70-534 | Downloadable 70-534 Braindumps 2021

NEW QUESTION 1
HOTSPOT
You plan to acquire a secure connection between a data center and Azure for disaster recovery purposes. The company anticipates moving more than 5 terabytes (TB) of data during each failover instance. You have the following requirements:
* You must be able to monitor connection throughput and all network traffic.
* You must minimize the time it takes to transfer data after a failover.
You need to recommend the correct configuration.
What should you recommend? To answer, select the appropriate connection and routing gateway from the lists on the answer area.

Answer:

Explanation:

NEW QUESTION 2
HOTSPOT
You have an existing server that runs Windows Server. You plan to create a base image of this server. You will use this base image to prepare several virtual servers for future use.
After the base image is prepared, you will capture it by using the Azure management portal. You must use the System Preparation Tool (Sysprep) to prepare the server so that the base image can be captured.
You need to prepare the server so that the base image can be captured. What should you do? To answer, configure the appropriate options in the dialog box in the answer area.

Answer:

Explanation: Capture the virtual machine
1. In the Azure portal, Connect to the virtual machine.
2. Open a Command Prompt window as an administrator.
3. Change the directory to %windir%system32sysprep, and then run sysprep.exe.
4. The System Preparation Tool dialog box appears. Do the following:
In System Cleanup Action, select Enter System Out-of-Box Experience (OOBE) and make sure that Generalize is checked.
In Shutdown Options, select Shutdown. Click OK.

Etc.
References: https://docs.microsoft.com/en-us/azure/virtual- machines/windows/classic/capture-image

NEW QUESTION 3
You manage a virtual Windows Server 2012 web server that is hosted by an on-premises Windows Hyper-V server. You plan to use the virtual machine (VM) in Azure.
You need to migrate the VM to Azure Storage to add it to your repository. Which Azure Power Shell cmdlet should you use?

• A. Import-AzureVM
• B. New-AzureVM
• C. Add-AzureDisk
• D. Add-AzureWebRole
• E. Add-AzureVhd

Answer: E

Explanation: The Add-AzureVhd cmdlet uploads on premise Virtual hard disk (VHD) images to a blob storage account as fixed .vhd images.
References: https://docs.microsoft.com/en-us/powershell/module/Azure/Add-AzureVhd?view=azuresmps-4.0.0

NEW QUESTION 4
You are designing an Azure development environment. Team members learn Azure development techniques by training in the development environment.
The development environment must automatically scale and load balance additional virtual machine (VM) instances.
You need to recommend the most cost-effective compute-instance size that allows team members to work with Azure in the development environment.
What should you recommend?

• A. Azure A1 standard VM Instance
• B. Azure A2 basic VM Instance
• C. Azure A3 basic VM Instance
• D. Azure A9 standard VM Instance

Answer: A

Explanation: Azure A1 standard VM Instance would be cheapest with 1 CPU core, 0.75 GB RAM, and 40 GB HD. It would be good enough for training purposes.
References: http://azure.microsoft.com/en-us/pricing/details/virtual-machines/

Topic 8, Woodgrove Bank
Background Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each
regional office hosts the servers, infrastructure, and applications that support that region.
Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.
Woodgrove Bank has several apps with regulated data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on the following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost in processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.
The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements WGBLoanMaster app
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader app
The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements
WGBLoanMaster app
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
✑ Allow messages to reside in the queue for up to a month.
✑ Be able to publish and consume batches of messages.
✑ Allow full integration with the Windows Communication Foundation (WCF) communication stack.
✑ Provide a role-based access model to the queues, including different permissions for senders and receivers.
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to
support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader app
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
✑ Require server-side logs of all of the transactions run against your queues.
✑ Track progress of a message within the queue.
✑ Process the messages within 7 days.
✑ Provide a differing timeout value per message.
WGBCreditCruncher app The app must:
✑ Secure inbound and outbound traffic.
✑ Analyze inbound network traffic for vulnerabilities.
✑ Use an instance-level public IP and allow web traffic on port 443 only.
✑ Upgrade the portal to a Single Page Application (SPA) that uses JavaScript, Azure Active Directory (Azure AD), and the OAuth 2.0 implicit authorization grant to secure the Web API back end.
✑ Cache authentication and host the Web API back end using the Open Web Interface for .NET (OWIN) middleware.
✑ Immediately compress check images received from the mobile web app.
✑ Schedule processing of the batched credit transactions on a nightly basis.
✑ Provide parallel processing and scalable computing resources to output financial risk models.
✑ Use simultaneous computer nodes to enable high performance computing and updating of the financial risk models.
Key security area

NEW QUESTION 5
DRAG DROP
Marketing is ready to start their web application validations and is excited to be expanding globally.
You need to support the global web application requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 6
You need to support the disaster recovery requirements of the web application and API. Which two actions should you perform? Each correct answer presents part of the solution.

• A. Deploy the API and web application to multiple locations.
• B. Configure automated backups of the API and web application.
• C. Create a new Azure SQL Data Warehouse and connect it to the web application and API.
• D. Enable Application Insights for the web application and API.
• E. Create an Azure Redis Cache for the web application and API.

Answer: AB

NEW QUESTION 7
You plan to implement Multi-Factor Authentication (MFA).
Administrators must be able to protect user accounts with MFA. You must implement text messages or telephone calls as a second factor.
You need to recommend a MFA solution that minimize costs.
What should you recommend?

• A. Azure Active Directory Premium
• B. an on-premises solution
• C. a Microsoft Office 365 subscription
• D. the Enterprise Mobility Suite

Answer: A

NEW QUESTION 8
You connect to an existing service over the network by using HTTP. The service listens on HTTP port 80. You plan to create a test environment for this existing service by using an Azure virtual machine (VM) that runs Windows Server.
The service must be accessible from the public Internet over HTTP port 8080. You need to configure the test environment. Which two actions should you take? Each correct answer presents part of the solution

• A. Configure an endpoint to route traffic from port 8080 to port 80.
• B. Configure an endpoint to route traffic from port 80 to port 8080.
• C. Ensure that the public IP address is configured as a static IP address.
• D. Configure the Windows Server firewall to allow incoming and outgoing traffic on port 8080.
• E. Configure the Windows Server firewall to allow incoming and outgoing traffic on port 80.

Answer: AE

NEW QUESTION 9
DRAG DROP
You need to configure Azure Security Center to assist the CSIRT team.
Which services should you implement? To answer, drag the appropriate Azure Security Center services to the correct key security area. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 10
DRAG DROP
You need to recommend a test strategy for the disaster recovery system.
What should you do? To answer, drag the appropriate test strategy to the correct business application. Each test strategy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: * Distribution tracking
The company wants to ensure that the distribution tracking data is stored at a location that is geographically close to the customers who will be using the information.
* / HRApp
The data must remain on-premises and cannot be stored in the cloud.
* / Metrics application
Data is stored on an on-premises SQL Server database, but this data should be moved to the cloud.

NEW QUESTION 11
DRAG DROP
Contoso, Ltd., uses Azure websites for their company portal sites.
Admin users need enough access to effectively perform site monitoring or management tasks. Management tasks do not include assigning permissions to other users.
You need to grant admin access to a group of 10 users.
How should you configure the connection? To answer, drag the role or object to the correct connection setting. Each item may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: References: http://azure.microsoft.com/blog/2015/01/05/rbac-and-azure-websites- publishing/

NEW QUESTION 12
You need to assign permissions for tier four employees. Which role should you assign?

• A. Security Manager
• B. Website Contributor
• C. Owner
• D. Network Contributor

Answer: A

Explanation: Topic 10, Mix Questions B

NEW QUESTION 13
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region.
Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during
the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.
Woodgrove Bank has several apps with regulates data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost is processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.
The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements WGBLoanMaster app
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader app
The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal
and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements WGBLoanMaster app
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader app
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
WGBCreditCruncher app
The app must: Key security area

You need to recommend a business continuity and disaster recovery solution for all of the existing line of business applications.
What are two ways to achieve the goal? Each correct answer presents a complete solution.

• A. Create new virtual machines (VMs) in Azure and migrate the line of business applications to the VM
• B. Migrate any backend databases to SQL Database.
• C. Migrate the virtual machines to the Hyper-V cluster and enable Hyper-V replica.
• D. Configure ExpressRoute to enable migration to Azure.
• E. Install the Azure Backup agent on the virtual machines.

Answer: AB

Explanation: References:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-hyper-v-site-to-azure

NEW QUESTION 14
DRAG DROP
You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named ContosoService1. You want to create a new VM named MyApp that will have a fixed IP address and be hosted by an Azure Datacenter in the US West region.
You need to assign a fixed IP address to the MyApp VM. Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet or value to the correct location in the PowerShell command.
Each cmdlet or value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Box 1: ReservedIP
Set the variable ReservedIP, which is later used in the third statement.
Box 2:New-AzureReservedIP
The New-AzureReservedIP cmdlet creates a reserved IP address.
You want to create a new VM named MyApp that will have a fixed IP address.
Box 3: West US
You want to create a new VM named MyApp that will have a fixed IP address and be hosted by an Azure Datacenter in the US West region.
Box 4: ReservedIPName
The -ReservedIPName parameter, of the New-AzureVM command, specifies the name of the reserved IP address.
Box 5: West US
The location should West US, just as in Box 3. References:

NEW QUESTION 15
DRAG DROP
You need to allow network traffic to the Trey Research subversion system.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: / You host multiple subversion (SVN) repositories in the RepoBackend subnet. The SVN servers on this subnet must use inbound and outbound TCP at port 8443.
References:
http://theithollow.com/2021/08/03/azure-network-security-groups/

NEW QUESTION 16
DRAG DROP
You are implementing the new security requirements for the WGBCreditCruncher app.
You need to explain the security process flow to another developer. You start by navigating to the web app as it is presented to the user.
Which five actions must be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory- authentication-scenarios

NEW QUESTION 17
You administer of a set of virtual machine (VM) guests hosted in Hyper-V on Windows Server 2012 R2. The virtual machines run the following operating systems:
* Windows Server 2008
* Windows Server 2008 R2
* Linux (openSUSE 13.1)
All guests currently are provisioned with one or more network interfaces with static bindings and VHDX disks. You need to move the VMs to Azure Virtual Machines hosted in an Azure subscription. Which three actions should you perform?
Each correct answer presents part of the solution.

• A. Install the WALinuxAgent on Linux servers.
• B. Ensure that all servers can acquire an IP by means of Dynamic Host Configuration Protocol (DHCP).
• C. Upgrade all Windows VMs to Windows Server 2008 R2 or higher.
• D. Sysprep all Windows servers
• E. Convert the existing virtual disks to the virtual hard disk (VHD) format.

Answer: ABE

Explanation: The Azure Linux Agent is installed on the Linux VM and is responsible to communicate with the Azure Frabric Controller.
It is a prerequisite that the Virtual Machines can receive ip addresses from DHCP. Azure does not use VHDX, only VHD. We are required to convert VHDX to VHD.

NEW QUESTION 18
Contoso, Ltd., uses Azure websites for public-facing customer websites. The company has a mobile app that requires customers sign in by using a Contoso customer account.
Customers must be able to sign on to the websites and mobile app by using a Microsoft, Facebook, or Google account. All transactions must be secured in-transit regardless of device.
You need to configure the websites and mobile app to work with external identity providers.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. Request a certificate from a domain registrar for the website URL, and enable TLS/SSL.
• B. Configure IPsec for the websites and the mobile app.
• C. Configure the KerberosTokenProfile 1.1 protocol.
• D. Configure OAuth2 to connect to an external authentication provider.
• E. Build an app by using MVC 5 that is hosted in Azure to provide a framework for the underlying authentication.

Answer: ADE

Explanation: DE: This tutorial shows you how to build an ASP.NET MVC 5 web application that enables users to log in using OAuth 2.0 with credentials from an external authentication provider, such as Facebook, Twitter, LinkedIn, Microsoft, or Google.
A:
* You will now be redirected back to the Register page of the MvcAuth application where you can register your Google account. You have the option of changing the local email registration name used for your Gmail account, but you generally want to keep the default email alias (that is, the one you used for authentication). Click Register.
* To connect to authentication providers like Google and Facebook, you will need to set up IIS-Express to use SSL.
References: http://www.asp.net/mvc/overview/security/create-an-aspnet-mvc-5-app-with-facebook-and-google-oauth2-and-openid-sign-on

NEW QUESTION 19
You plan to deploy an application as a cloud service. The application uses a virtual network to extend your on-premises network into Azure. You need to configure a site-to-site VPN for cross-premises network connections.
Which two objects should you configure? Each correct answer presents part of the solution.

• A. Dynamic routing gateway
• B. VPN gateway
• C. External-facing IPv6 address
• D. External-facing IPv4 address

Answer: BD

NEW QUESTION 20
You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet, which is used for testing a line of business (LOB) application.
The application is deployed to a VM named TestWebServiceVM. You need to ensure that TestWebServiceVM always starts by using the same IP address.
You need to achieve this goal by using the least amount of administrative effort. What
should you do?

• A. Use the Management Portal to configure TestWebServiceVM
• B. Use RDP to configure TestWebServiceVM.
• C. Run the Set-AzureStaticVNetIP PowerShell cmdlet.
• D. Run the Get-AzureReservedIP PowerShell cmdlet.

Answer: C

Explanation: The Set-AzureStaticVNetIP cmdlet sets the static virtual network (VNet) IP address information for a virtual machine object.
References: https://docs.microsoft.com/en-us/powershell/module/azure/set-azurestaticvnetip?view=azuresmps-4.0.0