70-534 Exam - Architecting Microsoft Azure Solutions

certleader.com

Q1. DRAG DROP - (Topic 6)

You have a web application on Azure.

The web application does not employ Secure Sockets Layer (SSL).

You need to enable SSL for your production deployment web application on Azure. Which four actions should you perform in sequence? To answer, move the appropriate

actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Q2. HOTSPOT - (Topic 6)

A company uses Azure for several virtual machine (VM) and website workloads. The company plans to assign administrative roles to a specific group of users. You have a resource group named GROUP1 and a virtual machine named VM2.

The users have the following responsibilities:

You need to assign the appropriate level of privileges to each of the administrators by using the principle of least privilege.

What should you do? To answer, select the appropriate target objects and permission levels in the answer area.

Answer:

Explanation:

* Owner can manage everything, including access.

* Contributors can manage everything except access.

Note: Azure role-based access control allows you to grant appropriate access to Azure AD users, groups, and services, by assigning roles to them on a subscription or resource group or individual resource level.

Q3. DRAG DROP - (Topic 3)

You need to recommend network connectivity solutions for the experimental applications.

What should you recommend? To answer, drag the appropriate solution to the correct network connection requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

ExpressRoute gives you a fast and reliable connection to Azure making it suitable for scenarios like periodic data migration, replication for business continuity, disaster recovery and other high availability strategies. It can also be a cost-effective option for transferring large amounts of data such as datasets for high performance computing applications or moving large VMs between your dev/test environment in Azure and on-premises production environment.

Box 2: point-to-site VPN Box 3: point-to-site VPN

A point-to-site VPN also allows you to create a secure connection to your virtual network. In a point-to-site configuration, the connection is configured individually on each client computer that you want to connect to the virtual network

Box 4: site-to-site VPN

A site-to-site VPN allows you to create a secure connection between your on-premises site and your virtual network. To create a site-to-site connection, a VPN device that is located on your on-premises network is configured to create a secure connection with the Azure Virtual Network Gateway. Once the connection is created, resources on your local network and resources located in your virtual network can communicate directly and securely. Site- to-site connections do not require you to establish a separate connection for each client computer on your local network to access resources in the virtual network.

* Scenario: Support building experimental applications by using data from the Azure

deployment and on-premises data sources.

Q4.  - (Topic 6)

You are designing an Azure application. The application includes two web roles and three instances of a worker role. The web roles send requests to the worker role by using one or more Azure Queues.

You need to recommend a queue design for sending requests to the worker role. What should you recommend?

A. Create a queue for each combination of web roles and worker role instances. Send requests to all worker role instances based on the sending web role.

B. Create a single queue. Send all requests on the single queue.

C. Create a queue for each worker role instance. Send requests on each worker queue by using a round robin rotation.

D. Create a queue for each web role. Send requests on all queues at the same time.

Answer: B

Explanation: To communicate with the worker role, a web role instance places messages on to a queue. A worker role instance polls the queue for new messages, retrieves them, and processes them. There are a couple of important things to know about the way the queue service works in Azure. First, you reference a queue by name, and multiple role instances can share a single queue. Second, there is no concept of a typed message; you construct a message from either a string or a byte array. An individual message can be no more than 64 kilobytes (KB) in size.

Reference: 5 – Executing Background Tasks https://msdn.microsoft.com/en-gb/library/ff803365.aspx Reference: .NET Multi-Tier Application Using Service Bus Queues

http://azure.microsoft.com/en-gb/documentation/articles/cloud-services-dotnet-multi-tier- app-using-service-bus-queues/

Q5.  - (Topic 4)

You need to configure the deployment of the storage analysis application. What should you do?

A. Create a new Mobile Service.

B. Configure the deployment from source control.

C. Add a new deployment slot.

D. Turn on continuous integration.

Answer: B

Explanation:

Scenario: Data analysis results:

The solution must provide a web service that allows applications to access the results of analyses.

Q6.  - (Topic 5)

You need to recommend a solution that meets the requirements for data storage for the NorthRide app.

What should you include in the recommendation?

A. Azure Remote App

B. Azure Service Bus

C. Azure Connect

D. Azure SQL Database

Answer: B

Explanation: Service Bus queues are part of a broader Azure messaging infrastructure that supports queuing as well as publish/subscribe, Web service remoting, and integration patterns.

Service Bus Queue support Push-style API (while Azure Queue messaging does not).

Reference: Azure Queues and Service Bus Queues - Compared and Contrasted https://msdn.microsoft.com/en-us/library/azure/hh767287.aspx

Q7.  - (Topic 6)

You are designing an Azure application that stores data.

You have the following requirements:

✑ The data storage system must support storing more than 500 GB of data.

✑ Data retrieval must be possible from a large number of parallel threads.

✑ Threads must not block each other.

You need to recommend an approach for storing data. What should you recommend?

A. Azure Notification Hubs

B. A single SQL database in Azure

C. Azure Queue storage

D. Azure Table storage

Answer: D

Explanation: * Azure Table Storage can be useful for applications that must store large amounts of nonrelational data, and need additional structure for that data. Tables offer key- based access to unschematized data at a low cost for applications with simplified data- access patterns. While Azure Table Storage stores structured data without schemas, it does not provide any way to represent relationships between the data.

* As a solution architect/developer, consider using Azure Table Storage when:

/ Your application stores and retrieves large data sets and does not have complex relationships that require server-side joins, secondary indexes, or complex server-side logic.

/ You need to achieve a high level of scaling without having to manually shard your dataset.

Reference: Azure Table Storage and Windows Azure SQL Database - Compared and Contrasted

https://msdn.microsoft.com/en-us/library/azure/jj553018.aspx

Q8. DRAG DROP - (Topic 7)

You are implementing the new security requirements for the WGBCreditCruncher app.

You need to explain the security process flow to another developer. You start by navigating to the web app as it is presented to the user.

Which five actions must be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Q9. DRAG DROP - (Topic 5)

You need to recommend the steps required to deploy the Northwind Electric Cars website.

Which two actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Q10.  - (Topic 4)

You need to upload video to the company's Azure environment. What should you do?

A. Create a site-to-site VPN connection.

B. Write directly to the storage REST APIs.

C. Create an ExpressRoute connection.

D. Use the Azure Import/Export service to move the data.

Answer: B