015-06-04 02:26:47 Post modified date GMT: 2015-06-04 02:26:47 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com