Most Up-to-date 70-534 Ebook 2021

NEW QUESTION 1
DRAG DROP
You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named ContosoService1. You want to create a new VM named MyApp that will have a fixed IP address and be hosted by an Azure Datacenter in the US West region.
You need to assign a fixed IP address to the MyApp VM. Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet or value to the correct location in the PowerShell command.
Each cmdlet or value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
Box 1: ReservedIP
Set the variable ReservedIP, which is later used in the third statement.
Box 2:New-AzureReservedIP
The New-AzureReservedIP cmdlet creates a reserved IP address.
You want to create a new VM named MyApp that will have a fixed IP address.
Box 3: West US
You want to create a new VM named MyApp that will have a fixed IP address and be hosted by an Azure Datacenter in the US West region.
Box 4: ReservedIPName
The -ReservedIPName parameter, of the New-AzureVM command, specifies the name of the reserved IP address.
Box 5: West US
The location should West US, just as in Box 3. References:

NEW QUESTION 2

Your company has a hybrid solution for development and production. You have an Azure virtual network that includes the following subnets:

You synchronize an on-premises Active Directory farm by using Azure Active Directory Connect. Employees sign in to company facing Web Apps with their on-premises active directory passwords.
You need to allow traffic to RESTful services that require it. Which Azure service should you implement?

• A. Active Directory


• B. Security Center


• C. Active Directory Federation Services


• D. Network Security Groups


• E. Windows Server Firewall

Answer: D

NEW QUESTION 3

A company has multiple Azure subscriptions. It plans to deploy a large number of virtual machines (VMs) into Azure.
You install the Azure PowerShell module, but you are unable connect to all of the company's Azure subscriptions.
You need to automate the management of the Azure subscriptions. Which two Azure PowerShell cmdlets should you run?

• A. Get-AzurePublishSettingsFile


• B. Import-AzurePublishSettingsFile


• C. Add-AzureSubscription


• D. Import-AzureCertificate


• E. Get-AzureCertificate

Answer: AB

Explanation:
Before you start using the Windows Azure cmdlets to automate deployments, you must configure connectivity between the provisioning computer and Windows Azure. You can do this automatically by downloading the PublishSettings file from Windows Azure and importing it.
To download and import publish settings and subscription information
References: https://msdn.microsoft.com/en-us/library/dn385850%28v=nav.70%29.aspx

NEW QUESTION 4

You are designing an Azure web application that includes many static content files.
The application is accessed from locations all over the world by using a custom domain name.
You need to recommend an approach for providing access to the static content with the least amount of latency.
Which two actions should you recommend? Each correct answer presents part of the solution.

• A. Place the static content in Azure Table storage.


• B. Configure a CNAME DNS record for the Azure Content Delivery Network (CDN) domain.


• C. Place the static content in Azure Blob.


• D. Configure a custom domain name that is an alias for the Azure Storage domain.

Answer: BC

Explanation:
B: There are two ways to map your custom domain to a CDN endpoint.
1. Create a CNAME record with your domain registrar and map your custom domain and subdomain to the CDN endpoint
2. Add an intermediate registration step with Azure cdnverify
C: The Azure Content Delivery Network (CDN) offers developers a global solution for delivering high-bandwidth content by caching blobs and static content of compute instances at physical nodes in the United States, Europe, Asia, Australia and South America.
The benefits of using CDN to cache Azure data include:
/ Better performance and user experience for end users who are far from a content source, and are using applications where many 'internet trips' are required to load content
/ Large distributed scale to better handle instantaneous high load, say, at the start of an event such as a product launch
References: https://azure.microsoft.com/en-gb/documentation/articles/cdn-how-to-use/ https://github.com/Azure/azure-content/blob/master/articles/cdn-map-content-to-custom- domain.md
https://github.com/Azure/azure-content/blob/master/articles/cdn-map-content-to-custom- domain.md

NEW QUESTION 5
HOTSPOT
Your company plans to migrate its on-premises Microsoft SQL Server databases to Azure.
You are considering using SQL Server 2014 on Azure virtual machines and Azure SQL Database. The planned migration must support the following data security features:
* Database-level firewall rules
* Dynamic Data Masking
* Transparent data encryption (TDE)
You need to identify the data security features supported by each product.
Which feature should you identify? To answer, select the appropriate options in the answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
Dynamic Data Masking is available in SQL Server 2021 (both as an Azure SQL database and SQL Server 2021 on an Azure virtual machine) but not SQL Server 2014.

NEW QUESTION 6

You are planning an application to run on Azure virtual machines (VMs). The VMs will be backed up using Azure Backup.
The application maintains its state in three binary files stored on disk. Changes in application state require that all three files be updated on disk. If only one or two of the files are updated on disk, work is lost and the system is in an inconsistent state.
You need to ensure that when a backup occurs, the application’s data is always in a consistent state.
What should you do?

• A. Disable caching for the VMs virtual hard disks.


• B. Use Premium Storage for the VMs virtual hard disks.


• C. Implement the Volume Shadow Copy Service (VSS) API in the application.


• D. Store the application files on an Azure File Service network share.

Answer: C

NEW QUESTION 7

You need to design the system that alerts project managers to data changes in the contractor information app.
Which service should you use?

• A. Azure Mobile Service


• B. Azure Service Bus Message Queueing


• C. Azure Queue Messaging


• D. Azure Notification Hub

Answer: C

Explanation:
* Scenario:
/ Mobile Apps: Event-triggered alerts must be pushed to mobile apps by using a custom Node.js script.
/ The service level agreement (SLA) for the solution requires an uptime of 99.9%
* If you are already using Azure Storage Blobs or Tables and you start using queues, you are guaranteed 99.9% availability. If you use Blobs or Tables with Service Bus queues, you will have lower availability.
Note: Microsoft Azure supports two types of queue mechanisms: Azure Queues and Service Bus Queues.
/ Azure Queues, which are part of the Azure storage infrastructure, feature a simple REST- based Get/Put/Peek interface, providing reliable, persistent messaging within and between services.
/ Service Bus queues are part of a broader Azure messaging infrastructure that supports queuing as well as publish/subscribe, Web service remoting, and integration patterns.
References: https://msdn.microsoft.com/en-us/library/azure/hh767287.aspx

NEW QUESTION 8
DRAG DROP
You need to scale the API.
In the Azure portal, which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 9

Your company has recently signed up for Azure. You plan to register a Data Protection Manager (DPM) server with the Azure Backup service. You need to recommend a method for registering the DPM server with the Azure Backup vault.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

• A. Import a self-signed certificate created using the makecert tool.


• B. Import a self-signed certificate created using the createcert tool.


• C. Import an X.509 v3 certificate with valid clientauthentication EKU.


• D. Import an X.509 v3 certificate with valid serverauthentication EKU.

Answer: AC

Explanation:
The certificate used for the backup vault in Azure must fulfill the following prerequisites: References: https://blogs.technet.microsoft.com/hybridcloud/2014/03/16/using-azure-backup-with-dpm/

NEW QUESTION 10

You need to support processing for the WGBLeaseLeader app. Which technology should you use?

• A. Azure Event Hubs


• B. Azure Service Fabric


• C. Azure Service Bus Queues


• D. Azure Storage Queues

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-azure-and-service-bus-queues-compared-contrasted

NEW QUESTION 11

You are designing an Azure development environment. Team members learn Azure development techniques by training in the development environment.
The development environment must automatically scale and load balance additional virtual machine (VM) instances.
You need to recommend the most cost-effective compute-instance size that allows team members to work with Azure in the development environment.
What should you recommend?

• A. Azure A1 standard VM Instance


• B. Azure A2 basic VM Instance


• C. Azure A3 basic VM Instance


• D. Azure A9 standard VM Instance

Answer: A

Explanation:
Azure A1 standard VM Instance would be cheapest with 1 CPU core, 0.75 GB RAM, and 40 GB HD. It would be good enough for training purposes.
References: http://azure.microsoft.com/en-us/pricing/details/virtual-machines/

NEW QUESTION 12

Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region.
Woodgrove Bank plans to move all of their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem.
Woodgrove Bank has several apps with regulates data such as Personally Identifiable Information (PII) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (ADDS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost is processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public endpoints.
The WGBLeaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements WGBLoanMaster app
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader app
The app should be secured to stop data breaches. If the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features run efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements WGBLoanMaster app
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader app
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
WGBCreditCruncher app The app must:
Key security area

You need to run the script for a new release. Which technology should you use?

• A. Azure WebJob


• B. Azure App Service API App


• C. Azure Function


• D. Azure App Service Logic App

Answer: B

NEW QUESTION 13

Contoso, Ltd., uses Azure websites for public-facing customer websites. The company has a mobile app that requires customers sign in by using a Contoso customer account.
Customers must be able to sign on to the websites and mobile app by using a Microsoft, Facebook, or Google account. All transactions must be secured in-transit regardless of device.
You need to configure the websites and mobile app to work with external identity providers.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. Request a certificate from a domain registrar for the website URL, and enable TLS/SSL.


• B. Configure IPsec for the websites and the mobile app.


• C. Configure the KerberosTokenProfile 1.1 protocol.


• D. Configure OAuth2 to connect to an external authentication provider.


• E. Build an app by using MVC 5 that is hosted in Azure to provide a framework for the underlying authentication.

Answer: ADE

Explanation:
DE: This tutorial shows you how to build an ASP.NET MVC 5 web application that enables users to log in using OAuth 2.0 with credentials from an external authentication provider, such as Facebook, Twitter, LinkedIn, Microsoft, or Google.
A:
* You will now be redirected back to the Register page of the MvcAuth application where you can register your Google account. You have the option of changing the local email registration name used for your Gmail account, but you generally want to keep the default email alias (that is, the one you used for authentication). Click Register.
* To connect to authentication providers like Google and Facebook, you will need to set up IIS-Express to use SSL.
References: http://www.asp.net/mvc/overview/security/create-an-aspnet-mvc-5-app-with-facebook-and-google-oauth2-and-openid-sign-on

NEW QUESTION 14
HOTSPOT
You need implement tools at the client's location for monitoring and deploying Azure resources.
Which tools should you use? To answer, select the appropriate on-premises tool for each task in the answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
* System Center Virtual Machine Manager (SCVMM) enables rapid provisioning of new virtual machines by the administrator and end users using a self-service provisioning tool.
* System Center Operations Manager (SCOM) is a cross-platform data center management system for operating systems and hypervisors. It uses a single interface that shows state, health and performance information of computer systems. It also provides alerts generated according to some availability, performance, configuration or security situation being identified.
The basic idea is to place a piece of software, an agent, on the computer to be monitored. The agent watches several sources on that computer, including the Windows Event Log, for specific events or alerts generated by the applications executing on the monitored computer.
* Scenario:
Leverage familiarity with Microsoft server management tools. Manage hosted resources by using on-premises tools.
Mitigate the need to purchase additional tools for monitoring and debugging.
Use advanced monitoring features and reports of workloads in Azure by using existing Microsoft tools.
References: http://en.wikipedia.org/wiki/System_Center_Operations_Manager

NEW QUESTION 15

You are designing a Windows Azure application that will use a worker role. The worker role will create temporary files. You need to recommend an approach for creating the temporary files that minimizes storage transactions.
What should you recommend?

• A. Create the files on a Windows Azure Drive.


• B. Create the files in Windows Azure local storage.


• C. Create the files in Windows Azure Storage page blobs.


• D. Create the files in Windows Azure Storage block blobs.

Answer: B

Explanation:
A local storage resource is a reserved directory in the file system of the virtual machine in which an instance of a role is running. Code running in the instance can write to the local storage resource when it needs to write to or read from to a file. For example, a local storage resource can be used to cache data that may need to be accessed again while the service is running in Windows Azure.
References: https://docs.microsoft.com/en-us/azure/vs-azure-tools-configure-roles-for- cloud-service

NEW QUESTION 16
HOTSPOT
You need to design the contractor information app.
What should you recommend? To answer, select the appropriate options in the answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
/ They also plan to extend their on-premises Active Directory into Azure for mobile app authentication
/ VanArsdel mobile app must authenticate employees to the company's Active Directory.
References: http://azure.microsoft.com/en-gb/documentation/articles/mobile-services-ios-get-started-offline-data/

NEW QUESTION 17
HOTSPOT
You administer an Azure Active Directory (Azure AD) tenant. You add a custom application to the tenant. The application must be able to:
* Read data from the tenant directly.
* Write data to the tenant on behalf of a user.
In the table below, identify the permission that must be granted to the application. Make only one selection in each column.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
Application Permission: Read directory data
The application must be able to Read data from the tenant directly.
Delegated Permission: Read and write Directory Data
The application must be able to write data to the tenant on behalf of a user.
As an administrator, you can also consent to an application's delegated permissions on behalf of all the users in your tenant. This will prevent the consent dialog from appearing for every user in the tenant. You can do this from the Azure portal from your application page. From the Settings blade for your application, click Required Permissions and click on the Grant Permissions button.
References: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-integrating-applications

NEW QUESTION 18

You have business services that run on an on-premises mainframe server.
You must provide an intermediary configuration to support existing business services and Azure. The business services cannot be rewritten. The business services are not exposed externally.
You need to recommend an approach for accessing the business services. What should you recommend?

• A. Connect to the on-premises server by using a custom service in Azure.


• B. Expose the business services to the Azure Service Bus by using a custom service that uses relay binding.


• C. Expose the business services externally.


• D. Move all business service functionality to Azure.

Answer: B

Explanation:
The Service Bus relay service enables you to build hybrid applications that run in both an Azure datacenter and your own on-premises enterprise environment. The Service Bus relay facilitates this by enabling you to securely expose Windows Communication Foundation (WCF) services that reside within a corporate enterprise network to the public cloud, without having to open a firewall connection, or require intrusive changes to a corporate network infrastructure.
References: http://azure.microsoft.com/en-gb/documentation/articles/service-bus-dotnet- how-to-use-relay/

NEW QUESTION 19
DRAG DROP
You are implementing the new security requirements for the WGBCreditCruncher app.
You need to explain the security process flow to another developer. You start by navigating to the web app as it is presented to the user.
Which five actions must be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory- authentication-scenarios

NEW QUESTION 20

You are running a Linux guest in Azure Infrastructure-as-a-Service (IaaS).
You must run a daily maintenance task. The maintenance task requires native BASH commands.
You need to configure Azure Automation to perform this task.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. Create an automation account.


• B. Create an Orchestrator runbook.


• C. Create an asset credential.


• D. Run the Invoke-Workflow Azure PowerShell cmdlet.


• E. Import the SSH PowerShell Module.

Answer: ACE

Explanation:
A: An Automation Account is a container for your Azure Automation resources: it provides a way to separate your environments or further organize your workflows.
To create An Automation Account
1. Log in to the Azure Management Portal.
2. In the Management Portal, click Create an Automation Account.
3. On the Add a New Automation Account page, enter a name and pick a region for the account.
C:
* Asset credentials are either a username and password combination that can be used with Windows PowerShell commands or a certificate that is uploaded to Azure Automation.
* The Assets page in Automation displays the various resources (also called “settings”) that are globally available to be used in or associated with a runbook, plus commands to import an integration module, add a new asset, or delete an asset. Assets include variables, schedules, credentials, and connections.
References: http://azure.microsoft.com/blog/2014/07/29/getting-started-with-azure-automation-automation-assets-2/ http://blogs.technet.com/b/orchestrator/archive/2014/05/01/managing-ssh-enabled-linux-hosts-using-service-management-automation.aspx
http://azure.microsoft.com/en-gb/documentation/articles/automation-create-runbook-from- samples/

NEW QUESTION 21

You need to analyze Lucerne’s performance monitoring solution.
Which three applications should you monitor? Each correct answer presents a complete solution.

• A. The Lucerne Media-D application


• B. The data mining application


• C. The Lucerne Media-W application


• D. The Lucerne Media-M app


• E. The Lucerne Media-N app

Answer: CDE

Explanation:
Monitor the web application and the mobile apps.
C: Lucerne Media W – a web application that delivers media by using any browser
D: Lucerne Media M – a mobile app that delivers media by using Windows Phone 8.1 E: Lucerne Media N – a mobile app that delivers media by using an Android device
* Scenario:
/ Lucerne Publishing must be able to monitor the performance and usage of its customer- facing app.
/ Customers must be able to access all data by using a web application. They must also be able to access data by using a mobile app that is provided by Lucerne Publishing.

NEW QUESTION 22

You manage a virtual Windows Server 2012 web server that is hosted by an on-premises Windows Hyper-V server. You plan to use the virtual machine (VM) in Azure.
You need to migrate the VM to Azure Storage to add it to your repository. Which Azure Power Shell cmdlet should you use?

• A. Import-AzureVM


• B. New-AzureVM


• C. Add-AzureDisk


• D. Add-AzureWebRole


• E. Add-AzureVhd

Answer: E

Explanation:
The Add-AzureVhd cmdlet uploads on premise Virtual hard disk (VHD) images to a blob storage account as fixed .vhd images.
References: https://docs.microsoft.com/en-us/powershell/module/Azure/Add-AzureVhd?view=azuresmps-4.0.0

NEW QUESTION 23

You need to configure availability for the virtual machines that the company is migrating to Azure.
What should you implement?

• A. Traffic Manager


• B. Express Route


• C. Update Domains


• D. Cloud Services

Answer: B

Explanation:
ExpressRoute gives you a fast and reliable connection to Azure making it suitable for scenarios like periodic data migration, replication for business continuity, disaster recovery and other high availability strategies. It can also be a cost-effective option for transferring large amounts of data such as datasets for high performance computing applications or moving large VMs between your dev/test environment in Azure and on-premises production environment.
References: http://azure.microsoft.com/en-us/services/expressroute/

NEW QUESTION 24
DRAG DROP
Your development team has created a new solution that is deployed in a virtual network named fabDevVNet. Your testing team wants to begin testing the solution in a second Azure subscription.
You need to create a virtual network named fabTestVNet that is identical to fabDevVNet. You want to achieve this goal by using the least amount of administrative effort.
Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
Step 1: In the development subscription, export the network configuration First export network configuration from the development subscription.
Step 2:
Rename the configuration file.
Step 3:
Import the network configuration.

NEW QUESTION 25

You are building an Azure Web App that uses Azure Active Directory B2C for identity. The app will use social providers such as Facebook, Microsoft Account, and LinkedIn. The Web App has a customized home page that is based on the user’s name. The Web App does not function if the user’s name cannot be retrieved.
You need to retrieve the user’s name and email address when they authenticate with one of the supported identity providers.
What should you do?

• A. Perform a Graph API query of the identity provider.


• B. Query the underlying Active Directory provided by Azure Active Directory.


• C. Retrieve the values from the Scope of the authentication request.


• D. Inspect the Claims in the authorization token.

Answer: D

NEW QUESTION 26
DRAG DROP
You are designing the deployment of Azure Site Recovery with Hyper-V Replica. The environment does not have System Center Virtual Machine Manager (VMM) deployed.
You need to instruct an implementation team to prepare the Azure environment for deployment.
Which three actions should you recommend to be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 27

You manage an Azure subscription with virtual machines (VMs) that are running in
Standard mode. You need to reduce the storage costs associated with the VMs. What should you do?

• A. Locate and remove orphaned disks


• B. Add the VMs to an affinity group.


• C. Change VMs to the Basic tier.


• D. Delete the VHD container

Answer: C

Explanation:
Removing orphaned disks would reduce storage, and the cost of storage.

NEW QUESTION 28

You work for a company named Contoso, Ltd. The network contains an on premises Active Directory domain that has Active Directory Federation Services (AD FS). Contoso uses an internally developed claims App1. You implement directory synchronization with Azure Active Directory (Azure AD).
You need to recommend which configuration should be performed to Single-Sign-On to App1 to authenticated by Azure AD. Which two configuration should you include in the recommendation?

• A. Azure AD as claims provided trust


• B. App1 as a claims provider


• C. Azure AD as relying party trust


• D. App1 as relying party trust

Answer: BC

NEW QUESTION 29
......