[Q1-Q10] Lead2pass 70-533 New Questions For Passing The 70-533 Certification Exam

Lead2pass Microsoft New Exam 70-533 VCE Files Free Instant Download:

https://www.lead2pass.com/70-533.html

QUESTION 1
You manage a cloud service that supports features hosted by two instances of an Azure virtual machine (VM).
You discover that occasional outages cause your service to fail.
You need to minimize the impact of outages to your cloud service.
Which two actions should you perform? Each correct answer presents part of the solution.

A.    Deploy a third instance of the VM.
B.    Configure Load Balancing on the VMs.
C.    Redeploy the VMs to belong to an Affinity Group.
D.    Configure the VMs to belong to an Availability Set.

Answer: BD
Explanation:
Adding your virtual machine to an availability set helps your application stay available during network failures, local disk hardware failures, and any planned downtime.
Combine the Azure Load Balancer with an Availability Set to get the most application resiliency. The Azure Load Balancer distributes traffic between multiple virtual machines.
http://azure.microsoft.com/en-gb/documentation/articles/virtual-machines-manage-availability/

QUESTION 2 70-533 Dumps,70-533 Exam Questions,70-533 New Questions,70-533 VCE,70-533 PDF
You administer an Azure subscription with an existing cloud service named contosocloudservice. Contosocloudservice contains a set of related virtual machines (VMs) named ContosoDC, ContosoSQL and ContosoWeb1.
You want to provision a new VM within contosocloudservice.
You need to use the latest gallery image to create a new Windows Server 2012 R2 VM that has a target IOPS of 500 for any provisioned disks.
Which PowerShell command should you use?

21

A.    Option A
B.    Option B
C.    Option C
D.    Option D

Answer: A
Explanation:
http://msdn.microsoft.com/library/azure/dn197896.aspx

QUESTION 3 70-533 Dumps,70-533 Exam Questions,70-533 New Questions,70-533 VCE,70-533 PDF
Drag and Drop Question
You administer an Azure Virtual Machine (VM) named server!. The VM is in a cloud service named ContosoService1.
You discover that the VM is experiencing storage issues due to increased application logging on the server.
You need to create a new 256-GB disk and attach it to the server.
Which Power Shell cmdlets should you use? To answer, drag the appropriate cmdlet to the correct location in the Power Shell command. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

31

Answer:

32
Explanation:
This example gets a virtual machine object for the virtual machine named “MyVM” in the “myservice” cloud service, updates the virtual machine object by attaching an existing data disk from the repository using the disk name, and then updates the Azure virtual machine.
Windows PowerShell
C:\PS>Get-AzureVM “myservice” -Name “MyVM” `| Add-AzureDataDisk -Import – DiskName “MyExistingDisk” -LUN 0 `| Update-AzureVM

QUESTION 4 70-533 Dumps,70-533 Exam Questions,70-533 New Questions,70-533 VCE,70-533 PDF
Your company has two cloud services named CS01 and CS02.
You create a virtual machine (VM) in CS02 named Accounts.
You need to ensure that users in CS01 can access the Accounts VM by using port 8080.
What should you do?

A.    Create a firewall rule.
B.    Configure load balancing.
C.    Configure port redirection.
D.    Configure port forwarding.
E.    Create an end point.

Answer: E
Explanation:
All virtual machines that you create in Azure can automatically communicate using a private network channel with other virtual machines in the same cloud service or virtual network. However, other resources on the Internet or other virtual networks require endpoints to handle the inbound network traffic to the virtual machine.
http://azure.microsoft.com/en-us/documentation/articles/virtual-machines-set-up-endpoints/

QUESTION 5
Your company network includes an On-Premises Windows Active Directory (AD) that has a DNS domain named contoso.local and an email domain named contoso.com.
You plan to migrate from On-Premises Exchange to Office 365.
You configure DirSync and set all Azure Active Directory {Azure AD) usernames as %username%@contoso.onmicrosoft.com.
You need to ensure that each user is able to log on by using the email domain as the username.
Which two actions should you perform? Each correct answer presents part of the solution.

A.    Verify the email domain in Azure AD domains.
B.    Run the Set-MsolUserPnncipalName -UserPnncipalName %username%@co ntoso.onmicrosoft.com -NewUserPrincipalName %usemame %@contoso.com Power Shell cmdlet.
C.    Edit the ProxyAddress attribute on the On-Premises Windows AD user account.
D.    Verify the Windows AD DNS domain in Azure AD domains.
E.    Update the On-Premises Windows AD user account UPN to match the email address.

Answer: AB
Explanation:
If you have already set up Active Directory synchronization, the user’s UPN may not match the user’s on-premises UPN defined in Active Directory. To fix this, rename the user’s UPN using the Set-MsolUserPrincipalName cmdlet in the Microsoft Azure Active Directory Module for Windows PowerShell.
https://msdn.microsoft.com/en-us/library/azure/jj151786.aspx

QUESTION 6
You develop a Windows Store application that has a web service backend.
You plan to use the Azure Active Directory Authentication Library to authenticate users to Azure Active Directory (Azure AD) and access directory data on behalf of the user.
You need to ensure that users can log in to the application by using their Azure AD credentials.
Which two actions should you perform? Each correct answer presents part of the solution.

A.    Create a native client application in Azure AD.
B.    Configure directory integration.
C.    Create a web application in Azure AD.
D.    Enable workspace join.
E.    Configure an Access Control namespace.

Answer: BC

QUESTION 7
Your company plans to migrate from On-Premises Exchange to Office 365.
The existing directory has numerous service accounts in your On-Premises Windows Active Directory (AD), stored in separate AD Organizational Units (OU) for user accounts.
You need to prevent the service accounts in Windows AD from syncing with Azure AD.
What should you do?

A.    Create an OU filter in the Azure AD Module for Windows PowerShell.
B.    Configure directory partitions in miisclient.exe.
C.    Set Active Directory ACLs to deny the DirSync Windows AD service account MSOL_AD_SYNC
access to the service account OUs.
D.    Create an OU filter in the Azure Management Portal.

Answer: B

QUESTION 8
You manage an Azure Active Directory (AD) tenant
You plan to allow users to log in to a third-party application by using their Azure AD credentials.
To access the application, users will be prompted for their existing third-party user names and passwords.
You need to add the application to Azure AD.
Which type of application should you add?

A.    Existing Single Sign-On with identity provisioning
B.    Password Single Sign-On with identity provisioning
C.    Existing Single Sign-On without identity provisioning
D.    Password Single Sign-On without identity provisioning

Answer: A
Explanation:
* Azure AD supports two different modes for single sign-on:
/ Federation using standard protocols
Configuring Federation-based single sign-on enables the users in your organization to be automatically signed in to a third-party SaaS application by Azure AD using the user account information from Azure AD.
/ Password-based single sign-on
* Support for user provisioning
User provisioning enables automated user provisioning and deprovisioning of accounts in third-party SaaS applications from within the Azure Management Portal, using your Windows Server Active Directory or Azure AD identity information. When a user is given permissions in Azure AD for one of these applications, an account can be automatically created (provisioned) in the target SaaS application.
http://msdn.microsoft.com/en-us/library/azure/dn308588.aspx

QUESTION 9
You plan to use Password Sync on your DirSync Server with Azure Active Directory {Azure AD) on your company network.
You configure the DirSync server and complete an initial synchronization of the users.
Several remote users are unable to log in to Office 365.
You discover multiple event log entries for “Event ID 611 Password synchronization failed for domain.”
You need to resolve the password synchronization issue.
Which two actions should you perform? Each correct answer presents part of the solution.

A.    Restart Azure AD Sync Service.
B.    Run the Set-FullPasswordSync Power Shell cmdlet.
C.    Force a manual synchronization on the DirSync server.
D.    Add the DirSync service account to the Schema Admins domain group.

Answer: BC
Explanation:
Changed AB to BC
http://jermsmit.com/office-365-initiate-a-full-password-sync-using-dirsync-jermsmit/
https://jaapwesselius.com/2014/07/28/force-dirsync-to-synchronize-with-office-365/
A.Not Correct, Azure AD Sync or AADSync is the new version of DirSync.

QUESTION 10
You administer an Access Control Service namespace named contosoACS that is used by a web application. ContosoACS currently utilizes Microsoft and Yahoo accounts.
Several users in your organization have Google accounts and would like to access the web application through ContosoACS.
You need to allow users to access the application by using their Google accounts.
What should you do?

A.    Register the application directly with Google.
B.    Edit the existing Microsoft Account identity provider and update the realm to include Google.
C.    Add a new Google identity provider.
D.    Add a new WS-Federation identity provider and configure the WS-Federation metadata to point
to the Google sign-in URL.

Answer: C
Explanation:
Configuring Google as an identity provider eliminates the need to create and manage authentication and identity management mechanism. It helps the end user experience if there are familiar authentication procedures.
http://msdn.microsoft.com/en-us/library/azure/gg185976.aspx

70-533 dumps full version (PDF&VCE): https://www.lead2pass.com/70-533.html

Large amount of free 70-533 exam questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDclh4YVRORS1vaHc

You may also need:

70-532 exam dumps: https://drive.google.com/open?id=0B3Syig5i8gpDbm1XNUxwQUYwaWM

70-534 exam dumps: https://drive.google.com/open?id=0B3Syig5i8gpDaTBTRVp4SktqMXM