Q1. - (Topic 6)
You are designing a web app deployment in Azure.
You need to ensure that inbound requests to the web app are routed based on the endpoint that has the lowest latency.
What should you use?
A. Azure health probes
B. Azure Fabric Controller
C. Azure Load Balancer
D. Azure Traffic Manager
Answer: D
Q2. - (Topic 6)
You are designing a solution that will interact with non-Windows applications over unreliable network connections. You have a security token for each non-Windows application.
You need to ensure that non-Windows applications retrieve messages from the solution. Where should you retrieve messages?
A. An Azure Queue
B. The Azure Service Bus Queue
C. An Azure blob storage container that has a private access policy
D. Azure Table storage
Answer: B
Explanation: Any Microsoft or non-Microsoft applications can use a Service Bus REST API to manage and access messaging entities over HTTPS.
By using REST applications based on non-Microsoft technologies (e.g. Java, Ruby, etc.) are allowed not only to send and receive messages from the Service Bus, but also to create or delete queues, topics and subscription in a given namespace.
Reference: Service Bus Explorer https://code.msdn.microsoft.com/windowsazure/service-bus-explorer-f2abca5a
Q3. DRAG DROP - (Topic 7)
You need to deploy the WGBLoanMaster app by using Azure PowerShell.
Which four Azure PowerShell cmdlets should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q4. - (Topic 6)
You are preparing an application to run on Azure virtual machines (VMs). The VMs will be backed up using Azure Backup.
The application maintains its state in three binary files stored on disk. Changes in application state require that all three files be updated on disk. If only one or two of the files are updated on disk, work is lost and the system is in an inconsistent state.
You need to ensure that when a backup occurs, the application's data is always in a consistent state.
What should you do?
A. Disable caching for the VM’s virtual hard disks.
B. Use Premium Storage for the VM’s virtual hard disks.
C. Implement the Volume Shadow Copy Service (VSS) API in the application.
D. Store the application files on an Azure File Service network share.
Answer: A
Q5. - (Topic 8)
You need to support the disaster recovery requirements of the web application and API. Which two actions should you perform? Each correct answer presents part of the solution.
A. Create an Azure Redis Cache for the web application and API.
B. Configure automated backups of the API and web application.
C. Create a new Azure SQL Data Warehouse and connect it to the web application and API.
D. Enable Application Insights for the web application and API.
E. Deploy the API and web application to multiple locations.
Answer: B,C
Q6. - (Topic 6)
You are designing an Azure development environment. Team members learn Azure development techniques by training in the development environment.
The development environment must auto scale and load balance additional virtual machine (VM) instances.
You need to recommend the most cost-effective compute-instance size that allows team members to work with Azure in the development environment.
What should you recommend?
A. Azure A1 standard VM Instance
B. Azure A2 basic VM Instance
C. Azure A3 basic VM Instance
D. Azure A9 standard VM Instance
Answer: A
Explanation: Azure A1 standard VM Instance would be cheapest with 1 CPU core, 0.75 GB RAM, and 40 GB HD. It would be good enough for training purposes.
Reference: Virtual Machines Pricing, Launch Windows Server and Linux in minutes http://azure.microsoft.com/en-us/pricing/details/virtual-machines/
Q7. DRAG DROP - (Topic 6)
You are designing the deployment for Linux virtual machines (VMs) in Azure. The VMs will be used for a web app that will run in Azure.
The web app must be able to run Bash scripts on demand. Parallel workloads must also be set to scale automatically based on use.
You need to design the environment for the Bash scripts and parallel workloads. Which processing type should you use for each component? To answer, drag the
appropriate processing types to the correct components. Each processing type may be
used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
Answer:
Q8. - (Topic 4)
You need to analyze Lucerne’s performance monitoring solution.
Which three applications should you monitor? Each correct answer presents a complete solution.
A. The Lucerne Media-D application
B. The data mining application
C. The Lucerne Media-W application
D. The Lucerne Media-M app
E. The Lucerne Media-N app
Answer: C,D,E
Explanation: Monitor the web application and the mobile apps.
C: Lucerne Media W - a web application that delivers media by using any browser
D: Lucerne Media M - a mobile app that delivers media by using Windows Phone 8.1 E: Lucerne Media N - a mobile app that delivers media by using an Android device
* Scenario:
/ Lucerne Publishing must be able to monitor the performance and usage of its customer- facing app.
/ Customers must be able to access all data by using a web application. They must also be able to access data by using a mobile app that is provided by Lucerne Publishing.
Q9. HOTSPOT - (Topic 6)
Your company plans to migrate its on-premises Microsoft SQL Server databases to Azure.
You are considering using SQL Server 2014 on Azure virtual machines and Azure SQL Database. The planned migration must support the following data security features:
*Database-level firewall rules
*Dynamic Data Masking
*Transparent data encryption (TDE)
You need to identify the data security features supported by each product.
Which features should you identify? To answer, select the appropriate options in the answer area.
Answer:
Q10. - (Topic 3)
You need to recommend a solution for publishing one of the company websites to Azure and configuring it for remote debugging.
Which two actions should you perform? Each correct answer presents part of the solution.
A. From Visual Studio, attach the debugger to the solution.
B. Set the application logging level to Verbose and enable logging.
C. Set the Web Server logging level to Information and enable logging.
D. Set the Web Server logging level to Verbose and enable logging.
E. From Visual Studio, configure the site to enable Debugger Attaching and then publish the site.
Answer: A,D
Explanation: * Scenario:
/ Mitigate the need to purchase additional tools for monitoring and debugging.
/A debugger must automatically attach to websites on a weekly basis. The scripts that handle the configuration and setup of debugging cannot work if there is a delay in attaching the debugger.
* A: After publishing your application you can use the Server Explorer in Visual Studio to access your web sites.
After signing in you will see your Web Sites under the Windows Azure node in Server Explorer. Right click on the site that you would like to debug and select Attach Debugger.
D: We need to debug the web site, not an application. We should use the more informative Verbose logging level.
Reference: Remote Debugging a Window Azure Web Site with Visual Studio 2013 http://blogs.msdn.com/b/webdev/archive/2013/11/05/remote-debugging-a-window-azure-
web-site-with-visual-studio-2013.aspx
Q11. - (Topic 6)
A company has a very large dataset that includes sensitive information. The dataset is over 30 TB in size.
You have a standard business-class ISP internet connection that is rated at 100 megabits/second.
You have 10 4-TB hard drives that are approved to work with the Azure Import/Export Service.
You need to migrate the dataset to Azure. The solution must meet the following requirements:
✑ The dataset must be transmitted securely to Azure.
✑ Network bandwidth must not increase.
✑ Hardware costs must be minimized.
What should you do?
A. Prepare the drives with the Azure Import/Export tool and then create the import job. Ship the drives to Microsoft via a supported carrier service.
B. Create an export job and then encrypt the data on the drives by using the Advanced Encryption Standard (AES). Create a destination Blob to store the export data.
C. Create an import job and then encrypt the data on the drives by using the Advanced Encryption Standard (AES). Create a destination Blob to store the import data.
D. Prepare the drives by using Sysprep.exe and then create the import job. Ship the drives to Microsoft via a supported carrier service.
Answer: A
Explanation: You can use the Microsoft Azure Import/Export service to transfer large amounts of file data to Azure Blob storage in situations where uploading over the network is prohibitively expensive or not feasible.
Reference: Use the Microsoft Azure Import/Export Service to Transfer Data to Blob Storage http://azure.microsoft.com/en-gb/documentation/articles/storage-import-export-service/
Q12. - (Topic 6)
You are designing an Azure web application. The solution will be used by multiple customers. Each customer has different business logic and user interface requirements. Not all customers use the same version of the .NET runtime.
You need to recommend a deployment strategy. What should you recommend?
A. Deploy with multiple web role instances.
B. Deploy each application in a separate tenant.
C. Deploy all applications in one tenant.
D. Deploy with multiple worker role instances.
Answer: B
Explanation: There are two types of tenant environments. The simplest type is a single- tenant application where one customer has 100% dedicated access to an application’s process space. A single Tenant Applications has a separate, logical instance of the application for each customer or client. A single tenant application is much more predictable and stable by its nature since there will never be more than one dedicated customer at any point in time in that VM. That customer has all of its users accessing that dedicated instance of the application.
Reference: Multi Tenancy and Windows Azure. Overview of Multi tenant Application and Single tenant Application Architectural considerations.
http://sanganakauthority.blogspot.in/2011/12/multi-tenancy-and-windows-azure.html
Q13. HOTSPOT - (Topic 6)
Resources must authenticate to an identity provider. You need to configure the Azure Access Control service.
What should you recommend? To answer, select the appropriate responses for each requirement in the answer area.
Answer:
Explanation:
Box 1:
* Token - A user gains access to an RP application by presenting a valid token that was issued by an authority that the RP application trusts.
* Identity Provider (IP) - An authority that authenticates user identities and issues security tokens, such as Microsoft account (Windows Live ID), Facebook, Google, Twitter, and Active Directory. When Azure Access Control (ACS) is configured to trust an IP, it accepts and validates the tokens that the IP issues. Because ACS can trust multiple IPs at the same time, when your application trusts ACS, you can your application can offer users the option to be authenticated by any of the IPs that ACS trusts on your behalf.
Q14. - (Topic 6)
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are designing the deployment of resources in Azure. You plan to use templates to customize deployment options.
You need to ensure that Azure services are deployed and updated identically. Solution: You customize the $schema element of the template.
Does the solution meet the goal?
A. Yes
B. No
Answer: A
Q15. - (Topic 6)
You are running a Linux guest in Azure Infrastructure-as-a-Service (IaaS).
You must run a daily maintenance task. The maintenance task requires native BASH commands.
You need to configure Azure Automation to perform this task.
Which three actions should you perform? Each correct answer presents part of the solution.
A. Create an automation account.
B. Create an Orchestrator runbook.
C. Create an asset credential.
D. Run the Invoke-Workflow Azure PowerShell cmdlet.
E. Import the SSH PowerShell Module.
Answer: A,C,E
Explanation: A: An Automation Account is a container for your Azure Automation resources: it provides a way to separate your environments or further organize your workflows.
To create An Automation Account
1. Log in to the Azure Management Portal.
2. In the Management Portal, click Create an Automation Account.
3. On the Add a New Automation Account page, enter a name and pick a region for the account.
Reference: Get started with Azure Automation
http://azure.microsoft.com/en-gb/documentation/articles/automation-create-runbook-from- samples/
C:
* Asset credentials are either a username and password combination that can be used with Windows PowerShell commands or a certificate that is uploaded to Azure Automation.
* The Assets page in Automation displays the various resources (also called “settings”) that are globally available to be used in or associated with a runbook, plus commands to import an integration module, add a new asset, or delete an asset. Assets include variables, schedules, credentials, and connections.
Reference: Getting Started with Azure Automation: Automation Assets http://azure.microsoft.com/blog/2014/07/29/getting-started-with-azure-automation-
automation-assets-2/
E:
Reference: Managing SSH enabled Linux hosts using Service Management Automation http://blogs.technet.com/b/orchestrator/archive/2014/05/01/managing-ssh-enabled-linux-hosts-using-service-management-automation.aspx