PrepAway - Latest Free Exam Questions & Answers

You need to assign permissions for the Virtual Machine workloads that you migrate to Azure

###BeginCaseStudy###
Case Study: 1
VanArsdel, Ltd
Overview
VanArsdel, Ltd. builds skyscrapers, subways, and bridges. VanArsdel is a leader in using
technology to do construction better.
Overview
VanArsdel employees are able to use their own mobile devices for work activities because
the company recognizes that this usage enables employee productivity. Employees also
access Software as a Service (SaaS) applications, including DocuSign, Dropbox, and Citrix.
The company continues to evaluate and adopt more SaaS applications for its business.
VanArsdel uses Azure Active Directory (AD) to authenticate its employees, as well as MultiFactor Authentication (MFA). Management enjoys the ease with which MFA can be enabled
and disabled for employees who use cloud-based services. VanArsdel’s on-premises directory
contains a single forest.
Helpdesk:
VanArsdel creates a helpdesk group to assist its employees. The company sends email
messages to all its employees about the helpdesk group and how to contact it. Configuring
employee access for SaaS applications is often a time-consuming task. It is not always
obvious to the helpdesk group which users should be given access to which SaaS
applications. The helpdesk group must respond to many phone calls and email messages to
solve this problem, which takes up valuable time. The helpdesk group is unable to meet the
needs of VanArsdel’s employees.
However, many employees do not work with the helpdesk group to solve their access
problems. Instead, these employees contact their co-workers or managers to find someone
who can help them. Also, new employees are not always told to contact the helpdesk group
for access problems. Some employees report that they cannot see all the applications in the
Access Panel that they have access to. Some employees report that they must re-enter their
passwords when they access cloud applications, even though they have already authenticated.
Bring your own device (BYOD):
VanArsdel wants to continue to support users and their mobile and personal devices, but the
company is concerned about how to protect corporate assets that are stored on these devices.
The company does not have a strategy to ensure that its data is removed from the devices
when employees leave the company.
Customer Support
VanArsdel wants a mobile app for customer profile registration and feedback. The company
would like to keep track of all its previous, current, and future customers worldwide. A
profile system using third-party authentication is required as well as feedback and support
sections for the mobile app.
Migration:
VanArsdel plans to migrate several virtual machine (VM) workloads into Azure. They also
plan to extend their on-premises Active Directory into Azure for mobile app authentication.
Business Requirements
Hybrid Solution:

• A single account and credentials for both on-premises and cloud
applications
• Certain applications that are hosted both in Azure and on-site must be
accessible to both VanArsdel employees and partners
• The service level agreement (SLA) for the solution requires an uptime
of 99.9%
• The partners all use Hotmail.com email addresses
Mobile App:
VanArsdel requires a mobile app for project managers on construction job sites. The mobile
app has the following requirements:
• The app must display partner information.
• The app must alert project managers when changes to the partner
information occur.
• The app must display project information including an image gallery to
view pictures of construction projects.
• Project managers must be able to access the information remotely and
securely.
Security:
• VanArsdel must control access to its resources to ensure sensitive
services and information are accessible only by authorized users and/or
managed devices.
• Employees must be able to securely share data, based on corporate
policies, with other VanArsdel employees and with partners who are located
on construction job sites.
• VanArsdel management does NOT want to create and manage user
accounts for partners.
Technical Requirements
Architecture:
• VanArsdel requires a non-centralized stateless architecture fonts data
and services where application, data, and computing power are at the logical
extremes of the network.
• VanArsdel requires separation of CPU storage and SQL services
Data Storage:
VanArsdel needs a solution to reduce the number of operations on the contractor information
table. Currently, data transfer rates are excessive, and queue length for read/write operations
affects performance.
• A mobile service that is used to access contractor information must
have automatically scalable, structured storage
• Images must be stored in an automatically scalable, unstructured form.
Mobile Apps:
• VanArsdel mobile app must authenticate employees to the company’s
Active Directory.
• Event-triggered alerts must be pushed to mobile apps by using a
custom Node.js script.

• The customer support app should use an identity provider that is
configured by using the Access Control Service for current profile registration
and authentication.
• The customer support team will adopt future identity providers that are
configured through Access Control Service.
Security:
• Active Directory Federated Server (AD FS) will be used to extend AD
into Azure.
• Helpdesk administrators must have access to only the groups of Azure
resources they are responsible for. Azure administration will be performed by
a separate group.
• IT administrative overhead must be minimized.
• Permissions must be assigned by using Role Based Access Control
(RBAC).
• Line of business applications must be accessed securely.

###EndCaseStudy###

You need to assign permissions for the Virtual Machine workloads that you migrate to Azure.
The solution must use the principal of least privileges.
What should you do?

PrepAway - Latest Free Exam Questions & Answers

A.
Create all VMs in the cloud service named Groupl and then connect to the Azure subscription. Run
the following Windows PowerShell command:
New-AzureRoleAssignment -Mail user1@vanarsdelltd.com -RoleDefinitionName Contributor –
ResourceGroupName group1

B.
In the Azure portal, select an individual virtual machine and add an owner.

C.
In the Azure portal, assign read permission to the user at the subscription level.

D.
Create each VM in a separate cloud service and then connect to the Azure subscription. Run the
following Windows PowerShell command:
Get-AzureVM | New-AzureRoleAssignment -Mail userl@vanarsdelltd.com -RoleDefinitionName
Contributor

Explanation:
* Scenario: Permissions must be assigned by using Role Based Access Control (RBAC).
* Role-Based access control (RBAC) in the Azure Portal and Azure Resource Management API allows
you to manage access to your subscription at a fine-grained level. With this feature, you can grant
access for Active Directory users, groups, or service principals by assigning some roles to them at a
particular scope.
Create a role assignment
Use New-AzureRoleAssignment to create a role assignment.
Example: This will create a role assignment for a group at a resource group level.
PS C:\> New-AzureRoleAssignment -ObjectID <group object ID> -RoleDefinitionName Reader –
ResourceGroupName group1

Managing Role-Based Access Control with Windows PowerShell
https://azure.microsoft.com/en-gb/documentation/articles/role-based-access-control-powershell/

91 Comments on “You need to assign permissions for the Virtual Machine workloads that you migrate to Azure”

  8. Kukarh says:

    Please kindly send the file to kukarh@hotmail.com as well if you can to assist me passing this exam. I have tried 70-534 pdf from ‘itcertmaster.com’ and even though they claimed that they got updated in June 2016, only 6-7 Q’s came out in the real exam I took yesterday. There were 40 Q’s and totally brand new exam and I have not seen majority of Q’s anywhere in dumps.

    Thoughts? anyone?




    0



    0
  15. Waleed Ahmad says:

    Dear Friends,

    I hope you are doing well and passed the Azure Exam 70-534. I failed the exam in last week.

    Kindly send me the updated dumps, websites or links for again preparing the Azure Exam 70-534.

    I am waiting for your kind response.

    Email: waleedmab@gmail.com




    0



    0
  20. jeff says:

    You plan to deploy 4 IaaS VMs in Azure. All IasS VMs will reside on the same IP subnet. You need to design an Azure virtual network that can accomodate the deployment. The design must meet the following requirements:

    – Minimize the size of the IP subnet
    – Provide the ability to restrict both internal and Internet Traffic
    – Ensure that the IP address of the virtual machines remain the same

    Which should you include in the design? To answer, select the appropriate options in the answer area.

    Answer Area:

    Virtual network subnet mask:?
    Cmdlet to configure IP addresses:?
    Method to restrict traffic:?

    Answer: Pending

    can anyone find the right answer on this? I cannot remember the choices




    0



    0
  21. jeff says:

    You plan to deploy 4 IaaS VMs in Azure. All IasS VMs will reside on the same IP subnet. You need to design an Azure virtual network that can accomodate the deployment. The design must meet the following requirements:

    – Minimize the size of the IP subnet
    – Provide the ability to restrict both internal and Internet Traffic
    – Ensure that the IP address of the virtual machines remain the same

    Which should you include in the design? To answer, select the appropriate options in the answer area.

    Answer Area:

    Virtual network subnet mask:?
    Cmdlet to configure IP addresses:?
    Method to restrict traffic:?

    Answer: Pending

    can anyone know the answer on this? I cannot remember the choices




    0



    0
  22. ck says:

    had the same question:

    Virtual network subnet mask:? should be /29 to be able to assign 4 IPs
    Cmdlet to configure IP addresses:? should be New-AzureRmNetworkInterface –PrivateIPAddress
    Method to restrict traffic:? slould be nsg

    Does anyone know the API design questions? i had new cases regarding API development as well




    0



    0
  24. jeff says:

    your company has a branch office that has 90 employees.
    the computers at the branch office are configured as shown in the following table

    OS / Version / Number of computers
    Windows 7 SP1 / 64-bit / 20 computers
    Windows 8.1 / 32-bit / 20 computers
    Windows 8.1 / 64-bit / 50 computers
    Windows Server 2012 R2 / 64-bit / 3 computers

    You need to identify a backup method for the computers.
    The solution must use Azure Backup whenever possible.
    What should identify?

    Windows 7 SP1 64-bit ? Azure Backup
    Windows 8.1 32-bit ? Wbadmin
    Windows 8.1 64-bit ? Azure Backup
    Windows Server 2012 R2 64-bit ? Azure Backup

    can anyone validate this answer?




    0



    0
  25. jeff says:

    You have an Azure subscription. You plan to deploy five VMs that will have similar configurations and will run the same workload. You need to recommend a solution to ensure the availability of the VMs during Azure maintenance periods. At any given time, only one virtual machine can be offline for maintenance. Which should you include in the recommendation?

    Number of cloud service:?
    Number of availability sets?
    Number of upgrade domains:?

    Answer:
    1
    1
    5

    can anyone validate if this answer is correct?




    0



    0
  26. jeff says:

    The company has two corporate offices. customer will access the websites from multiple locations in different geographical locations. You need to architect the global website strategy to meet the business requirements.

    Where should you deploy the websites? (South Central US / Corporate Office West and Corporate Office East / East Asia, North Central US, and West Europe)
    Where should you store the media? (South Central US / Corporate Office West and Corporate Office East / East Asia, North Central US, and West Europe)

    Answer:

    East Asia, North Central US, and West Europe
    South Central US

    Can anyone validate if this answer is correct?




    0



    0
  27. renvasbra says:

    -Questions sizing with A8/A11 machines
    -new cases asking API development
    -Mobile service
    -Set access for specific VM ports
    -Avalability group/ UPgrade group
    -Web Jobs
    -Azure Backup to workstation O.S version
    -ASR

    regards




    0



    0
  28. ck says:

    Hi JEff,

    aside from /29 what is the other choices?
    aside from New-AzureRmNetworkInterface –PrivateIPAddress what is the other choices?
    aside from nsg what is the other choices

    I can’t remember 100% but /29 is the smallest subnet possible to provide 4 IPs

    Set-AzureStaticVNetIP or New-AzureRmNetworkInterface –PrivateIPAddress

    network access control list

    @renvasbra: Do you have some information about the new API development cases?




    0



    0
  29. Stevenmato says:

    Hi guys,

    I have just take the exam today.

    Unfortuantely, I was failed (669/1000)

    Hoping that someone will have an updated dump soon and let all of us to ko this.exam together.

    Please also feel free to email me (chong.steven@hotmail.com) for further discussion




    0



    0
    1. Stevenmato says:

      Hi Joni,

      I used the dump called “Brain2go” 172 Q&A

      But I think the dump that I used is outdated. Also, the provided answers are not accurate enough. But the good thing is, there are around 60% of questions coming from this dump in my real exam.

      By the way, I am now working on a paper and listing down all the questions that I faced during the exam. And I will simple copy the questions and answers from the dump that I used on this.

      Last but not least, I would like to create a whatsapp group for our MS70-534 exam and share all the information that we got (No commercial please !). If anyone is interested to join, please feel free to email me (Chong.steven@Hotmail.com) and we can work it out together

      Thanks all !




      0



      0
  34. joni says:

    You have an Azure subscription named Subscription1. You create several Azure VMs in Subscription1.
    All of the VMs belong to the same virtual network.
    You have an on-premises Hyper-V server named Server1. Server1 hosts a virtual machine named VM1.
    You plan to replicate VM1 to Azure.
    You need to create additional objects in Subscription1 to support the planned deployment. Which three objects should you create? Each correct answer presents part of the solution.

    A. An Azure Site Recovery vault
    B. An endpoint
    C. A protection group
    D. A Hyper-V site
    E. A storage account
    F. A Traffic Manager

    Answer:
    AEF

    Do you think is this correct?




    0



    0
    1. CP says:

      Hi Joni,

      Are you sure the option C is Protection Group and not Protection goal ? Traffic manager does not seem to be correct and has no role in Azure Site Recovery. Please correct me if am wrong.

      Regards,
      CP




      0



      0
  35. joni says:

    QUESTION 169
    You plan to implement a predictive analytics solution in Azure Machine Learning Studio. You intend to train the solution by using existing data that resides on-premises.
    The on-premises data is a collection of delimited text files that total 5GB in size. You need to identify the process of adding the existing data to the solution.
    What should you identify? To answer, select the appropriate options in the answer area.

    ANSWER AREA

    Upload data into: ? (ML Studio? An Azure SQL Database?) In ML Studio, create: ? (a DataSet? An experiment?)
    In ML Studio, consume data by using the: ? (Add Rows module? Enter Data module? Reader module?)

    Answer:
    Azure SQL Database
    An Experiment
    Reader Module

    Hi can anyone verify this




    0



    0
  36. joni says:

    You need to provide a data access solution for the NorthRide app.
    Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

    Configure Service Bus Queue
    Create a service namespace under Service Bus
    Obtain the default management credentials for the namespace
    Configure the Service Bus to consume a web service
    Configure the application to use Service Bus Relay

    Answer:
    Create a service namespace under Service Bus
    Configure Service Bus Queue
    Configure the Service Bus to consume a web service
    Configure the application to use Service Bus Relay

    Can anyone verify on this?




    0



    0
  54. additional reading says:

    Hey very nice blog!! Guy .. Beautiful .. Amazing .. I will bookmark your site and take the feeds also? I am happy to seek out so many useful info right here in the submit, we need develop more strategies in this regard, thanks for sharing. . . . . .|




    0



    0
  56. dieselsilvester says:

    Look for 70-534 Exam of Architecting Microsoft Azure Solutions exam and also functions to pass it on the first try. It is difficult to pass the 70-534 exam but can be made easier with the help of 70-534 question answers. Yes Prepare your Exam 70-534 with the help of landfills, you can easily prepare your exam in 24 hours with landfills. Download your study material for the 70-534 Dumps4Download exam and get 70-534 real exam questions with valid answers.

    We give you 100% passing guarantee with money back assurance, check your exam preparation online with the helps of our test engine. For more info check this link https://www.dumps4download.com/70-534-dumps.html and buy your 70-534 exam dumps.

    Subscribe Education Certifications Channel: https://www.youtube.com/channel/UCXjxd2pYBK_4Kf8-nj3BUhw/videos?view=0&sort=dd&shelf_id=0




    0



    0

Leave a Reply