Practical 70-534 Braindumps 2021

NEW QUESTION 1
Your company has two physical locations configured in a geo-clustered environment that includes:
* System Center Virtual Machine Manager 2012 R2
* System Center Data Protection Manager 2012 R2
* SQL Server 2012
* Windows Server 2012 R2 Hyper-V
* Over 100 virtual machines (VMs) in each physical location
Your company has recently signed up for Azure. You plan to leverage your current network environment to provide a backup solution for your VMs. You need to recommend a solution that ensures all VMs are redundant and deployable between locations.
You also want the solution to minimize downtime in the event of an outage at either physical location. Which solution should you recommend?

• A. Configure a backup vault in Azure and use Data Protection Manager to back up the Windows Servers.
• B. Use Data Protection Manager and back up the VMs in each location
• C. Use Azure site recovery in an on-premises to Azure protection configuration
• D. Use Azure site recovery in an on-premises to on-premises protection configuration

Answer: D

Explanation: You can replicate on-premises Hyper-V virtual machines managed in System Center Virtual Machine Manager (VMM) clouds, to a secondary site using Azure Site Recovery in the Azure portal.
References: https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-vmm-to- vmm

NEW QUESTION 2
You develop a set of Power Shell scripts that will run when you deploy new virtual machines (VMs). You need to ensure that the scripts are executed on new VMs.
You want to achieve this goal by using the least amount of administrative effort. What should you do?

• A. Create a new GPO to execute the scripts as a logon script.
• B. Create a SetupComplete.cmd batch file to call the scripts after the VM starts.
• C. Create a new virtual hard disk (VHD) that contains the scripts.
• D. Load the scripts to a common file share accessible by the VMs.
• E. Set the VMs to execute a custom script extension.

Answer: E

Explanation: Custom Script Extension can automatically download scripts and files from Azure Storage and launch a PowerShell script on the VM which in turn can install additional software components. And just like with any other VM Extension, this can be added during VM creation or after the VM has been running.
References: https://azure.microsoft.com/en-us/blog/automating-vm-customization-tasks-using-custom-script-extension/

NEW QUESTION 3
You have an Azure subscription that contains 10 VMs. All of the VMs are set to use the Basic VM tier and are located in the West US region. The storage account used for the VMs is set to Locally Redundant replication. The VMs are in an availability set.
You plan to deploy several web apps in Azure that will retrieve data from the virtual machines. The web apps will use a new App Service plan.
You need to ensure that the web apps remain available if the hardware in data center fails. The solution must minimize the Azure costs associated with bandwidth utilization.
What should you include in the solution?

• A. Create a new storage account that is set to Geo-Redundant replicatio
• B. Move the virtual machines to the new storage accoun
• C. Set the App Service for the web apps to use the default app service.
• D. Set the App Service plan for the web apps to any region other than West US region.
• E. Create a new storage account that is set to Zone Redundant replicatio
• F. Move the virtual machines to the new storage accoun
• G. Set the App Service plan for the web apps to use the default app service.
• H. Set the App Service plan for the web apps to use the default app servic
• I. Configure ExpressRoute for the Azure subscription.

Answer: A

NEW QUESTION 4
You are designing an Azure application. The application includes services hosted in different geographic locations. The service locations may change.
You must minimize the cost of communication between services.
You need to recommend an approach for data transmission between your application and Azure services. The solution must minimize administrative effort.
What should you recommend?

• A. Azure Table storage
• B. Service Bus queue
• C. Service Management API
• D. Azure Queue storage

Answer: B

Explanation: The cost of ACS transactions is insignificant when performing messaging operations against Service Bus queues. Service Bus acquires one ACS token per a single instance of the messaging factory object. The token is then reused until it expires, after about 20 minutes. Therefore, the volume of messaging operations in Service Bus is not directly proportional to the amount of ACS transactions required to support these operations.
References: https://msdn.microsoft.com/library/azure/hh767287.aspx

NEW QUESTION 5
DRAG DROP
You need to recommend network connectivity solutions for the experimental applications.
What should you recommend? To answer, drag the appropriate solution to the correct network connection requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Box 1: ExpressRoute
ExpressRoute gives you a fast and reliable connection to Azure making it suitable for scenarios like periodic data migration, replication for business continuity, disaster recovery and other high availability strategies. It can also be a cost-effective option for transferring large amounts of data such as datasets for high performance computing applications or moving large VMs between your dev/test environment in Azure and on-premises production environment.
Box 2: point-to-site VPN
Box 3: point-to-site VPN
A point-to-site VPN also allows you to create a secure connection to your virtual network. In a point-to-site configuration, the connection is configured individually on each client computer that you want to connect to the virtual network
Box 4: site-to-site VPN
A site-to-site VPN allows you to create a secure connection between your on-premises site and your virtual network. To create a site-to-site connection, a VPN device that is located on your on-premises network is configured to create a secure connection with the Azure Virtual Network Gateway. Once the connection is created, resources on your local network and resources located in your virtual network can communicate directly and securely. Site- to-site connections do not require you to establish a separate connection for each client computer on your local network to access resources in the virtual network.
* Scenario: Support building experimental applications by using data from the Azure deployment and on-premises data sources.
References: http://azure.microsoft.com/en-us/services/expressroute/ https://msdn.microsoft.com/en-us/library/azure/dn133798.aspx

Topic 4, Lucerne PublishingBackground
Overview
Lucerne Publishing creates, stores, and delivers online media for advertising companies. This media is streamed to computers by using the web, and to mobile devices around the world by using native applications. The company currently supports the iOS, Android, and Windows Phone 8.1 platform.
Lucerne Publishing uses proprietary software to manage its media workflow. This software has reached the end of its lifecycle. The company plans to move its media workflows to the cloud. Lucerne Publishing provides access to its customers, who are third-party companies, so that they can download, upload, search, and index media that is stored on Lucerne Publishing servers.
Apps and Applications
Lucerne Publishing develops the applications that customers use to deliver media. The company currently provides the following media delivery applications:
✑ Lucerne Media W - a web application that delivers media by using any browser
✑ Lucerne Media M - a mobile app that delivers media by using Windows Phone 8.1
✑ Lucerne Media A - a mobile app that delivers media by using an iOS device
✑ Lucerne Media N - a mobile app that delivers media by using an Android device
✑ Lucerne Media D - a desktop client application that customer's install on their local computer
Business Requirements
Lucerne Publishing's customers and their consumers have the following requirements:
✑ Access to media must be time-constricted once media is delivered to a consumer.
✑ The time required to download media to mobile devices must be minimized.
✑ Customers must have 24-hour access to media downloads regardless of their location or time zone.
✑ Lucerne Publishing must be able to monitor the performance and usage of its customer-facing app.
Lucerne Publishing wants to make its asset catalog searchable without requiring a database redesign.
✑ Customers must be able to access all data by using a web application. They must
also be able to access data by using a mobile app that is provided by Lucerne Publishing.
✑ Customers must be able to search for media assets by key words and media type.
✑ Lucerne Publishing wants to move the asset catalog database to the cloud without formatting the source data.
Other Requirements Development
Code and current development documents must be backed up at all times. All solutions
must be automatically built and deployed to Azure when code is checked in to source control.
Network Optimization
Lucerne Publishing has a .NET web application that runs on Azure. The web application analyzes storage and the distribution of its media assets. It needs to monitor the utilization of the web application. Ultimately, Lucerne Publishing hopes to cut its costs by reducing data replication without sacrificing its quality of service to its customers. The solution has the following requirements:
✑ Optimize the storage location and amount of duplication of media.
✑ Vary several parameters including the number of data nodes and the distance from node to customers.
✑ Minimize network bandwidth.
✑ Lucerne Publishing wants be notified of exceptions in the web application.
Technical Requirements
Data Mining
Lucerne Publishing constantly mines its data to identify customer patterns. The company plans to replace the existing on-premises cluster with a cloud-based solution. Lucerne Publishing has the following requirements:
Virtual machines:
✑ The data mining solution must support the use of hundreds to thousands of processing cores.
✑ Minimize the number of virtual machines by using more powerful virtual machines.
Each virtual machine must always have eight or more processor cores available.
✑ Allow the number of processor cores dedicated to an analysis to grow and shrink automatically based on the demand of the analysis.
✑ Virtual machines must use remote memory direct access to improve performance.
Task scheduling:
The solution must automatically schedule jobs. The scheduler must distribute the jobs based on the demand and available resources.
Data analysis results:
The solution must provide a web service that allows applications to access the results of analyses.
Other Requirements Feature Support
✑ Ad copy data must be searchable in full text.
✑ Ad copy data must indexed to optimize search speed.
✑ Media metadata must be stored in Azure Table storage.
✑ Media files must be stored in Azure BLOB storage.
✑ The customer-facing website must have access to all ad copy and media.
✑ The customer-facing website must automatically scale and replicate to locations around the world.
✑ Media and data must be replicated around the world to decrease the latency of data transfers.
✑ Media uploads must have fast data transfer rates (low latency) without the need to upload the data offline.
Security
✑ Customer access must be managed by using Active Directory.
✑ Media files must be encrypted by using the PlayReady encryption method.
✑ Customers must be able to upload media quickly and securely over a private connection with no opportunity for internet snooping.

NEW QUESTION 6
You are developing a web application that connects to an existing virtual network. The web application needs to access a database that runs on a virtual machine.
In the Azure portal, you use the virtual network integration user interface to select from a list of virtual networks. The virtual network that the web application needs to connect to is not selectable.
You need to update the existing virtual network so you can connect to it. What should you do?

• A. Enable ExpressRoute.
• B. Enable site-to-site VPN.
• C. Enable point-to-site VPN with a dynamic routing gateway.
• D. Enable point-to-site VPN with a static routing gateway.

Answer: B

NEW QUESTION 7
You are designing a solution that will interact with non-Windows applications over unreliable network connections. You have a security token for each non-Windows application.
You need to ensure that non-Windows applications retrieve messages from the solution. Where should you retrieve messages?

• A. An Azure Queue
• B. The Azure Service Bus Queue
• C. An Azure blob storage container that has a private access policy
• D. Azure Table storage

Answer: B

Explanation: Any Microsoft or non-Microsoft applications can use a Service Bus REST API to manage and access messaging entities over HTTPS.
By using REST applications based on non-Microsoft technologies (e.g. Java, Ruby, etc.) are allowed not only to send and receive messages from the Service Bus, but also to create or delete queues, topics and subscription in a given namespace.
References: https://code.msdn.microsoft.com/windowsazure/service-bus-explorer- f2abca5a

NEW QUESTION 8
You are running a Linux guest in Azure Infrastructure-as-a-Service (IaaS).
You must run a daily maintenance task. The maintenance task requires native BASH commands.
You need to configure Azure Automation to perform this task.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. Create an automation account.
• B. Create an Orchestrator runbook.
• C. Create an asset credential.
• D. Run the Invoke-Workflow Azure PowerShell cmdlet.
• E. Import the SSH PowerShell Module.

Answer: ACE

Explanation: A: An Automation Account is a container for your Azure Automation resources: it provides a way to separate your environments or further organize your workflows.
To create An Automation Account
1. Log in to the Azure Management Portal.
2. In the Management Portal, click Create an Automation Account.
3. On the Add a New Automation Account page, enter a name and pick a region for the account.
C:
* Asset credentials are either a username and password combination that can be used with Windows PowerShell commands or a certificate that is uploaded to Azure Automation.
* The Assets page in Automation displays the various resources (also called “settings”) that are globally available to be used in or associated with a runbook, plus commands to import an integration module, add a new asset, or delete an asset. Assets include variables, schedules, credentials, and connections.
References: http://azure.microsoft.com/blog/2014/07/29/getting-started-with-azure-automation-automation-assets-2/ http://blogs.technet.com/b/orchestrator/archive/2014/05/01/managing-ssh-enabled-linux-hosts-using-service-management-automation.aspx
http://azure.microsoft.com/en-gb/documentation/articles/automation-create-runbook-from- samples/

NEW QUESTION 9
HOTSPOT
You plan to deploy four Infrastructure as a Service (IaaS) virtual machines in Azure. All IaaS virtual machines will reside on the same IP subnet.
You need to design an Azure virtual network that can accommodate the deployment. The design must meet the following requirements:
* Minimize the size of the IP subnet.
* Provide the ability to restrict both internal and Internet traffic.
* Ensure that the IP addresses of the virtual machines remain the same.
What should you include in the design? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Not /29.
/29 would normally provide up to 8 IP addresses which should be enough for four VMs. However, Azure reserves five IP addresses so for four VMs, you need a subnet with at least 9 IP addresses.

NEW QUESTION 10
You need to ensure that the customer-facing website meets the scaling and deployment requirements. What should you do?

• A. Use Traffic Manager with load balancing enable
• B. Deploy websites in a single region.
• C. Use Traffic Manager with load balancing enable
• D. Deploy web apps in multiple regions that are nearest to the website visitor populations
• E. Implement operational procedures to quickly deploy additional local instances of the web apps when you are notified by Traffic Manager
• F. Deploy and maintain multiple web app instances in the largest Azure datacenters in North America, Europe, and Asia.

Answer: B

Explanation: From scenario: Customers must have 24-hour access to media downloads regardless of their location or time zone.

NEW QUESTION 11
You need to prepare the implementation of data storage for the contractor information app. What should you?

• A. Create a storage account and implement multiple data partitions.
• B. Create a Cloud Service and a Mobile Servic
• C. Implement Entity Group transactions.
• D. Create a Cloud Service and a Deployment grou
• E. Implement Entity Group transactions.
• F. Create a Deployment group and a Mobile Servic
• G. Implement multiple data partitions.

Answer: B

Explanation: * Scenario:
/ VanArsdel needs a solution to reduce the number of operations on the contractor information table. Currently, data transfer rates are excessive, and queue length for read/write operations affects performance.
/ A mobile service that is used to access contractor information must have automatically scalable, structured storage
* The basic unit of deployment and scale in Azure is the Cloud Service. References: https://msdn.microsoft.com/en-us/library/azure/dd894038.aspx

NEW QUESTION 12
HOTSPOT
You are reviewing an Azure Resource Manager (ARM) template that is used to deploy a Web App to multiple regions. The template contains the following JSON code:

How should you implement the deployment configuration? To answer, select the
appropriate option in the answer area.

Answer:

Explanation:

NEW QUESTION 13
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region.
Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during
the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.
Woodgrove Bank has several apps with regulates data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost is processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.
The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements WGBLoanMaster app
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader app
The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal
and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements WGBLoanMaster app
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader app
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
WGBCreditCruncher app
The app must: Key security area

You need to recommend a business continuity and disaster recovery solution for all of the existing line of business applications.
What are two ways to achieve the goal? Each correct answer presents a complete solution.

• A. Create new virtual machines (VMs) in Azure and migrate the line of business applications to the VM
• B. Migrate any backend databases to SQL Database.
• C. Migrate the virtual machines to the Hyper-V cluster and enable Hyper-V replica.
• D. Configure ExpressRoute to enable migration to Azure.
• E. Install the Azure Backup agent on the virtual machines.

Answer: AB

Explanation: References:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-hyper-v-site-to-azure

NEW QUESTION 14
You are designing an Azure application that provides online backup storage for hundreds of media files. Each file is larger than 1GB.
The data storage solution has the following requirements:
* Be capable of storing an average of 2 terabytes (TB) of data for each user.
* Support sharing of data between all Microsoft Azure instances
* Provide random read/write access
You need to recommend a durable data storage solution. What should you recommend?

• A. Store data in the VHD file
• B. Azure Page Blob service
• C. Azure Block Blob service
• D. Local storage on the VM

Answer: B

Explanation: References: https://msdn.microsoft.com/en-us/library/azure/ee691964.aspx

NEW QUESTION 15
You have an Azure subscription named Subscription1. You create several Azure VMs in Subscription1. All of the VMs belong to the same virtual network.
You have an on-premises Hyper-V server named Server1. Server1 hosts a virtual machine named VM1. You plan to replicate VM1 to Azure.
You need to create additional objects in Subscription1 to support the planned deployment. Which three objects should you create? Each correct answer presents part of the solution.

• A. An Azure Site Recovery vault
• B. An endpoint
• C. A protection group
• D. A Hyper-V site
• E. A storage account
• F. A Traffic Manager

Answer: ADE

Explanation: You need to set up a Recovery Services vault to orchestrate and manage replication. Make sure Hyper-V hosts are prepared for Site Recovery deployment.
You need a Microsoft Azure account, Azure networks, and storage accounts.
References: https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-site-walkthrough- overview

NEW QUESTION 16
DRAG DROP
You are converting an existing ASP.NET web application to use the Azure Active Directory (AD) Access Control service for authentication. The application will authenticate users by using their Yahoo account credentials. You need to determine the correct payload for each stage of the authentication process. What should you do? To answer, drag the appropriate payload format to the correct location on the dialog box. Each payload format may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Azure AD can support password-based single sign on for any cloud-based app that has an HTML-based sign-in page. By using a custom browser plugin, AAD automates the user’s sign in process via securely retrieving application credentials such as the username and the password from the directory, and enters these credentials into the application’s sign in page on behalf of the user.
Microsoft Azure Active Directory Access Control (also known as Access Control Service or ACS) supports federation with Yahoo! as an identity provider using the OpenID 2.0
authentication protocol.
References:
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-appssoaccess- whatis
https://msdn.microsoft.com/en-us/library/azure/gg185921.aspx