###BeginCaseStudy###
Case Study: 1
VanArsdel, Ltd
Overview
VanArsdel, Ltd. builds skyscrapers, subways, and bridges. VanArsdel is a leader in using
technology to do construction better.
Overview
VanArsdel employees are able to use their own mobile devices for work activities because
the company recognizes that this usage enables employee productivity. Employees also
access Software as a Service (SaaS) applications, including DocuSign, Dropbox, and Citrix.
The company continues to evaluate and adopt more SaaS applications for its business.
VanArsdel uses Azure Active Directory (AD) to authenticate its employees, as well as MultiFactor Authentication (MFA). Management enjoys the ease with which MFA can be enabled
and disabled for employees who use cloud-based services. VanArsdel’s on-premises directory
contains a single forest.
Helpdesk:
VanArsdel creates a helpdesk group to assist its employees. The company sends email
messages to all its employees about the helpdesk group and how to contact it. Configuring
employee access for SaaS applications is often a time-consuming task. It is not always
obvious to the helpdesk group which users should be given access to which SaaS
applications. The helpdesk group must respond to many phone calls and email messages to
solve this problem, which takes up valuable time. The helpdesk group is unable to meet the
needs of VanArsdel’s employees.
However, many employees do not work with the helpdesk group to solve their access
problems. Instead, these employees contact their co-workers or managers to find someone
who can help them. Also, new employees are not always told to contact the helpdesk group
for access problems. Some employees report that they cannot see all the applications in the
Access Panel that they have access to. Some employees report that they must re-enter their
passwords when they access cloud applications, even though they have already authenticated.
Bring your own device (BYOD):
VanArsdel wants to continue to support users and their mobile and personal devices, but the
company is concerned about how to protect corporate assets that are stored on these devices.
The company does not have a strategy to ensure that its data is removed from the devices
when employees leave the company.
Customer Support
VanArsdel wants a mobile app for customer profile registration and feedback. The company
would like to keep track of all its previous, current, and future customers worldwide. A
profile system using third-party authentication is required as well as feedback and support
sections for the mobile app.
Migration:
VanArsdel plans to migrate several virtual machine (VM) workloads into Azure. They also
plan to extend their on-premises Active Directory into Azure for mobile app authentication.
Business Requirements
Hybrid Solution:
• A single account and credentials for both on-premises and cloud
applications
• Certain applications that are hosted both in Azure and on-site must be
accessible to both VanArsdel employees and partners
• The service level agreement (SLA) for the solution requires an uptime
of 99.9%
• The partners all use Hotmail.com email addresses
Mobile App:
VanArsdel requires a mobile app for project managers on construction job sites. The mobile
app has the following requirements:
• The app must display partner information.
• The app must alert project managers when changes to the partner
information occur.
• The app must display project information including an image gallery to
view pictures of construction projects.
• Project managers must be able to access the information remotely and
securely.
Security:
• VanArsdel must control access to its resources to ensure sensitive
services and information are accessible only by authorized users and/or
managed devices.
• Employees must be able to securely share data, based on corporate
policies, with other VanArsdel employees and with partners who are located
on construction job sites.
• VanArsdel management does NOT want to create and manage user
accounts for partners.
Technical Requirements
Architecture:
• VanArsdel requires a non-centralized stateless architecture fonts data
and services where application, data, and computing power are at the logical
extremes of the network.
• VanArsdel requires separation of CPU storage and SQL services
Data Storage:
VanArsdel needs a solution to reduce the number of operations on the contractor information
table. Currently, data transfer rates are excessive, and queue length for read/write operations
affects performance.
• A mobile service that is used to access contractor information must
have automatically scalable, structured storage
• Images must be stored in an automatically scalable, unstructured form.
Mobile Apps:
• VanArsdel mobile app must authenticate employees to the company’s
Active Directory.
• Event-triggered alerts must be pushed to mobile apps by using a
custom Node.js script.
• The customer support app should use an identity provider that is
configured by using the Access Control Service for current profile registration
and authentication.
• The customer support team will adopt future identity providers that are
configured through Access Control Service.
Security:
• Active Directory Federated Server (AD FS) will be used to extend AD
into Azure.
• Helpdesk administrators must have access to only the groups of Azure
resources they are responsible for. Azure administration will be performed by
a separate group.
• IT administrative overhead must be minimized.
• Permissions must be assigned by using Role Based Access Control
(RBAC).
• Line of business applications must be accessed securely.
###EndCaseStudy###
DRAG DROP
You need to recommend data storage mechanisms for the solution.
What should you recommend? To answer, drag the appropriate data storage mechanism to the
correct information type. Each data storage mechanism may be used once, more than once, or not
at all. You may need to drag the split bar between panes or scroll to view content.
Answer: 
Explanation:
* use Table storage for Contractor information
* Use Blob for Project Images
* Scenario: VanArsdel needs a solution to reduce the number of operations on the contractor
information table. Currently, data transfer rates are excessive, and queue length for read/write
operations affects performance.
/ A mobile service that is used to access contractor information must have automatically scalable,
structured storage
/ Images must be stored in an automatically scalable, unstructured form.
Note: Blob is an acronym for Binary Large object. Basically Blob is a sequence of bytes – just what an
application needs. Blob can hold audio, video, email messages, archived files, zip files or a word
processing document in a very general way.Understanding Blob,Queue,Table storage in Windows Azure
http://www.thewindowsclub.com/understanding-blobqueuetable-storage-windows-azure
Contractor Information :Table Storage
Project Images : Blob Storage
• A mobile service that is used to access contractor information must
have automatically scalable, structured storage = Table Storage
Images must be stored in an automatically scalable, unstructured form. = Blob Storage
•Use Table Storage to store structured data.
•Use Blob Storage to store unstructured data.
•Use SQL Database to store relational data.
Given Answers are correct:
Contractor Information :Table Storage
Project Images : Blob Storage
Storage Quick Details:
•Use Table Storage – No SQL, Non-Relational, but Structured data, Auto-Scalable
•Use Blob Storage – No SQL, Unstructured data, Auto-Scalable
•Use SQL Database – Relational data.
wow passed this yesterday
really hard exam (and I have done 30 odd MS exams in the last 15 years)
I think that about 50% of the answers in the available dumps out there are simply wrong – some embarrassingly so
and the question pool looks like it is very very large – some questions I had I had never seen before
I have already passed 70-534 certification exam today! Scored 989/1000 in Australia. SO MANY new added exam questions which made me headache….. Anyway, I finally passed 70-534 exam with the help of the dumps below!
QUESTION 181
Drag and Drop Question
You need to persist the API messages.
Which five steps should you perform in sequence? To answer, move the appropriate actions from the list of the actions to the answer area and arrange them.
Answer:
QUESTION 182
You need to choose an Azure service for the training initiative.
Which two services should you use? Each correct answer presents part of the solution.
A. Media Services
B. Azure AD Connect
C. App Service
D. Azure SQL Data Warehouse
E. Notification Hubs
Answer: AC
QUESTION 183
Drag and Drop Question
You need to build and deploy the API.
Which four actions should you perform in sequence? To answer, move the appropriate actions from list actions to the answer area and arrange.
Answer:
QUESTION 184
Drag and Drop Question
You need to scale the API.
In the Azure portal, which four actions should you perform in sequence? To answer, move the appropriate actions from list actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 185
You need to support web and mobile application secure logons.
Which technology should you use?
A. Azure Active Directory B2B
B. OAuth 1.0
C. LDAP
D. Azure Active Directory B2C
Answer: D
QUESTION 186
Drag and Drop Question
Marketing is ready to start their web application validations and is excited to be expanding globally.
You need to support the global web application requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 187
Drag and Drop Question
You are training a new developer.
You need to describe the process flow for sending a notification. actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Case Study 7 – Trey Research (Question 188 – Question 196)
Background
Trey Research is the global leader in analytical data collection and research. Trey Research houses its servers in a highly secure server environment. The company has continuous monitoring, surveillance, and support to prevent unauthorized access data security.
The company uses advanced secutiry measures including firewalls, security guards, and surveillance to ensure the continued service and protection of data from natural disaster, intruders, and disruptive events.
Trey Research has recently expanded its operations into the cloud using Microsoft Azure, The Company creates an Azure virtual network and a Virtual Machine (VM) for moving on-premises Subversion repositories to the cloud. Employees access Trey Research applications hosted on-premises and in the cloud by using credentials stored on-premises.
Applications
Trey Research host two mobile apps on Azure, DataViewer and DataManager. The company uses Azure-hosted web apps for internal and external users. Federated partners of the Trey Research have a single sign-on (SSO) experience with the DataViewer application.
Architecture
You have an Azure Virtual Network (VNET) named TREYRESEARCH_VNET. The VNET includes all hosted VMs. The virtual network includes a subnet named Frontend and a subnet named RepoBackend. A resource group has been created to containd the TREYRESEARCH_VNET, DataManager and DataViewer. You manage VMs using System Center VM Manager (SCVMM). Data for specific high security projects and clients are hosted on-premises. Data for the other projects and clients are hosted in the cloud.
Azure Adminitration
Data Manager
The DataMAnager app connects to a RESTful service. It allows users to retrieve, update, and delete Trey Research data.
Disaster Recovery
You have the following general requirements.
Azure deployment tasks must be automated by using Azure Resource Manager (ARM) Azure tasks must be automated by usgin Azure PowerShell.
Disaster recovery and business continuity plans must use single, integrated service that support the following features:
– All VMs must bebacked up to the Azure.
– All on-premises data must be backed up off-site and available for recovery in the event of a disaster.
– Disaster testing must be performed to ensure that recovery times meet management guidelines.
– Fail-over testing must not impact production.
Security
You identify the following security requirements.
– You host multiple subversion (SVN) repositories in the RepoBackend subnet. The SVN servers on this subnet must use inbound and outbound TCP at port 8443.
– Any configuration changes to account synchronization must be tested without disrupting the services.
– High availability is required for account synchronization services.
– Employees must never have to revert to old passwords.
– Usernames and passwords must not be passed in plain text.
– Any identity solution must support Kerberos authentication protocol. You must use Security Assertion Markup Language (SAML) claims to authenticate to on-premise data resources. You must implement an on-premises password policy.
– User must be able to reset their passwords in the cloud.
Subversion Server Sheet
QUESTION 188
You need to configure identity Syncrhonization.
What should you create?
A. a Second Azure Active Directory directory
B. backups of all Azure VMS
C. a second Azure Active Directory Connect staging server
D. a second Azure Active Directory Connect sync server
E. backups of all on-premises server farms.
Answer: D
QUESTION 189
You are creating scripts to authenticate Azure monitoring tasks.
You need to authenticate according to the requeriments.
How should you complete the relevant Azure PowerShell script? Develop the solution by selecting and arranging the required Azure PowerShell commands in the correct order.
NOTE: You will not need all of the Azure PowerSell commands.
Answer:
QUESTION 190
You need to design the business continuity framework.
Which technology should you use?
A. Hyper-V Replica
B. Azure Backup
C. Azure Site Recovery
D. Azure StoreSimple
Answer: C
QUESTION 191
Drag and Drop Question
You need to implement resource security and authentication.
For each requirement, which solution should you implement? To answer, drag the appropriate solution to the correct requirement. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 192
You need to design the role-based access control strategy for the company.
What should you do? To answer, drag the apporpiate role to the correct user tier. Each role may be udes one, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 193
Drag and Drop Question
You need to implement testing for the DataManager mobile application.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 194
Drag and Drop Question
You need to allow network traffic to the Trey Research subversion system.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 195
Hotspot Question
You need to enforce the securily requirements for all subversion servers.
How should you configure network security? To answer, select the appropriate answer from each list in the answer area.
Answer:
Explanation:
You host multiple subversion (SVN) repositories in the RepoBackend subnet.
The SVN servers on this subnet must use inbound and outbound TCP at port 8443.
QUESTION 196
You need to assign permissions for tier four employees.
Which role should you assign?
A. Security Manager
B. Network Contributor
C. Contributor
D. Owner
Answer: A
Case Study 8 – Woodgrove Bank (Question 197 – Question 207)
Overview
Woodgrove Bank has 20 regional offices and operates 1,500 branch office locations. Each regional office hosts the servers, infrastructure, and applications that support that region. Woodgrove Bank plans to move all of Their on-premises resources to Azure, including virtual machine (VM)-based, line-of-business workloads, and SQL databases. You are the owner of the Azure subscription that Woodgrove Bank is using. Your team is using Git repositories hosted on GitHub for source control.
Security
Currently, Woodgrove Bank’s Computer Security Incident Response Team (CSIRT) has a problem investigating security issues due to the lack of security intelligence integrated with their current incident response tools. This lack of integration introduces a problem during the detection (too many false positives), assessment, and diagnose stages. You decide to use Azure Security Center to help address this problem. Woodgrove Bank has several apps with regulated data such as Personally Identifiable Information (PU) that require a higher level of security. All apps are currently secured by using an on-premises Active Directory Domain Services (AD DS). The company depends on following mission-critical apps: WGBLoanMaster, WGBLeaseLeader, and WGBCreditCruncher apps. You plan to move each of these apps to Azure as part of an app migration project.
Apps
The WGBLoanMaster app has been audited for transaction loss. Many transactions have been lost in processing and monetary write-offs have cost the bank. The app runs on two VMs that include several public end points.
The WGBteaseLeader app has been audited for several data breaches. The app includes a SQL Server database and a web-based portal. The portal uses an ASP.NET Web API function to generate a monthly aggregate report from the database.
The WGBCreditCruncher app runs on a VM and is load balanced at the network level. The app includes several stateless components and must accommodate scaling of increased credit processing. The app runs on a nightly basis to process credit transactions that are batched during the day. The app includes a web-based portal where customers can check their credit information. A mobile version of the app allows users to upload check images.
Business Requirements
WGBLoanMaster App
The app audit revealed a need for zero transaction loss. The business is losing money due to the app losing and not processing loan information. In addition, transactions fail to process after running for a long time. The business has requested the aggregation processing to be scheduled for 01:00 to prevent system slowdown.
WGBLeaseLeader App
The app should be secured to stop data breaches. It the data is breached, it must not be readable. The app is continuing to see increased volume and the business does not want the issues presented in the WGBLoanMaster app. Transaction loss is unacceptable, and although the lease monetary amounts are smaller than loans, they are still an important profit center for Woodgrove Bank. The business would also like the monthly report to be automatically generated on the first of the month. Currently, a user must log in to the portal and click a button to generate the report.
WGBCreditCruncher app
The web-based portal area of the app must allow users to sign in with their Facebook credentials. The bank would like to allow this feature to enable more users to check their credit within the app.
Woodgrove Bank needs to develop a new financial risk modeling feature that they can include in the WGBCreditCruncher app. The financial risk modeling feature has not been developed due to costs associated with processing, transforming, and analyzing the large volumes of data that are collected. You need to find a way to implement parallel processing to ensure that the features runs efficiently, reliably, and quickly. The feature must scale based on computing demand to process the large volumes of data and output several financial risk models.
Technical Requirements
WGBLoanMaster App
The app uses several compute-intensive tasks that create long-running requests to the system. The app is critical to the business and must be scalable to increased loan processing demands. The VMs that run the app include a Windows Task Scheduler task that aggregates loan information from the app to send to a third party. This task runs a console app on the VM.
The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
– Allow messages to reside in the queue for up to a month
– Be able to publish and consume batches of messages
– Allow full integration with the Windows Communication Foundation (WCF) communication stack
– Provide a role-based access model to the queues, including different permissions for senders and receivers
You develop an Azure Resource Manager (ARM) template to deploy the VMs used to support the app. The template must be deployed to a new resource group and you must validate your deployment settings before creating actual resources.
WGBLeaseLeader App
The app must use Azure SQL Databases as a replacement to the current Microsoft SQL Server environment. The monthly report must be automatically generated. The app requires a messaging system to handle transaction processing. The messaging system must meet the following requirements:
– Require server-side logs of all of the transactions run against your queues
– Track progress of a message within the queue
– Process the messages within 7 days
– Provide a differing timeout value per message
WGBCreditCruncher app
The app must:
– Analyze inbound network traffic for vulnerabilities.
– Use an instance-level public IP and allow web traffic on port 443 only.
– Upgrade the portal to a Single Page Application (SPA) that uses JavaScript Azure Active Directory (Azure AD), and the OAuth 2.0 implicit authorization grant to secure the Web API back end.
– Cache authentication and host the Web API back end using the Open Web Interface for .NET (OWIN) middleware.
– Immediately compress check images received from the mobile web app.
– Schedule processing of the batched credit transactions on a nightly basis.
– Provide parallel processing and scalable computing resources to output financial risk models.
– Use simultaneous compute nodes to enable high performance computing and updating of the financial risk models.
Key Security Areas
QUESTION 197
Drag and Drop Question
You need to deploy the WGBLoanMaster app by using the Azure Command-Line Interface (CLI).
Which five commands should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 198
Drag and Drop Question
You need to configure Azure Security Center to assist the CSIRT team.
Which services should you implement? To answer, drag the appropriate Azure Security Center services to the correct key security areas. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 199
You need to support loan processing for the WGBLoanMaster app.
Which technology should you use?
A. Azure Storage Queues
B. Azure Service Fabric
C. Azure Service Bus Queues
D. Azure Event Hubs
Answer: D
QUESTION 200
You need to implement the loan aggregation process for the WGBLoanMaster app.
Which technology should you use?
A. Azure virtual machine
B. Azure Cloud Service worker role
C. Azure Batch
D. Azure WebJob
Answer: C
I have uploaded all the real questions of 70-534 exam to my Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDcXdtZzQ0MUR3ZFU
Welcome to download them freely!
70-534 exam has been retired and the new one is 70-535,here are the new added questions:
QUESTION 264
Hotspot Question
You manage a solution in Azure. You plan to add several new features to the solution.
You identify the following requirements:
– The deployment technology must support load balancing and service discovery.
– Trigger a Biztalk Server workflow to process Electronic Data Interchange (EDI) data.
You need to identify which technical implementation is suitable for each functionality.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-what-are-logic-apps
https://docs.microsoft.com/en-us/javascript/api/overview/azure/logic-apps?view=azure-node-2.2.0#management-package
70-535 dumps full version (PDF&VCE): https://drive.google.com/open?id=1Gd3yWBpMHm1aMLDdjKNR4ZcW_R5f1LSl