Get Full Version of the Exam
You manage an Azure Web Site for a consumer-product company. The website runs in Standard mode on a single medium instance.
You expect increased traffic to the website due to an upcoming sale during a holiday weekend. You need to ensure that the website performs optimally when user activity is at its highest.
Which option should you select?
To answer, select the appropriate option in the answer area.
Your company plans to migrate from On-Premises Exchange to Exchange Online in Office 365.
You plan to integrate your existing Active Directory Domain Services (AD DS) infrastructure with Azure AD.
You need to ensure that users can log in by using their existing AD DS accounts and passwords. You need to achieve this goal by using minimal additional systems.
Which two actions should you perform? Each answer presents part of the solution.
Configure Password Sync.
Set up a DirSync Server.
Set up an Active Directory Federation Services Server.
Set up an Active Directory Federation Services Proxy Server.
Correct Answer: AB
Directory Sync with Password Sync Scenario#39; Applies To: Azure, Office 365, Windows Intune
Password sync is an extension to the Directory Sync Scenario. With directory sync, you can manage the entire lifecycle of your cloud user and group accounts using your on- premise Active Directory management tools.
When password sync is enabled on your directory sync computer, your users will be able to sign into Microsoft cloud services, such as Office 365, Dynamics CRM, and Windows InTune, using the same password as they use when logging into your on-premises network. When your users change their passwords in your corporate network, those changes are synchronized to the cloud.
You administer a virtual machine (VM) that is deployed to Azure. You configure a rule to generate an alert when the average availability of a web service on your VM drops below 95 percent for 15 minutes.
The development team schedules a one-hour maintenance period. You have the following requirements:
No alerts are created during the maintenance period. Alerts can be restored when the maintenance is complete.
You want to achieve this goal by using the least amount of administrative effort. What should you do from the Management Portal?
Select and disable the rule from the Dashboard page of the virtual machine.
Select and delete the rule from the Configure page of the virtual machine.
Select and disable the rule from the Monitor page of the virtual machine.
Select and disable the rule on the Configure page of the virtual machine.
Correct Answer: C Explanation: Example:
You can configure virtual machine alert rules on:
Monitoring metrics from the virtual machine host operating system Web endpoint status metrics
Reference: Understanding Monitoring Alerts and Notifications in Azure
You administer a solution deployed to a virtual machine (VM) in Azure. The VM hosts a web service that is used by several applications. You are located in the US West region and have a worldwide user base.
Developers in Asia report that they experience significant delays when they execute the services. You need to verify application performance from different locations.
Which type of monitoring should you configure?
Average Response Time
Correct Answer: B
The question states: quot;You need to verify application performance from different locationsquot;. The question is not asking you to determine WHY the application is slow, it#39;s asking you to `measure#39; the performance from different locations. Endpoint Monitoring monitors your server with HTTP Get requests from locations that you choose.
You administer an Azure Web Site named contosoweb that uses a production database. You deploy changes to contosoweb from a deployment slot named contosoweb-staging.
You discover issues in contosoweb that are affecting customer data.
You need to resolve the issues in contosoweb while ensuring minimum downtime for users. You swap contosoweb to contosoweb-staging.
Which four steps should you perform next in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You manage an application running on Azure Web Sites Standard tier. The application uses a substantial amount of large image files and is used by people around the world.
Users from Europe report that the load time of the site is slow. You need to implement a solution by using Azure services.
What should you do?
Configure Azure blob storage with a custom domain.
Configure Azure CDN to cache all responses from the application web endpoint.
Configure Azure Web Site auto-scaling to increase instances at high load.
Configure Azure CDN to cache site images and content stored in Azure blob storage.
Correct Answer: D
Blobs that benefit the most from Azure CDN caching are those that are accessed frequently during their time-to-live (TTL) period. A blob stays in the cache for the TTL period and then is refreshed by the blob service after that time is elapsed. Then the process repeats.
You develop a Windows Store application that has a web service backend.
You plan to use the Azure Active Directory Authentication Library to authenticate users to Azure Active Directory (Azure AD) and access directory data on behalf of the user.
You need to ensure that users can log in to the application by using their Azure AD credentials. Which two actions should you perform? Each correct answer presents part of the solution.
Create a native client application in Azure AD.
Configure directory integration.
Create a web application in Azure AD.
Enable workspace join.
Configure an Access Control namespace.
Correct Answer: AB
A: Windows Store application
quot;Add an application my organization is developingquot; quot;In the Add Application Wizard, enter a Name for your application and click the Native Client Application typequot;
B: An application that wants to outsource authentication to Azure AD must be registered in Azure AD, which registers and uniquely identifies the app in the directory.
You manage a cloud service that hosts a customer-facing application. The application allows users to upload images and create collages. The cloud service is running in two medium instances and utilizes Azure Queue storage for image processing. The storage account is configured to be locally redundant.
The sales department plans to send a newsletter to potential clients. As a result, you expect a significant increase in global traffic.
You need to recommend a solution that meets the following requirements:
Configure the cloud service to ensure the application is responsive to the traffic increase. Minimize hosting and administration costs.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
Configure the cloud service to run in two Large instances.
Configure the cloud service to auto-scale to three instances when processor utilization is above 80%.
Configure the storage account to be geo-redundant
Deploy a new cloud service in a separate data center. Use Azure Traffic Manager to load balance traffic between the cloud services.
Configure the cloud service to auto-scale when the queue exceeds 1000 entries per machine.
Correct Answer: BE
An autoscaling solution reduces the amount of manual work involved in dynamically scaling an application. It can do this in two different ways: either preemptively by setting constraints on the number of role instances based on a timetable, or reactively by adjusting the number of role instances in response to some counter(s) or measurement(s) that you can collect from your application or from the Azure environment.
Reference: Autoscaling and Microsoft Azure
You publish a multi-tenant application named MyApp to Azure Active Directory (Azure AD).
You need to ensure that only directory administrators from the other organizations can access MyApp#39;s web API.
How should you configure MyApp#39;s manifest JSON file?
To answer, drag the appropriate PowerShell command to the correct location in the application#39;s manifest JSON file. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access to the web APIs through OAuth 2.0.
MyApp is generating numerous user consent prompts. You need to reduce the amount of user consent prompts. What should you do?
Enable Multi-resource refresh tokens.
Enable WS-federation access tokens.
Configure the Open Web Interface for .NET.
Configure SAML 2.0.
Correct Answer: A
When using the Authorization Code Grant Flow, you can configure the client to call multiple resources. Typically, this would require a call to the authorization endpoint for each target service. To avoid multiple calls and multiple user consent prompts, and reduce the number of refresh tokens the client needs to cache, Azure Active Directory (Azure AD) has implemented multi- resource refresh tokens. This feature allows you to use a single refresh token to request access tokens for multiple resources.
Reference:Azure, OAuth 2.0, Refresh Tokens for Multiple Resources