Avant-garde 70-534 Testing Engine 2021

NEW QUESTION 1
DRAG DROP
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the
left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region.
Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.
Woodgrove Bank has several apps with regulates data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost is processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.
The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements WGBLoanMaster app
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader app
The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements WGBLoanMaster app
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader app
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
WGBCreditCruncher app The app must:
Key security area

You are evaluating the architecture for the WGBCreditCruncher app.
You need to implement an Azure service to process each portion of the app data.
For each type of app data, what should you implement? To answer, drag the appropriate Azure services to the correct app data types. Each Azure service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 2
HOTSPOT
Your company has a branch office that has 90 employees. The computers at the branch office are configured as shown in the following table.

You need to identify a backup method for the computers. The solution must use Azure Backup whenever possible. What should you identify? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Azure Backup is not supported on 32-bit operating systems. Azure Backup now supports 64-bit editions of Windows client operating systems. 64-bit editions of Windows 8.1, Windows 8, or Windows 7 Service Pack 1 (SP1) now will support Microsoft Azure Backup.
References: https://support.microsoft.com/en-us/help/3015072/azure-backup-now-supports-64-bit-editions-of-windows-client-operating

NEW QUESTION 3

You need to choose an Azure service for the training initiative.
Which two services should you use? Each correct answer presents part of the solution.

• A. Azure SQL Data Warehouse
• B. Media Services
• C. Azure AD Connect
• D. Notification Hubs
• E. App Service

Answer: BD

NEW QUESTION 4

You administer a DirSync server configured with Azure Active Directory (Azure AD). You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

• A. Restart the DirSync server
• B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet.
• C. Run the Enable-SyncShare PowerShell cmdlet.
• D. Run the Azure AD Sync tool Configuration Wizard.
• E. Replicate the Directory in Active Directory Sites and Services.

Answer: BD

Explanation:
References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active- directory-aadconnect

NEW QUESTION 5
DRAG DROP
You need to implement resource security and authentication.
For each requirement, which solution should you implement? To answer, drag the appropriate solution to the correct requirement. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 6

You administer of a set of virtual machine (VM) guests hosted in Hyper-V on Windows Server 2012 R2. The virtual machines run the following operating systems:
* Windows Server 2008
* Windows Server 2008 R2
* Linux (openSUSE 13.1)
All guests currently are provisioned with one or more network interfaces with static bindings and VHDX disks. You need to move the VMs to Azure Virtual Machines hosted in an Azure subscription. Which three actions should you perform?
Each correct answer presents part of the solution.

• A. Install the WALinuxAgent on Linux servers.
• B. Ensure that all servers can acquire an IP by means of Dynamic Host Configuration Protocol (DHCP).
• C. Upgrade all Windows VMs to Windows Server 2008 R2 or higher.
• D. Sysprep all Windows servers
• E. Convert the existing virtual disks to the virtual hard disk (VHD) format.

Answer: ABE

Explanation:
The Azure Linux Agent is installed on the Linux VM and is responsible to communicate with the Azure Frabric Controller.
It is a prerequisite that the Virtual Machines can receive ip addresses from DHCP. Azure does not use VHDX, only VHD. We are required to convert VHDX to VHD.

NEW QUESTION 7
HOTSPOT
You have a cloud service that runs an external process that is named MyStartupTask.cmd. The cloud service runs this external process when the web role starts. The external process writes information to the Windows registry.
You set the value of an environment variable named MyID to the deployment ID for the
current web role instance. The external process must complete writing the information to the Windows registry before the web role starts to accept web traffic.
You need to configure the cloud service. How should you complete the relevant markup? To answer, select the appropriate option or options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Target 1: executionContext ="elevated" taskType="simple"
executionContext - Specifies the privilege level for the startup task. The privilege level can be limited or elevated:
Elevated: The startup task runs with administrator privileges. This allows startup tasks to install programs, make IIS configuration changes, perform registry changes, and other administrator level tasks, without increasing the privilege level of the role itself.

NEW QUESTION 8

You need to recommend a solution that allows partners to authenticate.
Which solution should you recommend?

• A. Configure the federation provider to trust social identity providers.
• B. Configure the federation provider to use the Azure Access Control service.
• C. Create a new directory in Azure Active Directory and create a user account for the partner.
• D. Create an account on the VanArsdel domain for the partner and send an email message that contains the password to the partner.

Answer: B

Explanation:
* Scenario: The partners all use Hotmail.com email addresses.
* In Microsoft Azure Active Directory Access Control (also known as Access Control Service or ACS), an identity provider is a service that authenticates user or client identities and issues security tokens that ACS consumes.
The ACS Management Portal provides built-in support for configuring Windows Live ID as an ACS Identity Provider.
Incorrect:
Not C, not D: Scenario: VanArsdel management does NOT want to create and manage user accounts for partners.

NEW QUESTION 9

You manage an Azure subscription with virtual machines (VMs) that are running in
Standard mode. You need to reduce the storage costs associated with the VMs. What should you do?

• A. Locate and remove orphaned disks
• B. Add the VMs to an affinity group.
• C. Change VMs to the Basic tier.
• D. Delete the VHD container

Answer: C

Explanation:
Removing orphaned disks would reduce storage, and the cost of storage.

NEW QUESTION 10
HOTSPOT
You are managing the automation of your company’s Azure resources. You need to choose the appropriate tool to automate specific use cases.
Which tool should you choose for each use case? To answer, select the appropriate tool from each list in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 11

You manage an application running on Azure Web Sites Standard tier. The application uses a substantial amount of large image files and is used by people around the world. Users from Europe report that the load time of the site is slow.
You need to implement a solution by using Azure services. Which two actions will achieve the goal? Each correct answer presents a complete solution.

• A. Configure Azure blob storage with a custom domain.
• B. Configure Azure CDN to cache all responses from the application web endpoint.
• C. Configure Azure Web Site auto-scaling to increase instances at high load.
• D. Configure Azure CDN to cache site images and content stored in Azure blob storage.

Answer: AD

Explanation:
You can configure a custom domain for accessing blob data in your Azure storage account. You can map a custom domain to a CDN endpoint in order to use your own domain name
in URLs to cached content rather than using a subdomain of azureedge.net.
References:
https://docs.microsoft.com/en-us/azure/storage/storage-custom-domain-name https://docs.microsoft.com/en-us/azure/cdn/cdn-map-content-to-custom-domain

NEW QUESTION 12

You have business services that run on an on-premises mainframe server.
You must provide an intermediary configuration to support existing business services and Azure. The business services cannot be rewritten. The business services are not exposed externally.
You need to recommend an approach for accessing the business services. What should you recommend?

• A. Connect to the on-premises server by using a custom service in Azure.
• B. Expose the business services to the Azure Service Bus by using a custom service that uses relay binding.
• C. Expose the business services externally.
• D. Move all business service functionality to Azure.

Answer: B

Explanation:
The Service Bus relay service enables you to build hybrid applications that run in both an Azure datacenter and your own on-premises enterprise environment. The Service Bus relay facilitates this by enabling you to securely expose Windows Communication Foundation (WCF) services that reside within a corporate enterprise network to the public cloud, without having to open a firewall connection, or require intrusive changes to a corporate network infrastructure.
References: http://azure.microsoft.com/en-gb/documentation/articles/service-bus-dotnet- how-to-use-relay/

NEW QUESTION 13

You need to support the disaster recovery requirements of the web application and API. Which two actions should you perform? Each correct answer presents part of the solution.

• A. Deploy the API and web application to multiple locations.
• B. Configure automated backups of the API and web application.
• C. Create a new Azure SQL Data Warehouse and connect it to the web application and API.
• D. Enable Application Insights for the web application and API.
• E. Create an Azure Redis Cache for the web application and API.

Answer: AB

NEW QUESTION 14

You need to assign permissions for tier four employees. Which role should you assign?

• A. Security Manager
• B. Website Contributor
• C. Owner
• D. Network Contributor

Answer: A

NEW QUESTION 15

You need to support processing for the WGBLeaseLeader app. Which technology should you use?

• A. Azure Event Hubs
• B. Azure Service Fabric
• C. Azure Service Bus Queues
• D. Azure Storage Queues

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-azure-and-service-bus-queues-compared-contrasted

NEW QUESTION 16

You need to recommend a solution for publishing one of the company websites to Azure and configuring it for remote debugging.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. From Visual Studio, attach the debugger to the solution.
• B. Set the application logging level to Verbose and enable logging.
• C. Set the Web Server logging level to Information and enable logging.
• D. Set the Web Server logging level to Verbose and enable logging.
• E. From Visual Studio, configure the site to enable Debugger Attaching and then publish the site.

Answer: AE

Explanation:
* Scenario:
/ Mitigate the need to purchase additional tools for monitoring and debugging.
/A debugger must automatically attach to websites on a weekly basis. The scripts that handle the configuration and setup of debugging cannot work if there is a delay in attaching the debugger.
A: After publishing your application you can use the Server Explorer in Visual Studio to access your web sites.
After signing in you will see your Web Sites under the Windows Azure node in Server Explorer. Right click on the site that you would like to debug and select Attach Debugger.
E: When the processes appear in the Available Processes table, select w3wp.exe, and then click Attach.
Open a browser to the URL of your web app.
References: http://blogs.msdn.com/b/webdev/archive/2013/11/05/remote-debugging-a-window-azure-web-site-with-visual-studio-2013.aspx

NEW QUESTION 17

You design an Azure application that processes images. The maximum size of an image is 10 MB. The application includes a web role that allows users to upload images and a worker role with multiple instances that processes the images. The web role communicates with the worker role by using an Azure Queue service.
You need to recommend an approach for storing images that minimizes storage transactions.
What should you recommend?

• A. Store images in Azure Blob servic
• B. Store references to the images in the queue.
• C. Store images in the queue.
• D. Store images in OneDrive attached to the worker role instance
• E. Store references to the images in the queue.
• F. Store images in local storage on the web role instanc
• G. Store references to the images in the queue.

Answer: A

Explanation:
Azure Queues provide a uniform and consistent programming model across queues, tables, and BLOBs – both for developers and for operations teams.
Microsoft Azure blob storage can be used to store the image data, the application can use a worker role in Azure to perform background processing tasks on the images, how the application may use shared access signatures to control access to the images by users. Azure blobs provide a series of containers aimed at storing text or binary data. Block blob containers are ideal for streaming data, while page blob containers can be used for random read/write operations.
References: https://msdn.microsoft.com/en-gb/library/ff803365.aspx https://msdn.microsoft.com/en-us/library/azure/hh767287.aspx

NEW QUESTION 18

You manage a software-as-a-service application named SaasApp1 that provides user management features in a multi-directory environment. You plan to offer SaasApp1 to other organizations that use Azure Active Directory.
You need to ensure that SaasApp1 can access directory objects. What should you do?

• A. Configure the Federation Metadata URL
• B. Register SaasApp1 as a native client application
• C. Register SaasApp1 as a web application
• D. Configure the Graph API

Answer: D

Explanation:
The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects.
References: http://msdn.microsoft.com/en-us/library/azure/hh974476.aspx

NEW QUESTION 19
HOTSPOT
You plan to acquire a secure connection between a data center and Azure for disaster recovery purposes. The company anticipates moving more than 5 terabytes (TB) of data during each failover instance. You have the following requirements:
* You must be able to monitor connection throughput and all network traffic.
* You must minimize the time it takes to transfer data after a failover.
You need to recommend the correct configuration.
What should you recommend? To answer, select the appropriate connection and routing gateway from the lists on the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 20
HOTSPOT
You have an Azure SQL Database named Contosodb. Contosodb is running in the Standard/S2 tier and has a service level objective of 99 percent.
You review the service tiers in Microsoft Azure SQL Database as well as the results of running performance queries for the usage of the database for the past week as shown in the exhibits. (Click the Exhibits button.)


For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-service- tiers

NEW QUESTION 21

You need to encrypt a media file.
Which type of encryption should you use?

• A. secure token service
• B. envelope
• C. PlayReady
• D. storage

Answer: C

NEW QUESTION 22

You need to implement the loan aggregation process for the WGBLoanMaster app.
Which technology should you use?

• A. Azure virtual machine
• B. Azure Cloud Service worker role
• C. Azure Batch
• D. Azure WebJob

Answer: C

NEW QUESTION 23

You need to configure the distribution tracking application. What should you do?

• A. Map each role to a single upgrade domain to optimize resource utilization.
• B. Design all services as stateless services.
• C. Configure operations to queue when a role reaches its capacity.
• D. Configure multiple worker roles to run on each virtual machine.

Answer: D

Explanation:
* Scenario: distribution tracking application
The system is processor intensive and should be run in a multithreading environment.
References: http://mark.mymonster.nl/2013/01/29/running-multiple-workers-inside-one-windows-azure-worker-role

NEW QUESTION 24

You need to analyze Lucerne’s performance monitoring solution.
Which three applications should you monitor? Each correct answer presents a complete solution.

• A. The Lucerne Media-D application
• B. The data mining application
• C. The Lucerne Media-W application
• D. The Lucerne Media-M app
• E. The Lucerne Media-N app

Answer: CDE

Explanation:
Monitor the web application and the mobile apps.
C: Lucerne Media W – a web application that delivers media by using any browser
D: Lucerne Media M – a mobile app that delivers media by using Windows Phone 8.1 E: Lucerne Media N – a mobile app that delivers media by using an Android device
* Scenario:
/ Lucerne Publishing must be able to monitor the performance and usage of its customer- facing app.
/ Customers must be able to access all data by using a web application. They must also be able to access data by using a mobile app that is provided by Lucerne Publishing.

NEW QUESTION 25

You have several virtual machines (VMs) that run in Azure. You also have a single System Center 2012 R2 Configuration Manager (SCCM) primary site on-premises.
You have the following requirements:
* All VMs must run on the same virtual network.
* Network traffic must be minimized between the on-premises datacenter and Azure.
* The solution minimize complexity.
You need to use SCCM to collect inventory and deploy software to Azure VMs. What should you do first?

• A. Configure client push for the Azure virtual network.
• B. Enable and configure Operations Insights in Azure.
• C. Install a cloud distribution point on an Azure VM.
• D. Install a secondary site underneath the primary site onto an Azure VM.

Answer: C

Explanation:
Cloud-based distribution Point, a Configuration Manager Site System Role in the Cloud Much of the Configuration Manager topology is made up of distribution points, they are very
helpful in many situations where bandwidth and geographical separation are the facts of life, but also hard to manage if you have hundreds or even thousands of them.
This feature started with the vision that it makes perfect sense to have big distribution points in the Windows Azure cloud where one should not worry about things like (but not limited to) size, performance, reliability, security, access from all around the world, hardware/software update issues etc.
Note: Content management in System Center 2012 Configuration Manager provides the tools for you to manage content files for applications, packages, software updates, and operating system deployment. Configuration Manager uses distribution points to store files that are required for software to run on client computers. These distribution points function as distribution centers for the content files and let users download and run the software. Clients must have access to at least one distribution point from which they can download the files.
References: http://blogs.technet.com/b/configmgrteam/archive/2013/01/31/new-distribution-points-in-configuration-manager-sp1.aspx

NEW QUESTION 26
HOTSPOT
You have an on-premises data center and an Azure subscription. The Azure subscription has services that are hosted in the East US region. You have servers that run Windows Server 2012 R2. The servers are located on-premises and in both Azure regions. You plan to deploy Microsoft System Center 2012 R2 Data Protection Manager (DPM) to protect all of the servers. The DPM deployment has the following requirements:
* Centralize the management of all backups
* Minimize the costs associated with bandwidth usage
* Protect Microsoft SharePoint and Microsoft SQL Server workloads for up to nine years
You need to recommend which components must be configured to support the planned deployment. What should you include in the recommendation? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

Number of DMP servers: 1
Centralize the management of all backups. Number of Azure backup vaults: 2
References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-dpm- introduction

NEW QUESTION 27
HOTSPOT
You manage two cloud services named Service1 and Service2. The development team updates the code for each application and notifies you that the services are packaged and ready for deployment.

Each cloud service has specific requirements for deployment according to the following table. In the table below, identify the deployment method for each service. Make only one selection in each column.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Service1: Update by using package in Azure Storage
The package must be retained for disaster recovery purposes.
Service 2: Update by using from your local computer Maintaining the existing service package is not required.

NEW QUESTION 28

You need to design the business continuity framework. Which technology should you use?

• A. Hyper-V Replica
• B. Azure Backup
• C. Azure Site Recovery
• D. Azure StoreSimple

Answer: C

Explanation:
Azure Site Recovery can protect Microsoft Hyper-V, VMware, and physical servers, and you can use Azure or your secondary datacenter as your recovery site.
From scenario: The company has a human resources (HR) application named HRApp that
stores data in an on-premises SQL Server database. The database must have at least two copies, but data to support backups and business continuity must stay in Trey Research locations only. The data must remain on-premises and cannot be stored in the cloud.
References: https://azure.microsoft.com/en-us/services/site-recovery/

NEW QUESTION 29

You manage several Azure virtual machines (VMs). You create a custom image to be used by employees on the development team.
You need to ensure that the custom image is available when you deploy new servers. Which Azure Power Shell cmdlet should you use?

• A. Update-AzureVMImage
• B. Add-AzureVhd
• C. Add-AzureVMImage
• D. Update-AzureDisk
• E. Add-AzureDataDis

Answer: C

Explanation:
The Add-AzureVMImage cmdlet adds a new operating system image or a new virtual machine image to the image repository. The image is a generalized operating system image, using either Sysprep for Windows or, for Linux, using the appropriate tool for the distribution.
References: https://docs.microsoft.com/en-us/powershell/module/azure/add-azurevmimage?view=azuresmps-4.0.0

NEW QUESTION 30
......