Certified 70-534 Exam Dumps 2021

NEW QUESTION 1
HOTSPOT
You need to plan the business continuity strategy.
For each requirement, what should you recommend? To answer, select the appropriate option from each list in the answer area.

Answer:

Explanation:

NEW QUESTION 2
DRAG DROP
Your company manages several Azure Web Sites that are running in an existing web- hosting plan named plan1. You need to move one of the websites, named contoso, to a new web-hosting plan named plan2. Which Azure PowerShell cmdlet should you use with each PowerShell command line? To answer, drag the appropriate Azure PowerShell cmdlet to the correct location in the PowerShell code. Each PowerShell cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 3
You plan to deploy an application as a cloud service. The application uses a virtual network to extend your on-premises network into Azure. You need to configure a site-to-site VPN for cross-premises network connections.
Which two objects should you configure? Each correct answer presents part of the solution.

• A. Dynamic routing gateway
• B. VPN gateway
• C. External-facing IPv6 address
• D. External-facing IPv4 address

Answer: BD

NEW QUESTION 4
DRAG DROP
You need to design the role-based access control strategy for the company. What should you do? To answer, drag the appropriate role to the correct user tier. Each role may be used one, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Azure platform roles include:
Azure also provides several resource-specific roles. Some common ones are: References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview

NEW QUESTION 5
HOTSPOT
You are migrating an on-premises application to Azure. The application requires secure storage of database connection strings. When the application is running locally, the connection strings are encrypted with an X509 certificate prior to being stored on disk. The X509 certificate is part of a trust chain to allow the certificate to be revoked by the Certificate Authority of a security breech is suspected.
The application must run on Azure. The X509 certificate must never be stored on disk or in RAM memory. A Certificate Authority must be able to revoke the certificate.
You need to configure Azure Key value.
How should you construct the Azure PowerShell script? To answer, select the appropriate Azure PowerShell commands in the answer area.

Answer:

Explanation:

NEW QUESTION 6
DRAG DROP
You need to build and deploy the API.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 7
You need to configure availability for the virtual machines that the company is migrating to Azure.
What should you implement?

• A. Traffic Manager
• B. Availability Sets
• C. Virtual Machine Autoscaling
• D. Cloud Services

Answer: D

Explanation: Scenario: VanArsdel plans to migrate several virtual machine (VM) workloads into Azure.

Topic 2, Trey ResearchBackground
Overview
Trey Research conducts agricultural research and sells the results to the agriculture and food industries. The company uses a combination of on-premises and third-party server clusters to meet its storage needs. Trey Research has seasonal demands on its services, with up to 50 percent drops in data capacity and bandwidth demand during low-demand periods. They plan to host their websites in an agile, cloud environment where the company can deploy and remove its websites based on its business requirements rather than the requirements of the hosting company.
A recent fire near the datacenter that Trey Research uses raises the management team's awareness of the vulnerability of hosting all of the company's websites and data at any single location. The management team is concerned about protecting its data from loss as a result of a disaster.
Websites
Trey Research has a portfolio of 300 websites and associated background processes that are currently hosted in a third-party datacenter. All of the websites are written in ASP.NET, and the background processes use Windows Services. The hosting environment costs Trey Research approximately S25 million in hosting and maintenance fees.
Infrastructure
Trey Research also has on-premises servers that run VMs to support line-of-business applications. The company wants to migrate the line-of-business applications to the cloud, one application at a time. The company is migrating most of its production VMs from an aging VMWare ESXi farm to a Hyper-V cluster that runs on Windows Server 2012.
Applications DistributionTracking
Trey Research has a web application named Distributiontracking. This application
constantly collects realtime data that tracks worldwide distribution points to customer retail sites. This data is available to customers at all times.
The company wants to ensure that the distribution tracking data is stored at a location that is geographically close to the customers who will be using the information. The system must continue running in the event of VM failures without corrupting data. The system is processor intensive and should be run in a multithreading environment.
HRApp
The company has a human resources (HR) application named HRApp that stores data in an on-premises SQL Server database. The database must have at least two copies, but data to support backups and business continuity must stay in Trey Research locations only. The data must remain on-premises and cannot be stored in the cloud.
HRApp was written by a third party, and the code cannot be modified. The human resources data is used by all business offices, and each office requires access to the entire database. Users report that HRApp takes all night to generate the required payroll reports, and they would like to reduce this time.
MetricsTracking
Trey Research has an application named MetricsTracking that is used to track analytics for the DistributionTracking web application. The data MetricsTracking collects is not customer-facing. Data is stored on an on-premises SQL Server database, but this data should be moved to the cloud. Employees at other locations access this data by using a remote desktop connection to connect to the application, but latency issues degrade the functionality.
Trey Research wants a solution that allows remote employees to access metrics data without using a remote desktop connection. MetricsTracking was written in-house, and the development team is available to make modifications to the application if necessary. However, the company wants to continue to use SQL Server for MetricsTracking.
Business Requirements Business Continuity
You have the following requirements:
✑ Move all customer-facing data to the cloud.
✑ Web servers should be backed up to geographically separate locations,
✑ If one website becomes unavailable, customers should automatically be routed to websites that are still operational.
✑ Data must be available regardless of the operational status of any particular website.
✑ The HRApp system must remain on-premises and must be backed up.
✑ The MetricsTracking data must be replicated so that it is locally available to all Trey Research offices.
Auditing and Security
You have the following requirements:
✑ Both internal and external consumers should be able to access research results.
✑ Internal users should be able to access data by using their existing company credentials without requiring multiple logins.
✑ Consumers should be able to access the service by using their Microsoft credentials.
✑ Applications written to access the data must be authenticated.
✑ Access and activity must be monitored and audited.
✑ Ensure the security and integrity of the data collected from the worldwide distribution points for the distribution tracking application.
Storage and Processing
You have the following requirements:
✑ Provide real-time analysis of distribution tracking data by geographic location.
✑ Collect and store large datasets in real-time data for customer use.
✑ Locate the distribution tracking data as close to the central office as possible to improve bandwidth.
✑ Co-locate the distribution tracking data as close to the customer as possible based on the customer's location.
✑ Distribution tracking data must be stored in the JSON format and indexed by
metadata that is stored in a SQL Server database.
✑ Data in the cloud must be stored in geographically separate locations, but kept with the same political boundaries.
Technical Requirements Migration
You have the following requirements:
✑ Deploy all websites to Azure.
✑ Replace on-premises and third-party physical server clusters with cloud-based solutions.
✑ Optimize the speed for retrieving exiting JSON objects that contain the distribution tracking data.
✑ Recommend strategies for partitioning data for load balancing.
Auditing and Security
You have the following requirements:
✑ Use Active Directory for internal and external authentication.
✑ Use OAuth for application authentication.
Business Continuity
You have the following requirements:
✑ Data must be backed up to separate geographic locations.
✑ Web servers must run concurrent versions of all websites in distinct geographic locations.
✑ Use Azure to back up the on-premises MetricsTracking data.
✑ Use Azure virtual machines as a recovery platform for MetricsTracking and HRApp.
✑ Ensure that there is at least one additional on-premises recovery environment for the HRApp.

NEW QUESTION 8
You plan to implement Multi-Factor Authentication (MFA).
Administrators must be able to protect user accounts with MFA. You must implement text messages or telephone calls as a second factor.
You need to recommend a MFA solution that minimize costs.
What should you recommend?

• A. Azure Active Directory Premium
• B. an on-premises solution
• C. a Microsoft Office 365 subscription
• D. the Enterprise Mobility Suite

Answer: A

NEW QUESTION 9
You need to assign permissions for the Virtual Machine (VM) workloads that you migrate to Azure.
The solution must use the principal of least privileges. What should you do?

• A. Create all VMs in the cloud service named Groupl and then connect to the Azure subscriptio
• B. Run the following Windows PowerShell command: New- AzureRoleAssignment -Mail user1@vanarsdelltd.com -RoleDefinitionName Contributor - ResourceGroupName group1
• C. In the Azure portal, select an individual virtual machine and add an owner.
• D. In the Azure portal, assign read permission to the user at the subscription level.
• E. Create each VM in a separate cloud service and then connect to the Azure subscriptio
• F. Run the following Windows PowerShell command:Get-AzureVM | New- AzureRoleAssignment -Mail user1@vanarsdelltd.com -RoleDefinitionName Contributor

Answer: A

Explanation: * Scenario: Permissions must be assigned by using Role Based Access Control (RBAC).
* Role-Based access control (RBAC) in the Azure Portal and Azure Resource Management API allows you to manage access to your subscription at a fine-grained level. With this feature, you can grant access for Active Directory users, groups, or service principals by assigning some roles to them at a particular scope.
Create a role assignment
Use New-AzureRoleAssignment to create a role assignment.
Example: This will create a role assignment for a group at a resource group level.
PS C:> New-AzureRoleAssignment -ObjectID <group object ID> -RoleDefinitionName Reader -ResourceGroupName group1
References: https://azure.microsoft.com/en-gb/documentation/articles/role-based-access-control-powershell/

NEW QUESTION 10
Your company network includes two branch offices. Users at the company access internal virtual machines (VMs). You want to ensure secure communications between the branch offices and the internal VMs and network.
You need to create a site-to-site VPN connection. What are two possible ways to achieve this goal? Each correct answer presents a complete solution

• A. a private IPv4 IP address and a compatible VPN device
• B. a private IPv4 IP address and a RRAS running on Windows Server 2012
• C. a public-facing IPv4 IP address and a compatible VPN device
• D. a public-facing IPv4 IP address and a RRAS running on Windows Server 2012

Answer: CD

Explanation: You must have an externally facing IPv4 IP address and a VPN device or RRAS to configure a site-to-site VPN connection.
References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq

NEW QUESTION 11
You need to recommend a technology for processing customer pickup requests. Which technology should you recommend?

• A. Notification hub
• B. Queue messaging
• C. Mobile Service with push notifications
• D. Service Bus messaging

Answer: D

Explanation: Service Bus queues are part of a broader Azure messaging infrastructure that supports queuing as well as publish/subscribe, Web service remoting, and integration patterns. Service Bus Queue support Push-style API (while Azure Queue messaging does not).
Incorrect:
Not A: Notification Hub is only used to push notification, not for processing requests. Not B As a solution architect/developer, you should consider using Azure Queues when:
* Your application must store over 80 GB of messages in a queue, where the messages have a lifetime shorter than 7 days.
* Your application wants to track progress for processing a message inside of the queue. This is useful if the worker processing a message crashes. A subsequent worker can then
use that information to continue from where the prior worker left off.
You require server side logs of all of the transactions executed against your queues. Not C: To process the messages we do not need push notification.

Topic 6, Fourth CoffeeBackground
You are the new cloud architect for Fourth Coffee. I he company hosts an on-premises ASP.NET MVC web application to allow online purchases and to support their retail store operations.
The new chief information officer (CIO) has announced several initiatives for the new year, including a new mobile application, online training for retail store employees, and moving the current web application and other services to the cloud.
The marketing team hopes to see an increase in the up-time for the web application. The team would also like to allow users to use social-Nogms in addition to the current username and password system.
Fourth Coffee has chosen Microsoft Azure to support their initiatives.
Current environment
In the Azure portal, you create an Azure Mobile App for the API. You create a Service Bus queue in Azure and install the Azure Storage SDK for Nodejs.
Problem statements
The mobile team attempts to use continuous deployment with the Azure App Service and the new API project. They receive the following error message: "Unable to access 'http://fourthcoffeeapi.azurewebsites.net/': Failed to connect to https://fourthcoffeeapi.scm.azurewebsites.net/"
Business requirement Web Application
*You must increase up-time for the application.
*The application must support additional regions and languages.
*Marketing must be able to validate the web application before updates to the application
are published to the production environment.
Mobile
*The marketing team must be able to send frequent and timely updates to specific users
and devices including Apple iPad. iPhone, Android. Windows, and Windows Phone devices.
*Users must be able to use their social accounts to sign in to the application. You must support Linkedln, Facebook and Google logons.
*The application must remain responsive, even during peak periods.
Training
Video streaming content must be made available and streamed to employee’s browsers. Training content must only include on-demand streaming. There will be no live content.
Technical requirement Web Application
*You must update the deployment process to support cloud deployments.
*All data must be formatted as JSON during transport.
*You must implement Team Foundation Version Control (TFVC) as the version control system for the web application.
*Incoming messages to the API must be persisted to queue storage to ensure they are delivered and processed. You must restrict the size of messages between the mobile app and the API to no more than 5 gigabytes (GB).
*The web application must use geo-redundant replication.
Mobile
*You must use Node.js as a technology platform. You must support all mobile initiatives when possible.
*You must implement Git as the version control system for the mobile app.
*You must develop a REST API by using Node.js. Express, and MongoDB. You must use the Mobile Apps feature of the Azure App Service to host the API in Standard mode.
*You must implement the following Push Notification Services by using Azure Media Services:
*Apple Push Notification Service (APNS) for iPad and iPhone devices
*Google Cloud Messaging service (GCM) for Android devices
*Windows Notification Service (WNS) for Windows devices
*Microsoft Push Notification Service (MPNS) for Windows Phone devices
Security and Disaster Recovery
*You must integrate the on-premises Active Directory Domain Services with Azure Active Directory (Azure AD).
*You must implement the latest federated identity standards to provide authentication and authorization to applications.
*You must implement Multi-Factor Authentication.
*The web application and the API must be able to recover from a disaster.
Scaling
The web application and API must auto-scale according to the following rules:
*Scale up by one instance if CPU is above 70%.
*Scale down by one instance if CPU is below 50%.
Training
*Streaming must include Content Delivery Network (CDN) capabilities to support global
locations.
*Content must be encrypted and protected by using AES and PlayReady.
*Streaming must include one gigabit (GB) per second of dedicated egress capacity.
*All videos must use adaptive bitrate MP4 encoded content and include a streaming manifest file
(.ism).
*You must support the following streaming formats for video files: MPEG DASH, HI_S, Smooth Streaming, HDS. You must not need to re-encode the content.

NEW QUESTION 12
You work for a company named Contoso, Ltd. The network contains an on premises Active Directory domain that has Active Directory Federation Services (AD FS). Contoso uses an internally developed claims App1. You implement directory synchronization with Azure Active Directory (Azure AD).
You need to recommend which configuration should be performed to Single-Sign-On to App1 to authenticated by Azure AD. Which two configuration should you include in the recommendation?

• A. Azure AD as claims provided trust
• B. App1 as a claims provider
• C. Azure AD as relying party trust
• D. App1 as relying party trust

Answer: BC

NEW QUESTION 13
A company has 10 on-premises SQL databases. The company plans to move the databases to SQL Server 2012 that runs in Azure Infrastructure-as-a-Service (IaaS). After migration, the databases will support a limited number of Azure websites in the same Azure Virtual Network.
You have the following requirements:
* You must restore copies of existing on-premises SQL databases to the SQL servers that run in Azure IaaS.
* You must be able to manage the SQL databases remotely.
* You must not open a direct connection from all of the machines on the on-premises network to Azure.
* Connections to the databases must originate from only five Windows computers.
You need to configure remote connectivity to the databases. Which technology solution should you implement?

• A. Azure Virtual Network site-to-site VPN
• B. Azure Virtual Network multi-point VPN
• C. Azure Virtual Network point-to-site VPN
• D. Azure ExpressRoute

Answer: C

Explanation: A point-to-site VPN would meet the requirements.
References: https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-point- to-site-create/

NEW QUESTION 14
You manage a set of virtual machines (VMs) deployed to the cloud service named fabrikamVM. You configure auto scaling according to the following parameters:
* With an instance range of two to six instances
* To maintain CPU usage between 70 and 80 percent
* To scale up one instance at a time
* With a scale up wait time of 30 minutes
* To scale down one instance at a time
* With a scale down wait time of 30 minutes
You discover the following usage pattern of a specific application:
* The application peaks very quickly, and the peak lasts for several hours.
* CPU usage stays above 90 percent for the first 1 to 1.5 hours after usage increases. After
1.5 hours, the CPU usage falls to about 75 percent until application usage begins to decline.
You need to modify the auto scaling configuration to scale up faster when usage peaks. What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

• A. Decrease the scale down wait time.
• B. Decrease the scale up wait time.
• C. Increase the number of scale up instances.
• D. Increase the scale up wait time.
• E. Increase the maximum number of instances

Answer: BC

NEW QUESTION 15
You are designing a plan to deploy a new application to Azure. The solution must provide a single sign-on experience for users.
You need to recommend an authentication type. Which authentication type should you recommend?

• A. SAML credential tokens
• B. Azure managed access keys
• C. Windows Authentication
• D. MS-CHAP

Answer: A

Explanation: A Microsoft cloud service administrator who wants to provide their Azure Active Directory (AD) users with sign-on validation can use a SAML 2.0 compliant SP-Lite profile based Identity Provider as their preferred Security Token Service (STS) / identity provider. This is useful where the solution implementer already has a user directory and password store on- premises that can be accessed using SAML 2.0. This existing user directory can be used for sign-on to Office 365 and other Azure AD-secured resources.
References: https://msdn.microsoft.com/en-us/library/azure/dn641269.aspx?f=255&MSPPError=-2147217396

NEW QUESTION 16
You are designing a Windows Azure application. The application includes processes that communicate by using Windows Communications Foundation (WCF) services. The WCF services must support streaming.
You need to recommend a host for the processes and a WCF binding. Which two actions should you recommend? (Each correct answer presents part of the solution. Choose two.)

• A. Host the processes in web roles.
• B. Host the processes in worker roles.
• C. Use NetTcpBinding for the WCF services.
• D. Use WSHttpBinding for the WCF services.

Answer: BC

Explanation: References: http://www.biztalkgurus.com/blogs/msft-biztalk-community/wcf-nettcprelaybinding-streaming-gotcha