70-534 | Exact 70-534 Free Practice Questions 2021

NEW QUESTION 1
You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user information. The application access key for TeamSite1 has been compromised.
You need to ensure that users can continue to use TeamSite1 and that the compromised key does not allow access to the data in your Azure AD tenant. Which two actions should you perform? Each correct answer presents part of the solution.

• A. Remove the compromised key from the application definition for TeamSite1.
• B. Delete the application definition for TeamSite1.
• C. Generate a new application key for TeamSite1
• D. Generate a new application definition for TeamSite1.
• E. Update the existing application key.

Answer: AC

Explanation: References: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-integrating-applications

NEW QUESTION 2
HOTSPOT
You use the Windows PowerShell Desired State Configuration (DSC) feature to configure your company's servers. Line numbers are included for reference only.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation:

NEW QUESTION 3
You design an Azure web application. The web application is accessible by default as a standard cloudapp.net URL.
You need to recommend DNS resource record types that allow you to configure access to the web application by using a custom domain name.
Which two DNS record types should you recommend?

• A. SRV
• B. CNAME
• C. MX
• D. A

Answer: BD

NEW QUESTION 4
DRAG DROP
Your team uses a proprietary source control product. You use FTP to manually deploy an Azure website. You must move your source code from the proprietary source control product to a secure on-premises Git versioning system. Instead of deploying the website by using FTP, the website must automatically deploy to Azure each time developers check-in source files.
You need to implement the new deployment strategy. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: References: http://www.almguide.com/2014/01/deploying-an-azure-website-from-a-local- git-repo/

NEW QUESTION 5
DRAG DROP
You deploy an application as a cloud service to Azure. The application contains a web role to convert temperatures between Celsius and Fahrenheit. The application does not correctly convert temperatures.
You must use Microsoft Visual Studio to determine why the application does not correctly convert temperatures. You need to debug the source code in Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: Step 1:
To debug a cloud service from a remote machine, you must enable that functionality explicitly when you deploy your cloud service so that required services (msvsmon.exe, for example) are installed on the virtual machines that run your role instances.
You can choose the Release configuration.
Step 2:
If you didn't enable remote debugging when you published the service, you have to republish the service with remote debugging enabled.
Step 3:
If you debug a role, the Visual Studio debugger attaches to each instance of that role. References:

NEW QUESTION 6
You are designing a plan to deploy a new application to Azure. The solution must provide a single sign-on experience for users.
You need to recommend an authentication type. Which authentication type should you recommend?

• A. SAML credential tokens
• B. Azure managed access keys
• C. Windows Authentication
• D. MS-CHAP

Answer: A

Explanation: A Microsoft cloud service administrator who wants to provide their Azure Active Directory (AD) users with sign-on validation can use a SAML 2.0 compliant SP-Lite profile based Identity Provider as their preferred Security Token Service (STS) / identity provider. This is useful where the solution implementer already has a user directory and password store on- premises that can be accessed using SAML 2.0. This existing user directory can be used for sign-on to Office 365 and other Azure AD-secured resources.
References: https://msdn.microsoft.com/en-us/library/azure/dn641269.aspx?f=255&MSPPError=-2147217396

NEW QUESTION 7
You need to prepare the implementation of data storage for the contractor information app. What should you?

• A. Create a storage account and implement multiple data partitions.
• B. Create a Cloud Service and a Mobile Servic
• C. Implement Entity Group transactions.
• D. Create a Cloud Service and a Deployment grou
• E. Implement Entity Group transactions.
• F. Create a Deployment group and a Mobile Servic
• G. Implement multiple data partitions.

Answer: B

Explanation: * Scenario:
/ VanArsdel needs a solution to reduce the number of operations on the contractor information table. Currently, data transfer rates are excessive, and queue length for read/write operations affects performance.
/ A mobile service that is used to access contractor information must have automatically scalable, structured storage
* The basic unit of deployment and scale in Azure is the Cloud Service. References: https://msdn.microsoft.com/en-us/library/azure/dd894038.aspx

NEW QUESTION 8
Your company has two physical locations configured in a geo-clustered environment that includes:
* System Center Virtual Machine Manager 2012 R2
* System Center Data Protection Manager 2012 R2
* SQL Server 2012
* Windows Server 2012 R2 Hyper-V
* Over 100 virtual machines (VMs) in each physical location
Your company has recently signed up for Azure. You plan to leverage your current network environment to provide a backup solution for your VMs. You need to recommend a solution that ensures all VMs are redundant and deployable between locations.
You also want the solution to minimize downtime in the event of an outage at either physical location. Which solution should you recommend?

• A. Configure a backup vault in Azure and use Data Protection Manager to back up the Windows Servers.
• B. Use Data Protection Manager and back up the VMs in each location
• C. Use Azure site recovery in an on-premises to Azure protection configuration
• D. Use Azure site recovery in an on-premises to on-premises protection configuration

Answer: D

Explanation: You can replicate on-premises Hyper-V virtual machines managed in System Center Virtual Machine Manager (VMM) clouds, to a secondary site using Azure Site Recovery in the Azure portal.
References: https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-vmm-to- vmm

NEW QUESTION 9
DRAG DROP
You manage a large number of on-premises applications. You plan to migrate the applications to Azure.
You need to implement Azure Storage for each type of data that the applications use.
For each type of data, which storage mechanism should you use? To answer, drag the appropriate storage mechanism to the correct type of data. Each storage mechanism may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/storage/storage-introduction

NEW QUESTION 10
A company has multiple Azure subscriptions. It plans to deploy a large number of virtual machines (VMs) into Azure.
You install the Azure PowerShell module, but you are unable connect to all of the company's Azure subscriptions.
You need to automate the management of the Azure subscriptions. Which two Azure PowerShell cmdlets should you run?

• A. Get-AzurePublishSettingsFile
• B. Import-AzurePublishSettingsFile
• C. Add-AzureSubscription
• D. Import-AzureCertificate
• E. Get-AzureCertificate

Answer: AB

Explanation: Before you start using the Windows Azure cmdlets to automate deployments, you must configure connectivity between the provisioning computer and Windows Azure. You can do this automatically by downloading the PublishSettings file from Windows Azure and importing it.
To download and import publish settings and subscription information
References: https://msdn.microsoft.com/en-us/library/dn385850%28v=nav.70%29.aspx

NEW QUESTION 11
You develop a set of Power Shell scripts that will run when you deploy new virtual machines (VMs). You need to ensure that the scripts are executed on new VMs.
You want to achieve this goal by using the least amount of administrative effort. What should you do?

• A. Create a new GPO to execute the scripts as a logon script.
• B. Create a SetupComplete.cmd batch file to call the scripts after the VM starts.
• C. Create a new virtual hard disk (VHD) that contains the scripts.
• D. Load the scripts to a common file share accessible by the VMs.
• E. Set the VMs to execute a custom script extension.

Answer: E

Explanation: Custom Script Extension can automatically download scripts and files from Azure Storage and launch a PowerShell script on the VM which in turn can install additional software components. And just like with any other VM Extension, this can be added during VM creation or after the VM has been running.
References: https://azure.microsoft.com/en-us/blog/automating-vm-customization-tasks-using-custom-script-extension/

NEW QUESTION 12
DRAG DROP
You are designing the deployment for Linux virtual machines (VMs) in Azure. The VMs will
be used for a web app that will run in Azure.
The web app must be able to run Bash scripts on demand. Parallel workloads must also be set to scale automatically based on use.
You need to design the environment for the Bash scripts and parallel workloads. Which processing type should you use for each component? To answer, drag the
appropriate processing types to the correct components. Each processing type may be
used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 13
HOTSPOT
You manage an Azure subscription. You develop a storage plan with the following requirements:
* Database backup files that are generated once per year are retained for ten years.
* High performance system telemetry logs are created constantly and processed for analysis every month.
In the table below, identify the storage redundancy type that must be used. Make only one selection in each column.

Answer:

Explanation: DB Backups: Geo-Redundant storage (GRS)
GRS is the same as LRS, plus multiple asynchronous copies to a second data center hundreds of miles away.

NEW QUESTION 14
A company uses Azure to host all resources and uses Microsoft Visual Studio Team Services to manage product life cycles.
You need to ensure the team can start runbooks from Visual Studio Team Services. Which solution should you use?

• A. Azure Portal
• B. Hybrid Runbook Workers
• C. Azure Automation API
• D. Schedule
• E. Webhook

Answer: E

Explanation: References:
https://docs.microsoft.com/en-us/azure/automation/automation-webhooks

NEW QUESTION 15
HOTSPOT
You have an Azure subscription. You plan to deploy five virtual machines that will have similar configurations and will run the same workload.
You need to recommend a solution to ensure the availability of the virtual machines during Azure maintenance periods. At any given time, only one virtual machine can be offline for maintenance.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 16
You need to assign permissions for the Virtual Machine (VM) workloads that you migrate to Azure.
The solution must use the principal of least privileges. What should you do?

• A. Create all VMs in the cloud service named Groupl and then connect to the Azure subscriptio
• B. Run the following Windows PowerShell command: New- AzureRoleAssignment -Mail user1@vanarsdelltd.com -RoleDefinitionName Contributor - ResourceGroupName group1
• C. In the Azure portal, select an individual virtual machine and add an owner.
• D. In the Azure portal, assign read permission to the user at the subscription level.
• E. Create each VM in a separate cloud service and then connect to the Azure subscriptio
• F. Run the following Windows PowerShell command:Get-AzureVM | New- AzureRoleAssignment -Mail user1@vanarsdelltd.com -RoleDefinitionName Contributor

Answer: A

Explanation: * Scenario: Permissions must be assigned by using Role Based Access Control (RBAC).
* Role-Based access control (RBAC) in the Azure Portal and Azure Resource Management API allows you to manage access to your subscription at a fine-grained level. With this feature, you can grant access for Active Directory users, groups, or service principals by assigning some roles to them at a particular scope.
Create a role assignment
Use New-AzureRoleAssignment to create a role assignment.
Example: This will create a role assignment for a group at a resource group level.
PS C:> New-AzureRoleAssignment -ObjectID <group object ID> -RoleDefinitionName Reader -ResourceGroupName group1
References: https://azure.microsoft.com/en-gb/documentation/articles/role-based-access-control-powershell/

NEW QUESTION 17
You need to recommend the appropriate technology to provide the predictive analytics for passenger pickup.
What should you do?

• A. Use Power BI to analyze the traffic data and PowerPivot to categorize the results.
• B. Use HDInsight to analyze the traffic data and write a .NET program to categorize the results.
• C. Use Machine Learning Studio to create a predictive model and publish the results as a web service.
• D. Use Hadoop on-premises to analyze the traffic and produce a report that shows high traffic zones.

Answer: C

Explanation: * Scenario: Predictive Routing:
/ An Azure solution must be used for prediction systems.
/ Predictive analytics must be published as a web service and accessible by using the REST API.
* Microsoft Azure Machine Learning Studio is a collaborative visual development environment that enables you to build, test, and deploy predictive analytics solutions that operate on your data. The Machine Learning service and development environment is cloud-based, provides compute resource and memory flexibility, and eliminates setup and installation concerns because you work through your web browser.
References: https://azure.microsoft.com/en-us/documentation/articles/machine-learning- what-is-ml-studio/

NEW QUESTION 18
HOTSPOT
You are developing a messaging solution for a financial services company named Adatum. The solution must integrate an application named Enrollment and an application named Activation.
The Enrollment application is used to enroll new customers. The Activation application is used to activate accounts for new customers.
You need to ensure that each message that the Enrollment application sends is stored in a queue for ten minutes before the Activation application uses the message.
How should you complete the relevant code? To answer, select the appropriate option or options in the answer area.

Answer:

Explanation: Box 1: sb Servicebus
Box 2: adatum.servicebus.windows.net/activate This is a proper service bus URI.
Note: CreateServiceUri(String, String, String) constructs the Service Bus URI for an application, using the specified scheme, service namespace, and service path.
Parameters:
Box 3: NamespaceManager Box 4: New TimeSpan(0,10,0) TimeSpan(Int32,Int32,Int32)
Initializes a new instance of the TimeSpan structure to a specified number of hours, minutes, and seconds.

NEW QUESTION 19
A company hosts a website and exposes web services on the company intranet.
The intranet is secured by using a firewall. Company policies prohibit changes to firewall rules.
Devices outside the firewall must be able to access the web services. You need to recommend an approach to enable inbound communication. What should you recommend?

• A. The Azure Access Control Service
• B. Windows Azure Pack
• C. The Azure Service Bus
• D. A web service in an Azure role that relays data to the internal web services

Answer: C

Explanation: The Service Bus Relay is designed for the use-case of taking existing Windows Communication Foundation (WCF) web services and making those services securely accessible to solutions that reside outside the corporate perimeter without requiring intrusive changes to the corporate network infrastructure. Such Service Bus relay services are still hosted inside their existing environment, but they delegate listening for incoming
sessions and requests to the cloud-hosted Service Bus.
References: http://azure.microsoft.com/en-gb/documentation/articles/cloud-services-dotnet-hybrid-app-using-service-bus-relay/

NEW QUESTION 20
HOTSPOT
You have a cloud service that runs an external process that is named MyStartupTask.cmd. The cloud service runs this external process when the web role starts. The external process writes information to the Windows registry.
You set the value of an environment variable named MyID to the deployment ID for the
current web role instance. The external process must complete writing the information to the Windows registry before the web role starts to accept web traffic.
You need to configure the cloud service. How should you complete the relevant markup? To answer, select the appropriate option or options in the answer area.

Answer:

Explanation: Target 1: executionContext ="elevated" taskType="simple"
executionContext - Specifies the privilege level for the startup task. The privilege level can be limited or elevated:
Elevated: The startup task runs with administrator privileges. This allows startup tasks to install programs, make IIS configuration changes, perform registry changes, and other administrator level tasks, without increasing the privilege level of the role itself.