Online Access Free 70-533 Exam Questions

I'm so happy with this result.
I've never thought I could scored such high marks.

It is the latest version for 70-533 exam. I passed yesterday.

No.# Ans is D https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

No.# Wrong answer
Please refer https://docs.microsoft.com/en-us/azure/storage/common/storage-create-storage-account#regenerate-storage-access-keys
Here is the process for rotating your storage access keys:

Update the connection strings in your application code to reference the secondary access key of the storage account.
Regenerate the primary access key for your storage account. On the Access Keys blade, click Regenerate Key1, and then click Yes to confirm that you want to generate a new key.
Update the connection strings in your code to reference the new primary access key.
Regenerate the secondary access key in the same manner.

No.# Wrong its Service Management

For a Virtual Machine data disk the default behavior is to not use the cache. If you have enabled the cache on a data disk, you can disable it using the Update Data Disk service management API, or the Set-AzureDataDisk powershell command.

https://azure.microsoft.com/en-us/blog/data-series-exploring-windows-azure-drives-disks-and-images/

No.# This is no , look at the type name in

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

"type": "Microsoft.Web/sites/providers/locks",

Not like the answer says Microsoft.Authorisation/locks

No.# isnt this custom extensions?

No.# surely this is CNAME

No.# Are you sure? Isnt this an NSG?

No.# It’s Invite for sure.. just did it myself:

Add a @hotmail.co.uk user to manage DNS Zone Operations:
Add guest – send email to the user (Invite)
User confirms though confirmation email
Click on user settings in “users and groups”
Tick “guest users permission are limited” to NO
Go to the Resource group
Click on “Access Control (IAM)
Click on ADD
Select a Role
Then select the Guest User
Done

No.# – A: correct because this domain shall be used by users. So it MUST be verified.
– B: incorrect, because powershell cmdlet cannot work with the %username%, I think it should use $env:username to work with environment variables.
– C: incorrect, because proxy addresses attributes affect only Exchange recipients. Has nothing to do with authentication.
– D: incorrect, because non-routable domain. You could never verify contoso.local 🙂
– E: correct, because technically the UPN is used for logon, but the user shall insert email address. This will only work if both attribute has same value. This is the recommended approach for Office 365.

No.# Corrent : https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-change-tracking

No.# The Custom Script Extension downloads and executes scripts on Azure virtual machines. This extension is useful for post deployment configuration, software installation, or any other configuration / management task.

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/classic/extensions-customscript

No.# I think it is $schema too based on this links:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authoring-templates
https://spacetelescope.github.io/understanding-json-schema/reference/schema.html

No.# Its A

A CNAME record maps a specific domain, such as contoso.com or www.contoso.com, to a canonical
domain name. In this case, the canonical domain name is the <myapp>.cloudapp.net domain name
of your Azure hosted application. Once created, the CNAME creates an alias for the
<myapp>.cloudapp.net. The CNAME entry will resolve to the IP address of your
<myapp>.cloudapp.net service automatically, so if the IP address of the cloud service changes, you
do not have to take any action.

No.# Explained here how to configure on-prem OWA app with proxy and SSO. Answer looks correct.

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-application-proxy-sso-using-kcd

No.# I think it should be A and D:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-template-deploy-cli
You can add password parameter to the file and also add all parameters in the file and password to the command.
B- No password is included in azuredeploy.parameters.json
C- Password parameter is ok, but you miss the other parameters included in azuredeploy.parameters.json

No.# Correct

Answer: No (freq. 50 min)

Explanation: https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-change-tracking?toc=%2fazure%2foperations-management-suite%2ftoc.json

No.# Correct

Diagnostics data will be collected and stored on the role instance, but will not be persisted to storage unless you specify a storage account in the ServiceConfiguration.cscfg file

https://docs.microsoft.com/en-us/azure/app-service/web-sites-enable-diagnostic-log
By default, logs are not automatically deleted (with the exception of Application Logging (Filesystem)). To automatically delete logs, set the Retention Period (Days) field.

No.# I would go with B.

A is for Classic VMs, the exam is based on ARM VMs and it does not state on the question that the VMs are classic.

C. Custom role is more work.

D. Will give permissions to Microsoft.Compute/availabilitySets/* Create and manage compute availability sets which is not what the question ask for. The “The user must not be allowed to
create and manage availability sets for the Vms.”