###BeginCaseStudy###
Case Study: 2
Trey Research
Background
Overview
Trey Research conducts agricultural research and sells the results to the agriculture and food
industries. The company uses a combination of on-premises and third-party server clusters to
meet its storage needs. Trey Research has seasonal demands on its services, with up to 50
percent drops in data capacity and bandwidth demand during low-demand periods. They plan
to host their websites in an agile, cloud environment where the company can deploy and
remove its websites based on its business requirements rather than the requirements of the
hosting company.
A recent fire near the datacenter that Trey Research uses raises the management team’s
awareness of the vulnerability of hosting all of the company’s websites and data at any single
location. The management team is concerned about protecting its data from loss as a result of
a disaster.
Websites
Trey Research has a portfolio of 300 websites and associated background processes that are
currently hosted in a third-party datacenter. All of the websites are written in ASP.NET, and
the background processes use Windows Services. The hosting environment costs Trey
Research approximately S25 million in hosting and maintenance fees.
Infrastructure
Trey Research also has on-premises servers that run VMs to support line-of-business
applications. The company wants to migrate the line-of-business applications to the cloud,
one application at a time. The company is migrating most of its production VMs from an
aging VMWare ESXi farm to a Hyper-V cluster that runs on Windows Server 2012.
Applications
DistributionTracking
Trey Research has a web application named Distributiontracking. This application constantly
collects realtime data that tracks worldwide distribution points to customer retail sites. This
data is available to customers at all times.
The company wants to ensure that the distribution tracking data is stored at a location that is
geographically close to the customers who will be using the information. The system must
continue running in the event of VM failures without corrupting data. The system is
processor intensive and should be run in a multithreading environment.
HRApp
The company has a human resources (HR) application named HRApp that stores data in an
on-premises SQL Server database. The database must have at least two copies, but data to
support backups and business continuity must stay in Trey Research locations only. The data
must remain on-premises and cannot be stored in the cloud.
HRApp was written by a third party, and the code cannot be modified. The human resources
data is used by all business offices, and each office requires access to the entire database.
Users report that HRApp takes all night to generate the required payroll reports, and they
would like to reduce this time.
MetricsTracking
Trey Research has an application named MetricsTracking that is used to track analytics for
the DistributionTracking web application. The data MetricsTracking collects is not customerfacing. Data is stored on an on-premises SQL Server database, but this data should be moved
to the cloud. Employees at other locations access this data by using a remote desktop
connection to connect to the application, but latency issues degrade the functionality.
Trey Research wants a solution that allows remote employees to access metrics data without
using a remote desktop connection. MetricsTracking was written in-house, and the
development team is available to make modifications to the application if necessary.
However, the company wants to continue to use SQL Server for MetricsTracking.
Business Requirements
Business Continuity
You have the following requirements:
• Move all customer-facing data to the cloud.
• Web servers should be backed up to geographically separate locations,
• If one website becomes unavailable, customers should automatically be routed to
websites that are still operational.
• Data must be available regardless of the operational status of any particular website.
• The HRApp system must remain on-premises and must be backed up.
• The MetricsTracking data must be replicated so that it is locally available to all Trey
Research offices.
Auditing and Security
You have the following requirements:
• Both internal and external consumers should be able to access research results.
• Internal users should be able to access data by using their existing company
credentials without requiring multiple logins.
• Consumers should be able to access the service by using their Microsoft credentials.
• Applications written to access the data must be authenticated.
• Access and activity must be monitored and audited.
• Ensure the security and integrity of the data collected from the worldwide distribution
points for the distribution tracking application.
Storage and Processing
You have the following requirements:
• Provide real-time analysis of distribution tracking data by geographic location.
• Collect and store large datasets in real-time data for customer use.
• Locate the distribution tracking data as close to the central office as possible to
improve bandwidth.
• Co-locate the distribution tracking data as close to the customer as possible based on
the customer’s location.
• Distribution tracking data must be stored in the JSON format and indexed by
metadata that is stored in a SQL Server database.
• Data in the cloud must be stored in geographically separate locations, but kept with
the same political boundaries.
Technical Requirements
Migration
You have the following requirements:
• Deploy all websites to Azure.
• Replace on-premises and third-party physical server clusters with cloud-based
solutions.
• Optimize the speed for retrieving exiting JSON objects that contain the distribution
tracking data.
• Recommend strategies for partitioning data for load balancing.
Auditing and Security
You have the following requirements:
• Use Active Directory for internal and external authentication.
• Use OAuth for application authentication.
Business Continuity
You have the following requirements:
• Data must be backed up to separate geographic locations.
• Web servers must run concurrent versions of all websites in distinct geographic
locations.
• Use Azure to back up the on-premises MetricsTracking data.
• Use Azure virtual machines as a recovery platform for MetricsTracking and HRApp.
• Ensure that there is at least one additional on-premises recovery environment for the
HRApp.
###EndCaseStudy###
DRAG DROP
You need to ensure that customer data is secured both in transit and at rest.
Which technologies should you recommend? To answer, drag the appropriate technology to the
correct security requirement. Each technology may be used once, more than once, or not at all. You
may need to drag the split bar between panes or scroll to view content.
Answer: 
Explanation:
* Azure Rights Management service
Azure Rights Management service uses encryption, identity, and authorization policies to help
secure your files and email, and it works across multiple devices—phones, tablets, and PCs.
Information can be protected both within your organization and outside your organization because
that protection remains with the data, even when it leaves your organization’s boundaries.
* Transparent Data Encryption
Transparent Data Encryption (often abbreviated to TDE) is a technology employed by both Microsoft
and Oracle to encrypt database files. TDE offers encryption at file level. TDE solves the problem of
protecting data at rest, encrypting databases both on the hard drive and consequently on backup
media.
* TLS/SSL
Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic
protocols designed to provide communications security over a computer network. They use X.509
certificates and hence asymmetric cryptography to authenticate the counterparty with whom they
are communicating, and to negotiate a symmetric key.How Applications Support Azure Rights Management
https://technet.microsoft.com/en-us/library/jj585004.aspxhttp://en.wikipedia.org/wiki/Transparent_Data_Encryption
http://en.wikipedia.org/wiki/Transport_Layer_Security
The answers here are wrong
a – SSL/TLS
b – Import/Export
c – TDE
I think the confusion here is the statement in the question that says “transit and rest”
I don’t think it means each solution has to fit both “transit and rest” requirments so I suspect RMS is wrong and the first one is SSL/TLS – i.e. securing data connections / transit
A – TLS – Used to protect communications from users to website all over the entire world.
RMS is for file protections from what I read
b – Import/Export – for migrations, this ensures data at rest and in transit is encrypted
C – TDE – Used for encrypting databases at rest and for transit
https://docs.microsoft.com/en-us/information-protection/understand-explore/azure-rms-problems-it-solves
If anyone has better ideas, I’d like to hear why
a – service bus
Service Bus queues are part of a broader Azure messaging infrastructure that supports queuing as well as publish/subscribe, Web service remoting, and integration patterns.
b – Import/Export
You can use the Microsoft Azure Import/Export service to transfer large amounts of file data to Azure Blob storage in situations where uploading over the network is prohibitively expensive or not feasible.
b – TDE
Transparent Data Encryption (often abbreviated to TDE) is a technology employed by both Microsoft
and Oracle to encrypt database files. TDE offers encryption at file level. TDE solves the problem of
protecting data at rest, encrypting databases both on the hard drive and consequently on backup
media.
a- Azure Rights Management service. This will ensure that any data (email/files) moving outside the organization prem is still secured
b – Import/Export
c – TDS
a – SSL/TLS
b – Import/Export
c – RMS
With Azure RMS, you can do the following:
■ Encrypt and decrypt data
■ Manage and track encryption key distributions
■ Manage key management and data access policies
a – Service Bus
b – Import/Export
c – TDE
Passed 70-534 test few days ago! Scored 900/1000!!
Got 40 questions, including 24 MCQs and 3 Case Studies (total 16Qs).
Part of the Case Studies FYI:
1. Implement Media Solution
2. Implement Data, Mining Using HPC & Azure Batch
3. CDN & Batch & Networking Related & Azure Service Bus
Preparing for and 100% passing 70-534 Exam Tips (FYI):
1. The 70-534 exam is very difficult, which requires intensive study, books, videos, practice tests and other study materials.
2. The 70-534 exam covers all points described in the official study guide. There is at least one question from each chapter, so, you should learn as much as you can.
3. Azure experience is necessary.
4. Around half of the questions are currently focused on services in the Classic portal and mostly PaaS.
5. Mobile Apps, WebApps, AAD, SQL, ServiceBus and Scaling are the hottest points, you should know them deeply.
6. Experience with Powershell and understand how some creation and deployment flows work will help a lot for your passing.
7. From Nov/2016: the 70-534 exam is being updated to include NEW Objectives covering newer features and services in Microsoft Azure, like Azure Resource Manager (ARM) and others.
For the most valid 70-534 dumps, I recommend you to try it here (for I used it):
http://www.passleader.com/70-534.html
(166q VCE and PDF dumps)
All new questions are available in it, and wrong answers have been corrected.
And, you can preview part of that 166q 70-534 dumps here:
https://doc.co/2hKuTM
Good Luck!
[Update]
New 70-534 Exam Questions and Answers Updated Recently (27/Dec/2016):
NEW QUESTION 143
You have an on-premises data center and an Azure subscription. The Azure subscription has services that are hosted in the East US region. You have servers that run Windows Server 2012 R2. The servers are located on-premises and in both Azure regions. You plan to deploy Microsoft System Center 2012 R2 Data Protection Manager (DPM) to protect all of the servers. The DPM deployment has the following requirements:
– Centralize the management of all backups
– Minimize the costs associated with bandwidth usage
– Protect Microsoft SharePoint and Microsoft SQL Server workloads for up to nine years
You need to recommend which components must be configured to support the planned deployment. What should you include in the recommendation? To answer, select the appropriate options in the answer area.
ANSWER AREA
Number of DPM servers: 0-3
Number of Azure backup vaults: 0-2
Answer:
Number of DPM servers: 1
Number of Azure backup vaults: 2
……
NEW QUESTION 145
You work for a company named Contoso, Ltd. The network contains an on premises Active Directory domain that has Active Directory Federation Services (AD FS). Contoso uses an internally developed claims … App1. You implement directory synchronization with Azure Active Directory (Azure AD). You need to recommend which configuration should be performed to… Single-Sign-On to App1 to…authenticated by Azure AD. Which two configuration should you include in the recommendation?
A. Azure AD as claims provided trust
B. App1 as a claims provide
C. Azure AD as relying party trust
D. App1 as relying party trust
Answer: BC
……
NEW QUESTION 149
You need to encrypt a media file. Which type of encryption should you use?
A. Secure token service
B. PlayReady
C. Storage
D. Envelope
Answer: B
……
NEW QUESTION 163
You have an Azure subscription named Subscription1. You create several Azure VMs in Subscription1. All of the VMs belong to the same virtual network. You have an on-premises Hyper-V server named Server1. Server1 hosts a virtual machine named VM1. You plan to replicate VM1 to Azure. You need to create additional objects in Subscription1 to support the planned deployment. Which three objects should you create? Each correct answer presents part of the solution.
A. An Azure Site Recovery vault
B. An endpoint
C. A protection group
D. A Hyper-V site
E. A storage account
F. A Traffic Manager
Answer: ADE
Explanation:
docs.microsoft.com/en-us/azure/site-recovery/site-recovery-hyper-v-site-to-azure
……
NEW QUESTION 168
You develop an ASP.NET Web API that is hosted as an Azure Web API. The API uses a WebJob to process information. The WebJob has a very long start up time. You configure the WebJob to run continuously. You observe that the WebJob is not running and processing information as expected. You need to ensure the WebJob runs continuously. What should you do?
A. Update the API to self-host by using the Open Web interface for .NET (OWIN).
Migrate the API to Azure Service Fabric.
B. Enable the Always On configuration setting for the Web App.
C. Include a settings. Job JSON file at the root of the WebJob zip file and include a valid CRON expression.
D. Schedule the WebJob by using the Azure Scheduler.
Answer: B
Explanation:
samulihaverinen.com/web-development/dotnet/2016/02/24/guide-to-azure-webjobs/
NEW QUESTION 169
You are the administrator for a company that has an Azure Premium Storage account. You receive a .vhdx from the development team. You plan to create one unique Azure virtual machine (VM) from the file. You plan to run the VM as a domain controller. You need to upload the -vhdx file to Azure. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list actions to the answer area and arrange them in the correct order.
– Register the .vhdx file as an Azure OS disk
– Run the following Azure PowerShell cmdlet: Convert-VHD
– Create a new DS series Azure VM instance
– Upload the file to an Azure Storage account
– Register the .vhdx file as an Azure VM image
– Run Sysprep
Answer:
Run the following Azure PowerShell cmdlet: Convert-VHD
Upload the file to an Azure Storage account
……
NEW QUESTION 171
You are designing an Azure application that provides online backup storage for hundrers of media files. Each file is larger than 1 GB. The data storage solution has the following requirements:
– Be capable of storing an average of 2 terabytes (TB) of data for each user
– Support sharing of data between all Microsoft Azure instances
– Provide random read/write access
You need to recommend a durable date storage solution. What should you recommend?
A. Azure Page Blob
B. Azure Block Blob
C. Local storage on the VM
D. Store data in the VHD file
Answer: A
NEW QUESTION 172
Your company has an Azure subscription. The company plans to implement an Azure Web App nameb WebApp1. You need to recommend a solution to optimize the compute resources consumed by the Web App. The solution must minimize costs and provide a separation of resources. Which service plan should you recommend?
A. Basic
B. Free
C. Premium
D. Shared
E. Standard
Answer: E
……
NEW QUESTION 174
You develop a new Azure Web App that uses multiple azure Blobs and static content. The Web App uses a large number of JavaScript files and cascading style sheets. Some old theses files contain references of the other files. Users are geographically dispersed. You need to minimize the time to load individual pages. What should you do?
A. Create a services layer by using and Azure-hosted ASP.NET web API.
B. Migrate the Web App to Azure Services Fabric.
C. Enable the Always On feature of the Web App.
D. Use an Azure Content Delivery Network (CDN).
E. Implement an Azure Redis Cache.
Answer: D
……
NEW QUESTION 177
You manage a cloud service that has one Web Role instance, and several Worker Role instances. The cloud services has multiple tiers. Different groups develop and maintain each tier. You need to ensure that the cloud service remains highly available and responsive when the worker roles are performing extensive work. What should you do?
A. Create an availability set with two or more virtual machines.
B. Create an availability set for each tier of the application.
C. Create a resource group.
D. Implement auto-scaling for the Worker Roles.
Answer: D
……
NEW QUESTION 180
You need to support the disaster recovery requirements of the web application and API. Which two actions should you perform? Each correct answer presents part of the solution.
A. Configure automated backups of the API and web application.
B. Create a new Azure SQL Data Warehouse and connect it to the web application and API.
C. Deploy the API and web application to multiple locations.
D. Enable Application Insights for the web application and API.
E. Create an Azure Redis Cache for the web application and API.
Answer: AC
NEW QUESTION 181
……
P.S. These New 70-534 Exam Questions Were Just Updated From The Real 70-534 Exam, You Can Get The Newest 70-534 Dumps In PDF And VCE From — http://www.passleader.com/70-534.html (190q VCE and PDF)
Good Luck! Merry X’mas!! Happy New Year!!!
BTW, that new 190Q 70-534 Dumps Collection are Available HERE for Free:
https://doc.co/2hKuTM
Best Regards!
New 70-534 Exam Questions and Answers Updated Recently (20/Feb/2017):
NEW QUESTION 193
You need to generate the report for the WGBLeaseLeader app. Which Azure service should you use?
A. Azure Scheduler
B. Azure Data Lake Store
C. Azure Storage Queue
D. Azure Stream Analytics
Answer: A
NEW QUESTION 194
Drag and Drop Question
You need to configure Azure Security Center to assist the CSIRT team. Which services should you implement? To answer, drag the appropriate Azure Security Center services to the correct key security areas. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Image URL: examgod.com/plimages/ac5dd0ff4c58_B151/passleader-70-534-dumps-1941.png
Answer:
Image URL: examgod.com/plimages/ac5dd0ff4c58_B151/passleader-70-534-dumps-1942.png
NEW QUESTION 195
You need to support loan processing for the WGBLoanMaster app. Which technology should you use?
A. Azure Storage Queues
B. Azure Service Fabric
C. Azure Service Bus Queues
D. Azure Event Hubs
Answer: D
NEW QUESTION 196
You need to implement the loan aggregation process for the WGBLoanMaster app. Which technology should you use?
A. Azure virtual machine
B. Azure Cloud Service worker role
C. Azure Batch
D. Azure WebJob
Answer: C
NEW QUESTION 197
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are designing the deployment of resources in Azure. You plan to use templates to customize deployment options. You need to ensure that Azure services are deployed and updated identically. Solution: You customize the $schema element of the template. Does the solution meet the goal?
A. Yes
B. No
Answer: A
NEW QUESTION 198
You are designing a web app deployment in Azure. You need to ensure that inbound requests to the web app are routed based on the endpoint that has the lowest latency. What should you use?
A. Azure health probes
B. Azure Fabric Controller
C. Azure Load Balancer
D. Azure Traffic Manager
Answer: D
NEW QUESTION 199
……
NEW QUESTION 200
You are designing the deployment of virtual machines (VMs) and web services that run in Azure. You need to specify the desired state of a node and ensure that the node remains at that state. What should you use?
A. Microsoft Azure Pack
B. Service Management Automation
C. System Center 2016 Orchestrator
D. Azure Automation
Answer: A
NEW QUESTION 201
You need to recommend an authentication solution for the DistributionTracking application. What should you include in the recommendation?
A. a certificate
B. a Graph API endpoint
C. a security principal in Azure Active Directory
D. a managed service account in Azure Active Directory
Answer: C
NEW QUESTION 202
Note: This question is part of a series of questions that present the same sc Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are designing a storage solution to support on-premises resources and Azure-hosted resources. You need to provide on-premises storage that has built-in replication to Azure. Solution: You include Azure File Storage in the design. Does this solution meet the goal?
A. Yes
B. No
Answer: B
NEW QUESTION 203
……
P.S. These New 70-534 Exam Questions Were Just Updated From The Real 70-534 Exam, You Can Get The Newest 70-534 Dumps In PDF And VCE From — http://www.passleader.com/70-534.html (231q VCE and PDF)
Best Regards!
Besides, that new 231Q 70-534 Dumps Collection are Available here for Free:
https://drive.google.com/open?id=0B-ob6L_QjGLpUUNnSVA5SFdpZ2c
Best Regards!
Passed the 70-534 test by training the VALID PassLeader 70-534 dumps!
Had 65 questions! First Woodgrove Bank Case Study with 7-8 questions, the last Case Study was Fourth Coffee with 4 questions. (Around 5 Case Studies in all!)
There were about 3 questions about: which category of VM you recommend.
What’s more, had some new questions on Azure B2B & B2C and Security Center.
I learned all questions from PassLeader 70-534 dumps, which is the most valid for 100% passing now!
Here you can get part of PassLeader 70-534 dumps for free:
https://drive.google.com/open?id=0B-ob6L_QjGLpUUNnSVA5SFdpZ2c
Good Luck, All!!!