getcertified4sure.com

Facts about exam ref 70 533 implementing microsoft azure infrastructure solutions pdf




It is impossible to pass Microsoft 70 533 dumps pdf exam without any help in the short term. Come to Pass4sure soon and find the most advanced, correct and guaranteed Microsoft 70 533 book practice questions. You will get a surprising result by our Rebirth Implementing Microsoft Azure Infrastructure Solutions practice guides.

Q21. You manage a large datacenter that has limited physical space. 

You plan to extend your datacenter to Azure. 

You need to create a connection that supports a multiprotocol label switching (MPLS) virtual private network. 

Which connection type should you use? 

A. Site-to-site 

B. VNet-VNet 

C. ExpressRoute. 

D. Site-to-peer 

Answer:

Explanation: 

ExpressRoute provides even richer capabilities by allowing a dedicated MPLS connection to Azure. Reference: 

ExpressRoute: 

An MPLS Connection to Microsoft Azure 

http://azure.microsoft.com/en-us/services/expressroute/ 


Q22. You administer an Azure solution that uses a virtual network named fabVNet. FabVNet has a single subnet named Subnet-1. 

You discover a high volume of network traffic among four virtual machines (VMs) that are part of Subnet-1. 

You need to isolate the network traffic among the four VMs. You want to achieve this goal with the least amount of downtime and impact on users. 

What should you do? 

A. Create a new subnet in the existing virtual network and move the four VMs to the new subnet. 

B. Create a site-to-site virtual network and move the four VMs to your datacenter. 

C. Create a new virtual network and move the VMs to the new network. 

D. Create an availability set and associate the four VMs with that availability set. 

Answer:

Explanation: Machine Isolation Options 

There are three basic options where machine isolation may be implemented on the Windows Azure platform: 

* Between machines deployed to a single virtual network Subnets within a Single Virtual Network 

* Between machines deployed to distinct virtual networks 

* Between machines deployed to distinct virtual networks where a VPN connection has been established from on-premises with both virtual networks 

Windows Azure provides routing across subnets within a single virtual network. 

Reference: Network Isolation Options for Machines in Windows Azure Virtual Networks 

Incorrect: 

not B: A site-to-site VPN allows you to create a secure connection between your on-premises site and your virtual network. 

Use a site-to-site connection when: 

* You want to create a branch office solution. 

* You want a connection between your on-premises location and your virtual network that’s available without requiring additional client-side configurations. 


Q23. You manage a web application published to Azure Cloud Services. 

Your service level agreement (SLA) requires that you are notified in the event of poor performance from customer locations in the US, Asia, and Europe. 

You need to configure the Azure Management Portal to notify you when the SLA performance targets are not met. 

What should you do? 

A. Create an alert rule to monitor web endpoints. 

B. Create a Notification Hub alert with response time metrics. 

C. Add an endpoint monitor and alert rule to the Notification Hub. 

D. Configure the performance counter on the cloud service. 

Answer:

Explanation: * An alert rule enables you to monitor an available metric within a supported Azure service. When the value of a specified metric violates the threshold assigned for a rule, the alert rule becomes active and registers an alert. When you create an alert rule, you can select options to send an email notification to the service administrator and co-administrators, or another administrator, when the rule becomes active, and when an alert condition is resolved. 

* You can configure cloud service alert rules on: 

Web endpoint status metrics Monitoring metrics from the cloud service host operating system Performance counters collected from the cloud service guest virtual machine 

: Understanding Monitoring Alerts and Notifications in Azure 

URL: http://msdn.microsoft.com/en-us/library/azure/dn306639.aspx 


Q24. You administer an Azure Active Directory (Azure AD) tenant where Box is configured for: . Application Access . Password Single Sign-on An employee moves to an organizational unit that does not require access to Box through 

the Access Panel. 

You need to remove only Box from the list of applications only for this user. 

What should you do? 

A. Delete the user from the Azure AD tenant. 

B. Delete the Box Application definition from the Azure AD tenant. 

C. From the Management Portal, remove the user's assignment to the application. 

D. Disable the user's account in Windows AD. 

Answer:

Explanation: Note: Use Azure AD to manage user access, provision user accounts, and enable single sign-on with Box. Requires an existing Box subscription. 


Q25. HOTSPOT 

You manage two cloud services named Service1 and Service2. The development team updates the code for each application and notifies you that the services are packaged and ready for deployment. 

Each cloud service has specific requirements for deployment according to the following table. 

In the table below, identify the deployment method for each service. Make only one selection in each column. 

Answer: 


Q26. You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet which is used for testing a line of business (LOB) application. The application is deployed to a VM named TestWebServiceVM. 

You need to ensure that TestWebServiceVM always starts by using the same IP address. You need to achieve this goal by using the least amount of administrative effort. 

What should you do? 

A. Use the Management Portal to configure TestWebServiceVM. 

B. Use RDP to configure TestWebServiceVM. 

C. Run the Set-AzureStaticVNetIP PowerShell cmdlet. 

D. Run the Get-AzureReservedIP PowerShell cmdlet. 

Answer:

Explanation: Specify a static internal IP for a previously created VM 

If you want to set a static IP address for a VM that you previously created, you can do so by using the following cmdlets. If you already set an IP address for the VM and you want to change it to a different IP address, you’ll need to remove the existing static IP address before running these cmdlets. See the instructions below to remove a static IP. For this procedure, you’ll use the Update-AzureVM cmdlet. The Update-AzureVM cmdlet restarts the VM as part of the update process. The DIP that you specify will be assigned after the VM restarts. In this example, we set the IP address for VM2, which is located in cloud service StaticDemo. 

Get-AzureVM -ServiceName StaticDemo -Name VM2 | Set-AzureStaticVNetIP -IPAddress 

192.168.4.7 | Update-AzureVM 

Reference: Configure a Static Internal IP Address (DIP) for a VM URL: http://msdn.microsoft.com/en-us/library/azure/dn630228.aspx 


Q27. Your company has recently signed up for Azure. 

You plan to register a Data Protection Manager (DPM) server with the Azure Backup service. 

You need to recommend a method for registering the DPM server with the Azure Backup vault. 

What are two possible ways to achieve this goal? Each correct answer presents a complete solution. 

A. Import a self-signed certificate created using the makecert tool. 

B. Import a self-signed certificate created using the createcert tool. 

C. Import an X.509 v3 certificate with valid clientauthentication EKU. 

D. Import an X.509 v3 certificate with valid serverauthentication EKU. 

Answer: A,C 

Explanation: A: You can create a self-signed certificate using the makecert tool, or use any valid SSL certificate issued by a Certification Authority (CA) trusted by Microsoft, whose root certificates are distributed via the Microsoft Root Certificate Program. 

C: The certificate must have a valid ClientAuthentication EKU. 

Reference: Prerequisites for Azure Backup 

URL: http://technet.microsoft.com/en-us/library/dn296608.aspx 


Q28. DRAG DROP 

You plan to deploy a cloud service named contosoapp. The service includes a web role named contosowebrole. The web role has an endpoint named restrictedEndpoint. 

You need to allow access to restricted Endpoint only from your office machine using the IP address 145.34.67.82. 

Which values should you use within the service configuration file? To answer, drag the appropriate value to the correct location in the service configuration file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 


Q29. You manage several Azure virtual machines (VMs). You create a custom image to be used by employees on the development team. 

You need to ensure that the custom image is available when you deploy new servers. 

Which Azure Power Shell cmdlet should you use? 

A. Update-AzureVMImage 

B. Add-AzureVhd 

C. Add-AzureVMImage 

D. Update-AzureDisk 

E. Add-AzureDataDisk 

Answer:

Explanation: The Add-AzureVMImage cmdlet adds an operating system image to the 

image repository. The image should be a generalized operating system image, using either 

Sysprep for Windows or, for Linux, using the appropriate tool for the distribution. 

Example 

This example adds an operating system image to the repository. 

Windows PowerShell 

C:\PS>Add-AzureVMImage -ImageName imageName -MediaLocation 

http://yourstorageaccount.blob.core.azure.com/container/sampleImage.vhd -Label 

Reference: Add-AzureVMImage 


Q30. You administer a cloud service. 

You plan to host two web applications named contosoweb and contosowebsupport. 

You need to ensure that you can host both applications and qualify for the Azure Service 

Level Agreement. You want to achieve this goal while minimizing costs. 

How should you host both applications? 

A. in different web roles with two instances in each web role 

B. in the same web role with two instances 

C. in different web roles with one instance in each web role 

D. in the same web role with one instance 

Answer:

Explanation: A cloud service must have at least two instances of every role to qualify for the Azure Service Level Agreement, which guarantees external connectivity to your Internet-facing roles at least 99.95 percent of the time. 

Reference: Azure, What is a cloud service? 

URL: http://azure.microsoft.com/en-us/documentation/articles/cloud-services-what-is/