ATTENTION: Get your Microsoft 70-533 certification easily with,Flydumps latest Microsoft 70-533 exam dumps. All the up-to-date questions and answers were added to the new version.Go to the site Flydumps.com to get more Microsoft 70-533 exam
QUESTION 1
Your network includes a legacy application named LegacyApp1. The application only runs in the Microsoft .NET 3.5 Framework on Windows Server 2008.
You plan to deploy to Azure Cloud Services.
You need to ensure that LegacyApp1 will run correctly in the new environment.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Upload a VHD with Windows Server 2008 installed.
B. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 2.
C. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 1.
D. Deploy LegacyApp1 to a cloud service instance configured with Guest OS Family 3. Correct Answer: BC
Explanation Explanation/Reference:
Guest OS Family 1 and Guest OS Family 2 supports .NET 3.5 and .Net 4.0. Guest OS Family 3 and Guest OS Family 4 supports .NET 4.0 and .Net 4.5. Reference: Azure Guest OS Releases and SDK Compatibility Matrix URL: http://msdn.microsoft.com/en-us/library/azure/ee924680.aspx
QUESTION 2
You migrate a Windows Server .NET web application to Azure Cloud Services.
You need enable trace logging for the application.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Update the service definition file.
B. Update the Azure diagnostics configuration.
C. Update the service configuration file.
D. Enable verbose monitoring.
E. Update the application web.config file. Correct Answer: AB
Explanation Explanation/Reference:
You can use Azure logging right out of the box–it’s part of Azure SDK.
A: Azure Service Definition Schema (.csdef File)
The service definition file defines the service model for an application. The file contains the definitions for the roles that are available to a cloud service, specifies
the service endpoints, and establishes configuration settings for the service.
B: Take Control of Logging and Tracing in Microsoft Azure The Microsoft.WindowsAzure.Diagnostics namespace, which inherits from and extends standard
System.Diagnostics classes, enables the use of System.Diagnostics as a logging framework in Azure environment.
URLs:
http://msdn.microsoft.com/en-us/library/azure/ee758711.aspx http://msdn.microsoft.com/en-us/magazine/ff714589.aspx
QUESTION 3
You manage a cloud service that is running in two small instances. The cloud service hosts a help desk application. The application utilizes a virtual network
connection to synchronize data to the company’s internal accounting system.
You need to reduce the amount of time required for data synchronization.
What should you do?
A. Configure the servers as large instances and re-deploy.
B. Increase the instance count to three.
C. Deploy the application to Azure Web Sites.
D. Increase the processors allocated to the instances. Correct Answer: A
Explanation Explanation/Reference:
Note: When you create your service model, you can specify the size to which to deploy an instance of your role, depending on its resource requirements. The size of the role determines the number of CPU cores, the memory capacity, and the local file system size that is allocated to a running instance.
Reference: Virtual Machine and Cloud Service Sizes for Azure URL : http://msdn.microsoft.com/en-us/library/azure/dn197896.aspx
QUESTION 4
You manage a cloud service that has a web application named WebRole1. WebRole1 writes error messages to the Windows Event Log.
Users report receiving an error page with the following message: “Event 26 has occurred. Contact your system administrator.”
You need to access the WebRole1 event log.
Which three actions should you perform? Each correct answer presents part of the solution.
A. Enable verbose monitoring.
B. Update the WebRole1 web.config file.
C. Update the cloud service definition file and the service configuration file.
D. Run the Set-AzureVMDiagnosticsExtension PowerShell cmdlet.
E. Run the Enable-AzureWebsiteApplicationDiagnostic PowerShell cmdlet.
F. Create a storage account.
Correct Answer: ACF Explanation
Explanation/Reference:
AF: You can monitor key performance metrics for your cloud services in the Azure Management Portal. You can set the level of monitoring to minimal and verbose for each service role, and can customize the monitoring displays. Verbose monitoring data is stored in a storage account, which you can access outside the portal.
C:
*
The service configuration file specifies the number of role instances to deploy for each role in the service, the values of any configuration settings, and the thumbprints for any certificates associated with a role. If the service is part of a Virtual Network, configuration information for the network must be provided in the service configuration file, as well as in the virtual networking configuration file. The default extension for the service configuration file is .cscfg.
*
The service definition file defines the service model for an application. The file contains the definitions for the roles that are available to a cloud service, specifies the service endpoints, and establishes configuration settings for the service.
URLs:
http://azure.microsoft.com/en-us/documentation/articles/cloud-services-how-to-monitor/ http://msdn.microsoft.com/en-us/library/azure/ee758710.aspx http://
msdn.microsoft.com/en-us/library/azure/ee758711.aspx
QUESTION 5
You manage a cloud service that utilizes data encryption.
You need to ensure that the certificate used to encrypt data can be accessed by the cloud service application.
What should you do?
A. Upload the certificate referenced in the application package.
B. Deploy the certificate as part of the application package.
C. Upload the certificate’s public key referenced in the application package.
D. Use RDP to install the certificate.
Correct Answer: C Explanation
Explanation/Reference:
The developer must deploy the public key with their application so that, when Windows Azure spins up role instances, it will match up the thumbprint in the service definition with the uploaded service certificate and deploy the private key to the role instance. The private key is intentionally non-exportable to the .pfx format, so you won’t be able to grab the private key through an RDC connection into a role instance.
Reference: Field Note: Using Certificate-Based Encryption in Windows Azure Applications
QUESTION 6
You administer a Windows Server virtual machine (VM).
You upload the VM to Azure.
You need to ensure that you are able to deploy the BGInfo and VMAccess extensions.
What should you do?
A. Select the Install the VM Agent checkbox while provisioning a VM based on your uploaded VHD.
B. Select the Enable the VM Extensions checkbox while provisioning a VM based on your uploaded VHD.
C. Install the VM Agent MSI and execute the following Power Shell commands: $vm = Get-AzureVM -serviceName $svc -Name $name $vm.VM.ProvisionGuestAgent = $true Update-AzureVM -Name Sname -VM $vm.VM -ServiceName $svc
D. Install the VM Agent MSI and execute the following Power Shell commands: $vm = Get-AzureVM -serviceName $svc -Name $name Set-AzureVMBGInfoExtension -VM $vm.VM Set-AzureVM Access Extension -VM $vm.VM Update-AzureVM -Name Sname -VM $vm.VM -ServiceName $svc
Correct Answer: C Explanation
Explanation/Reference:
The VM Agent can be enabled by manually downloading and installing the VM Agent (either the Windows or Linux version) on an existing VM instance and then setting the ProvisionGuestAgent value to true using Powershell or a REST call. (If you do not set this value after manually installing the VM Agent, the addition of the VM Agent is not detected properly.) The following code example shows how to do this using PowerShell where the $svc and $name arguments have already been determined.
$vm = Get-AzureVM serviceName $svc Name $name $vm.VM.ProvisionGuestAgent = $TRUE Update-AzureVM Name $name VM $vm.VM ServiceName $svc
Reference: VM Agent and VM Extensions Overview
QUESTION 7
You manage a cloud service that supports features hosted by two instances of an Azure virtual machine (VM).
You discover that occasional outages cause your service to fail.
You need to minimize the impact of outages to your cloud service.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Deploy a third instance of the VM.
B. Configure Load Balancing on the VMs.
C. Redeploy the VMs to belong to an Affinity Group.
D. Configure the VMs to belong to an Availability Set.
Correct Answer: BD Explanation
Explanation/Reference:
Adding your virtual machine to an availability set helps your application stay available during network failures, local disk hardware failures, and any planned
downtime.
Combine the Azure Load Balancer with an Availability Set to get the most application resiliency. The Azure Load Balancer distributes traffic between multiple
virtual machines.
Incorrect
Not C: Affinity groups allow you to optimize performance by grouping the services that need to work together in the same data center.
Reference: Manage the availability of virtual machines, Understand planned versus unplanned maintenance
QUESTION 8
You administer an Azure subscription with an existing cloud service named contosocloudservice. Contosocloudservice contains a set of related virtual machines
(VMs) named ContosoDC, ContosoSQL and ContosoWeb1.
You want to provision a new VM within contosocloudservice.
You need to use the latest gallery image to create a new Windows Server 2012 R2 VM that has a target IOPS of 500 for any provisioned disks.
Which PowerShell command should you use?
Correct Answer: A Explanation
Explanation/Reference:
This example creates a new Windows virtual machine configuration with operating system disk, data disk and provisioning configuration. This configuration is then used to create a new virtual machine.
C:\PS> $image = (Get-AzureVMImage).ImageName C:\PS>New-AzureVMConfig -Name “MyVM1” -InstanceSize ExtraSmall -ImageName $image ` | Add-AzureProvisioningConfig -Windows -Password $adminPassword ` | Add-AzureDataDisk -CreateNew -DiskSizeInGB 50 -DiskLabel ‘datadisk1’ -LUN 0 ` | New-AzureVM ServiceName “MySvc1”
Reference: New-AzureVMConfig URL: http://msdn.microsoft.com/en-us/library/dn495159.aspx
QUESTION 9
Your company has two cloud services named CS01 and CS02. You create a virtual machine (VM) in CS02 named Accounts.
You need to ensure that users in CS01 can access the Accounts VM by using port 8080.
What should you do?
A. Create a firewall rule.
B. Configure load balancing.
C. Configure port redirection.
D. Configure port forwarding.
E. Create an end point. Correct Answer: E
Explanation Explanation/Reference:
All virtual machines that you create in Azure can automatically communicate using a private network channel with other virtual machines in the same cloud service or virtual network. However, other resources on the Internet or other virtual networks require endpoints to handle the inbound network traffic to the virtual machine.
Reference: How to Set Up Endpoints to a Virtual Machine URL: http://azure.microsoft.com/en-us/documentation/articles/virtual-machines-set-up-endpoints/
QUESTION 10
You administer a solution deployed to a virtual machine (VM) in Azure. The VM hosts a web service that is used by several applications. You are located in the US
West region and have a worldwide user base.
Developers in Asia report that they experience significant delays when they execute the services.
You need to verify application performance from different locations.
Which type of monitoring should you configure?
A. Disk Read
B. Endpoint
C. Network Out
D. CPU
E. Average Response Time Correct Answer: E
Explanation Explanation/Reference:
Example:
Incorrect:
Not B: Health Endpoint Monitoring Pattern is used for checking the health of the program:
Implement functional checks within an application that external tools can access through exposed endpoints at regular intervals. This pattern can help to verify that
applications and services are performing correctly.
Reference: How to Monitor and Analyze Performance of the Windows Azure Storage Service
QUESTION 11
You are the administrator for three Azure subscriptions named Dev, Test, and Prod.
Your Azure Power Shell profile is configured with the Dev subscription as the default.
You need to create a new virtual machine in the Test subscription by using the least administrative effort.
Which Power Shell command should you use?
Correct Answer: A Explanation
Explanation/Reference:
Example: Set the current subscription
This command makes “ContosoEngineering” the current subscription.
Windows PowerShell
C:\PS> Select-AzureSubscription -SubscriptionName ContosoEngineering -Current
Reference: Select-AzureSubscription
URL: http://msdn.microsoft.com/en-us/library/dn722499.aspx
QUESTION 12
You administer an Azure solution that uses a virtual network named fabVNet. FabVNet has a single subnet named Subnet-1.
You discover a high volume of network traffic among four virtual machines (VMs) that are part of Subnet-1.
You need to isolate the network traffic among the four VMs. You want to achieve this goal with the least amount of downtime and impact on users.
What should you do?
A. Create a new subnet in the existing virtual network and move the four VMs to the new subnet.
B. Create a site-to-site virtual network and move the four VMs to your datacenter.
C. Create a new virtual network and move the VMs to the new network.
D. Create an availability set and associate the four VMs with that availability set. Correct Answer: A
Explanation Explanation/Reference:
Machine Isolation Options
There are three basic options where machine isolation may be implemented on the Windows Azure platform:
*
Between machines deployed to a single virtual network Subnets within a Single Virtual Network
*
Between machines deployed to distinct virtual networks
*
Between machines deployed to distinct virtual networks where a VPN connection has been established from on-premises with both virtual networks
Windows Azure provides routing across subnets within a single virtual network.
Reference: Network Isolation Options for Machines in Windows Azure Virtual Networks
Incorrect:
not B: A site-to-site VPN allows you to create a secure connection between your on-premises site and your virtual network. Use a site-to-site connection when:
*
You want to create a branch office solution.
*
You want a connection between your on-premises location and your virtual network that’s available without requiring additional client-side configurations.
QUESTION 13
You administer an Azure virtual network named fabrikamVNet.
You need to deploy a virtual machine (VM) and ensure that it is a member of the fabrikamVNet virtual network.
What should you do?
A. Run the New-AzureVM Power Shell cmdlet.
B. Run the New-AzureQuickVM Power Shell cmdlet.
C. Run the New-AzureAfhnityGroup Power Shell cmdlet.
D. Update fabrikamVNet’s existing Availability Set. Correct Answer: B
Explanation Explanation/Reference:
The New-AzureQuickVM cmdlet sets the configuration for a new virtual machine and creates the virtual machine. You can create a new Azure service for the virtual machine by specifying either the Location or AffinityGroup parameters, or deploy the new virtual machine into an existing service. Reference: New-AzureQuickVM URL: http://msdn.microsoft.com/en-us/library/dn495183.aspx
QUESTION 14
You manage a large datacenter that has limited physical space.
You plan to extend your datacenter to Azure.
You need to create a connection that supports a multiprotocol label switching (MPLS) virtual private network.
Which connection type should you use?
A. Site-to-site
B. VNet-VNet
C. ExpressRoute.
D. Site-to-peer Correct Answer: C
Explanation Explanation/Reference:
ExpressRoute provides even richer capabilities by allowing a dedicated MPLS connection to Azure. Reference: ExpressRoute: An MPLS Connection to Microsoft Azure
QUESTION 15
You manage a cloud service named fabrikamReports that is deployed in an Azure data center. You deploy a virtual machine (VM) named fabrikamSQL into a
virtual network named fabrikamVNet.
FabrikamReports must communicate with fabrikamSQL.
You need to add fabrikam Reports to fabrikamVNet.
Which file should you modify?
A. the network configuration file for fabrikamVNet
B. the service definition file (.csdef) for fabrikamReports
C. the service definition file (.csdef) for fabrikamSQL
D. the service configuration file (.cscfg) for fabrikamReports
E. the service configuration file (.cscfg) fabrikamSQL Correct Answer: B
Explanation Explanation/Reference:
Azure Service Definition Schema (.csdef File)
The service definition file defines the service model for an application. The file contains the definitions for the roles that are available to a cloud service, specifies
the service endpoints, and establishes configuration settings for the service.
Incorrect:
not D, not E: The service configuration file (.cscfg) specifies the number of role instances to deploy for each role in the service, the values of any configuration
settings, and the thumbprints for any certificates associated with a role.
Reference: Azure Service Definition Schema (.csdef File) http://msdn.microsoft.com/en-us/library/azure/ee758711.aspx
QUESTION 16
You manage an application deployed to virtual machines (VMs) on an Azure virtual network named corpVnet1.
You plan to hire several remote employees who will need access to the application on corpVnet1.
You need to ensure that new employees can access corpVnet1. You want to achieve this goal by using the most cost effective solution.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Create a VPN subnet.
B. Enable point-to-point connectivity for corpVnet1.
C. Enable point-to-site connectivity for corpVnet1.
D. Create a gateway subnet.
E. Enable site-to-site connectivity for corpVnet1.
F. Convert corpVnet1 to a regional virtual network. Correct Answer: AC
Explanation Explanation/Reference:
A point-to-site VPN also allows you to create a secure connection to your virtual network. In a point-to-site configuration, the connection is configured individually on each client computer that you want to connect to the virtual network. Point-to-site connections do not require a VPN device. They work by using a VPN client that you install on each client computer. The VPN is established by manually starting the connection from the on-premises client computer. You can also configure the VPN client to automatically restart.
Reference: About Secure Cross-Premises Connectivity
QUESTION 17
Your company has a subscription to Azure. You plan to deploy 10 websites.
You have the following requirements:
Each website has at least 15 GB of storage.
All websites can use azurewebsite.net.
You need to deploy the 10 websites while minimizing costs.
Which web tier plan should you recommend?
A. Free
B. Small Business
C. Standard
D. Basic Correct Answer: C
Explanation Explanation/Reference:
Standard offers 50 GB of storage space, while Basic only gives 10 GB:
Reference: Websites Pricing Details
URL: http://azure.microsoft.com/en-us/pricing/details/websites/
QUESTION 18
You administer an Azure Web Site named contoso. The development team has implemented changes to the website that need to be validated.
You need to validate and deploy the changes with minimum downtime to users.
What should you do first?
A. Create a new Linked Resource.
B. Configure Remote Debugging on contoso.
C. Create a new website named contosoStaging.
D. Create a deployment slot named contosoStaging.
E. Back up the contoso website to a deployment slot. Correct Answer: D
Explanation Explanation/Reference:
When you deploy your application to Azure Websites, you can deploy to a separate deployment slot instead of the default production slot, which are actually live
sites with their own hostnames.
Furthermore, you can swap the sites and site configurations between two deployment slots, including the production slot. Deploying your application to a
deployment slot has the following benefits:
*
You can validate website changes in a staging deployment slot before swapping it with the production slot.
*
After a swap, the slot with previously staged site now has the previous production site. If the changes swapped into the production slot are not as you expected, you can perform the same swap immediately to get your “last known good site” back.
*
Deploying a site to a slot first and swapping it into production ensures that all instances of the slot are warmed up before being swapped into production. This eliminates downtime when you deploy your site. The traffic redirection is seamless, and no requests are dropped as a result of swap operations.
Reference: Staged Deployment on Microsoft Azure Websites
QUESTION 19
You manage an Azure Web Site that is running in Shared mode.
You discover that the website is experiencing increased average response time during periods of heavy user activity.
You need to update the website configuration to address the performance issues as they occur. What should you do?
A. Set the website to Standard mode and configure automatic scaling based on CPU utilization.
B. Configure automatic seating during specific dates.
C. Modify the website instance size.
D. Configure automatic scaling based on memory utilization.
E. Set the website to Basic mode and configure automatic scaling based on CPU utilization. Correct Answer: A
Explanation Explanation/Reference:
Scaling to Standard Plan Mode Selecting Standard expands the Capacity section to reveal the Instance Size and Instance Count options, which are also available in Basic mode. The Edit Scale Settings for Schedule and Scale by Metric options are available only in Standard mode.
Note:
*
For increased performance and throughput for your websites on Microsoft Azure, you can use the Azure Management Portal to scale your Web Hosting Plan mode from Free to Shared, Basic, or Standard.
*
There are 2 options for scaling:
Based on a Schedule Based on CPU usage
Reference: Azure, How to Scale Websites
QUESTION 20
You manage an Azure Web Site named contosoweb. Logging is enabled for contosoweb. You need to view only errors from your log files in a continuous stream as they occur.
Which Windows Power Shell command should you execute?
A. Get-AzureWebSiteLog -Name contosoweb -OutBuffer Error
B. Save-AzureWebSiteLog -Name contosoweb -Output Errors
C. Get-AzureWebSiteLog -Name contosoweb -Tail Message Error
D. Get-Azure WebSiteLog -Name contosoweb -Message Error
Correct Answer: C Explanation
Explanation/Reference:
Example
This example starts log streaming and show error logs only.
Windows PowerShell
C:\PS>Get-AzureWebsiteLog -Tail -Message Error
Reference: Get-AzureWebsiteLog
URL: http://msdn.microsoft.com/en-us/library/dn495187.aspx
Microsoft 70-533 Questions and Answers Products basically comprise of the simulated Microsoft 70-533 exam questions AND their most correct answers,accompanied with a methodical elucidation of the Microsoft 70-533 answers and the probable wrong answers.The extent to which Microsoft 70-533 Questions and Answers Products cover their Cisco subject is so thorough,that once you are done with a Cisco product,passing the Microsoft 70-533 exam in first attempt should be a piece of cake.
