Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
P.S. 100% Guarantee 70-535 practice are available on Google Drive, GET MORE: https://drive.google.com/open?id=1QGQh8lSQv2kpYQewvx2Fa025vtCRw5Vh
Q5. You are developing the application security review document.
You need to ensure that application data security requirements are met. What should you verify?
A. Azure SQL connections use an account that does have administrative access.
B. Connection strings use encryption and not trust server certificates.
C. Azure SQL connections use Azure Key Vault certificates for TLS.
D. Connection strings are not stored in application code.
Answer: B
Explanation: References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-security-tutorial
Q6. DRAG DROPYou need to build and deploy the API.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q7. You need to design the authentication solution for the NorthRide app. Which solution should you use?
A. Azure Active Directory Basic with multi-factor authentication for the cloud and on- premises users.
B. Active Directory Domain Services with mutual authentication
C. Azure Active Directory Premium and add multi-factor authentication the for cloud users
D. Active Directory Domain Services with multi-factor authentication
Answer: C
Explanation:
* Scenario: The NorthRide app must use an additional level of authentication other than the employee's password.
* Azure Multi-Factor Authentication is the multi-factor authentication service that requires users to also verify sign-ins using a mobile app, phone call or text message. It is available to use with Azure Active Directory, to secure on-premise resources with the Azure Multi- Factor Authentication Server, and with custom applications and directories using the SDK.
Q8. DRAG DROPYou are developing an application that will send push notifications to registered devices. You perform the following actions:
*set up a notification hub with the correct push credentials
*register the device application with the platform notification system and the hub
*update the back-end to send notifications.
You need to debug push notifications by sending test notifications to registered devices in a controlled way.
For each action, which tool should you implement? To answer, drag the appropriate tool to the correct action. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Explanation:
References: https://msdn.microsoft.com/library/dn530751.aspx
Q9. A partner manages on-premises and Azure environments. The partner deploys an on- premises solution that needs to use Azure services. The partner deploys a virtual appliance.
All network traffic that is directed to a specific subnet must flow through the virtual appliance.
You need to recommend solutions to manage network traffic.
Which two options should you recommend? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Configure Azure Traffic Manager.
B. Configure a routing table with forced tunneling.
C. Implement an Azure virtual network.
D. Implement Azure ExpressRoute.
Answer: A,D
Explanation:
References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview https://docs.microsoft.com/en-us/azure/expressroute/expressroute-routing
Topic 2, Trey Research (NEW)
Background
You are an architect for Trey Research Inc., a software as a service (SaaS) company. The company is developing a new product named Tailspin for consumer and small business financial monitoring. The product will be offered as an API to banks and financial instructions. Banks and financial institutions will integrate Tailspin into their own online banking offerings.
All employees of Trey Research are members of an Active Directory Domain Services (AD DS) group named TREY.
Technical Requirement Architecture
All application and customer data will be stored in Azure SQL Database instances.
API calls that modify data will be implemented as queue messages in an Azure Storage Queue. Queue messages must expire after 90 minutes.
Security
The solution has the following security requirements:
u2711 Common security issues such as SQL injection and XSS must be prevented.
u2711 Database-related security issues must not result in customers' data being exposed.
u2711 Exposure of application source code and deployment artifacts must not result in customer data being exposed.
Every 90 days, all application code must undergo a security review to ensure that new or changed code does not introduce a security risk.
Remote code execution in the Web App must not result in the loss of security secrets.
Auditing, Monitoring, Alerting
The solution has the following requirements for auditing, monitoring, and alerting:
u2711 Changes to administrative group membership must be auditable.
u2711 Operations involving encryption keys must be auditable by users in the Azure Key Vault Auditors user role.
u2711 Resources must have monitoring and alerting configured in Azure Security Center.
Authorization, authentication
The solution has the following authentication and authorization requirements:
u2711 Azure Active Directory (Azure AD) must be used to authenticate users.
u2711 Compromised user accounts should be disabled as quickly as possible.
u2711 Only employees of Trey Research Inc. should be able to address automated security recommendations.
Service Level agreement
Failure of any one Azure region must not impact service availability. Customer data must not be lost once accepted by the application.
Performance, resource utilization
The solution must meet the following performance and resource usage requirements:
u2711 Azure costs must be minimized.
u2711 Application performance must remain level, regardless of the geographic location of users.
u2711 All application diagnostic and activity logs must be captured without loss.
u2711 Compute resources must be shared across all databases used by the solution.
Q10. You need to ensure that the logging, monitoring, and alerting requirements are met. What should you recommend?
A. Azure Storage Queue
B. Azure Cosmos DB
C. Azure Table storage
D. Azure Event Hub
Answer: D
Q11. You need to recommend a solution that meets the requirements for data storage for the NorthRide app.
What should you include in the recommendation?
A. Azure Remote App
B. Azure Service Bus
C. Azure Connect
D. Azure SQL Database
Answer: B
Explanation:
Service Bus queues are part of a broader Azure messaging infrastructure that supports queuing as well as publish/subscribe, Web service remoting, and integration patterns. Service Bus Queue support Push-style API (while Azure Queue messaging does not).
References: https://msdn.microsoft.com/en-us/library/azure/hh767287.aspx
Topic 6, Fourth CoffeeBackground
You are the new cloud architect for Fourth Coffee. I he company hosts an on-premises ASP.NET MVC web application to allow online purchases and to support their retail store operations.
The new chief information officer (CIO) has announced several initiatives for the new year, including a new mobile application, online training for retail store employees, and moving the current web application and other services to the cloud.
The marketing team hopes to see an increase in the up-time for the web application. The team would also like to allow users to use social-Nogms in addition to the current username and password system.
Fourth Coffee has chosen Microsoft Azure to support their initiatives.
Current environment
In the Azure portal, you create an Azure Mobile App for the API. You create a Service Bus queue in Azure and install the Azure Storage SDK for Nodejs.
Problem statements
The mobile team attempts to use continuous deployment with the Azure App Service and the new API project. They receive the following error message: "Unable to access 'http://fourthcoffeeapi.azurewebsites.net/': Failed to connect to https://fourthcoffeeapi.scm.azurewebsites.net/"
Business requirement Web Application
*You must increase up-time for the application.
*The application must support additional regions and languages.
*Marketing must be able to validate the web application before updates to the application
are published to the production environment.
Mobile
*The marketing team must be able to send frequent and timely updates to specific users and devices including Apple iPad. iPhone, Android. Windows, and Windows Phone devices.
*Users must be able to use their social accounts to sign in to the application. You must support Linkedln, Facebook and Google logons.
*The application must remain responsive, even during peak periods.
Training
Video streaming content must be made available and streamed to employeeu2021s browsers. Training content must only include on-demand streaming. There will be no live content.
Technical requirement Web Application
*You must update the deployment process to support cloud deployments.
*All data must be formatted as JSON during transport.
*You must implement Team Foundation Version Control (TFVC) as the version control system for the web application.
*Incoming messages to the API must be persisted to queue storage to ensure they are delivered and processed. You must restrict the size of messages between the mobile app and the API to no more than 5 gigabytes (GB).
*The web application must use geo-redundant replication.
Mobile
*You must use Node.js as a technology platform. You must support all mobile initiatives when possible.
*You must implement Git as the version control system for the mobile app.
*You must develop a REST API by using Node.js. Express, and MongoDB. You must use the Mobile Apps feature of the Azure App Service to host the API in Standard mode.
*You must implement the following Push Notification Services by using Azure Media Services:
*Apple Push Notification Service (APNS) for iPad and iPhone devices
*Google Cloud Messaging service (GCM) for Android devices
*Windows Notification Service (WNS) for Windows devices
*Microsoft Push Notification Service (MPNS) for Windows Phone devices
Security and Disaster Recovery
*You must integrate the on-premises Active Directory Domain Services with Azure Active Directory (Azure AD).
*You must implement the latest federated identity standards to provide authentication and authorization to applications.
*You must implement Multi-Factor Authentication.
*The web application and the API must be able to recover from a disaster.
Scaling
The web application and API must auto-scale according to the following rules:
*Scale up by one instance if CPU is above 70%.
*Scale down by one instance if CPU is below 50%.
Training
*Streaming must include Content Delivery Network (CDN) capabilities to support global
locations.
*Content must be encrypted and protected by using AES and PlayReady.
*Streaming must include one gigabit (GB) per second of dedicated egress capacity.
*All videos must use adaptive bitrate MP4 encoded content and include a streaming manifest file
(.ism).
*You must support the following streaming formats for video files: MPEG DASH, HI_S, Smooth Streaming, HDS. You must not need to re-encode the content.
Q12. You need to recommend an appropriate solution for the data mining requirements. Which solution should you recommend?
A. Design a schedule process that allocates tasks to multiple virtual machines, and use the Azure Portal to create new VMs as needed.
B. Use Azure Batch to schedule jobs and automate scaling of virtual machines.
C. Use Traffic Manager to allocate tasks to multiple virtual machines, and use the Azure Portal to spin up new virtual machines as needed.
D. Use Microsoft HPC Pack on-premises to schedule jobs and automate scaling of virtual machines in Azure.
Answer: B
Q13. You need to recommend the appropriate strategy for the data mining application. What should you recommend?
A. Configure multiple on-premises cluster that runs multiple Azure virtual machines to connect by using an Azure virtual private network (VPN).
B. Configure an on-premises cluster that runs multiple Azure virtual machines that is located in the central office.
C. Configure a cluster of high-performance computing virtual machines (VMs) that use the largest number of cores. Ensure that the VMs are instantiated in different Azure datacenters that are distributed across the same affinity group.
D. Configure a cluster of high-performance computing virtual machines (VMs) that use the largest number of cores. Ensure that the VMs are instantiated in the same Azure datacenter.
Answer: B
Explanation:
Scenario: Data Mining
Lucerne Publishing constantly mines its data to identify customer patterns. The company plans to replace the existing on-premises cluster with a cloud-based solution.
* The data mining solution must support the use of hundreds to thousands of processing cores.
* Minimize the number of virtual machines by using more powerful virtual machines. Each virtual machine must always have eight or more processor cores available.
* Allow the number of processor cores dedicated to an analysis to grow and shrink automatically based on the demand of the analysis.
* Virtual machines must use remote memory direct access to improve performance.
Q14. You need to design the multi-tenant model for storing application and customer data. Which pattern should you recommend?
A. Shared database-single
B. Database-per-tenant with elastic pools
C. Database-per-tenant without elastic pools
D. Shared database-shared
Answer: B
Explanation: References:
https://docs.microsoft.com/en-us/azure/sql-database/saas-tenancy-app-design-patterns
Recommend!! Get the 100% Guarantee 70-535 dumps in VCE and PDF From Certleader, Welcome to download: https://www.certleader.com/70-535-dumps.html (New Q&As Version)