###BeginCaseStudy###
Case Study: 1
VanArsdel, Ltd
Overview
VanArsdel, Ltd. builds skyscrapers, subways, and bridges. VanArsdel is a leader in using
technology to do construction better.
Overview
VanArsdel employees are able to use their own mobile devices for work activities because
the company recognizes that this usage enables employee productivity. Employees also
access Software as a Service (SaaS) applications, including DocuSign, Dropbox, and Citrix.
The company continues to evaluate and adopt more SaaS applications for its business.
VanArsdel uses Azure Active Directory (AD) to authenticate its employees, as well as MultiFactor Authentication (MFA). Management enjoys the ease with which MFA can be enabled
and disabled for employees who use cloud-based services. VanArsdel’s on-premises directory
contains a single forest.
Helpdesk:
VanArsdel creates a helpdesk group to assist its employees. The company sends email
messages to all its employees about the helpdesk group and how to contact it. Configuring
employee access for SaaS applications is often a time-consuming task. It is not always
obvious to the helpdesk group which users should be given access to which SaaS
applications. The helpdesk group must respond to many phone calls and email messages to
solve this problem, which takes up valuable time. The helpdesk group is unable to meet the
needs of VanArsdel’s employees.
However, many employees do not work with the helpdesk group to solve their access
problems. Instead, these employees contact their co-workers or managers to find someone
who can help them. Also, new employees are not always told to contact the helpdesk group
for access problems. Some employees report that they cannot see all the applications in the
Access Panel that they have access to. Some employees report that they must re-enter their
passwords when they access cloud applications, even though they have already authenticated.
Bring your own device (BYOD):
VanArsdel wants to continue to support users and their mobile and personal devices, but the
company is concerned about how to protect corporate assets that are stored on these devices.
The company does not have a strategy to ensure that its data is removed from the devices
when employees leave the company.
Customer Support
VanArsdel wants a mobile app for customer profile registration and feedback. The company
would like to keep track of all its previous, current, and future customers worldwide. A
profile system using third-party authentication is required as well as feedback and support
sections for the mobile app.
Migration:
VanArsdel plans to migrate several virtual machine (VM) workloads into Azure. They also
plan to extend their on-premises Active Directory into Azure for mobile app authentication.
Business Requirements
Hybrid Solution:• A single account and credentials for both on-premises and cloud
applications
• Certain applications that are hosted both in Azure and on-site must be
accessible to both VanArsdel employees and partners
• The service level agreement (SLA) for the solution requires an uptime
of 99.9%
• The partners all use Hotmail.com email addresses
Mobile App:
VanArsdel requires a mobile app for project managers on construction job sites. The mobile
app has the following requirements:
• The app must display partner information.
• The app must alert project managers when changes to the partner
information occur.
• The app must display project information including an image gallery to
view pictures of construction projects.
• Project managers must be able to access the information remotely and
securely.
Security:
• VanArsdel must control access to its resources to ensure sensitive
services and information are accessible only by authorized users and/or
managed devices.
• Employees must be able to securely share data, based on corporate
policies, with other VanArsdel employees and with partners who are located
on construction job sites.
• VanArsdel management does NOT want to create and manage user
accounts for partners.
Technical Requirements
Architecture:
• VanArsdel requires a non-centralized stateless architecture fonts data
and services where application, data, and computing power are at the logical
extremes of the network.
• VanArsdel requires separation of CPU storage and SQL services
Data Storage:
VanArsdel needs a solution to reduce the number of operations on the contractor information
table. Currently, data transfer rates are excessive, and queue length for read/write operations
affects performance.
• A mobile service that is used to access contractor information must
have automatically scalable, structured storage
• Images must be stored in an automatically scalable, unstructured form.
Mobile Apps:
• VanArsdel mobile app must authenticate employees to the company’s
Active Directory.
• Event-triggered alerts must be pushed to mobile apps by using a
custom Node.js script.• The customer support app should use an identity provider that is
configured by using the Access Control Service for current profile registration
and authentication.
• The customer support team will adopt future identity providers that are
configured through Access Control Service.
Security:
• Active Directory Federated Server (AD FS) will be used to extend AD
into Azure.
• Helpdesk administrators must have access to only the groups of Azure
resources they are responsible for. Azure administration will be performed by
a separate group.
• IT administrative overhead must be minimized.
• Permissions must be assigned by using Role Based Access Control
(RBAC).
• Line of business applications must be accessed securely.
###EndCaseStudy###
DRAG DROP
You need to recommend data storage mechanisms for the solution.
What should you recommend? To answer, drag the appropriate data storage mechanism to the
correct information type. Each data storage mechanism may be used once, more than once, or not
at all. You may need to drag the split bar between panes or scroll to view content.
Answer: 
Explanation:
* use Table storage for Contractor information
* Use Blob for Project Images
* Scenario: VanArsdel needs a solution to reduce the number of operations on the contractor
information table. Currently, data transfer rates are excessive, and queue length for read/write
operations affects performance.
/ A mobile service that is used to access contractor information must have automatically scalable,
structured storage
/ Images must be stored in an automatically scalable, unstructured form.
Note: Blob is an acronym for Binary Large object. Basically Blob is a sequence of bytes – just what an
application needs. Blob can hold audio, video, email messages, archived files, zip files or a word
processing document in a very general way.Understanding Blob,Queue,Table storage in Windows Azure
http://www.thewindowsclub.com/understanding-blobqueuetable-storage-windows-azure
Azure Blob storage is a service for storing large amounts of unstructured object data, such as text or binary data, that can be accessed from anywhere in the world via HTTP or HTTPS. You can use Blob storage to expose data publicly to the world, or to store application data privately.
Common uses of Blob storage include:
• Serving images or documents directly to a browser
• Storing files for distributed access
• Streaming video and audio
• Storing data for backup and restore, disaster recovery, and archiving
• Storing data for analysis by an on-premises or Azure-hosted service
What is the Table Service
The Azure Table storage service stores large amounts of structured data. The service is a NoSQL datastore which accepts authenticated calls from inside and outside the Azure cloud. Azure tables are ideal for storing structured, non-relational data. Common uses of the Table service include:
Storing TBs of structured data capable of serving web scale applications
Storing datasets that don’t require complex joins, foreign keys, or stored procedures and can be denormalized for fast access
Quickly querying data using a clustered index
Accessing data using the OData protocol and LINQ queries with WCF Data Service .NET Libraries
another MeasureUp case study, not included in any exam
2017/July new updated 70-534 exam questions:
QUESTION 99
Your company network includes two branch offices. Users at the company access internal virtual machines (VMs).
You want to ensure secure communications between the branch offices and the internal VMs and network.
You need to create a site-to-site VPN connection.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. a private IPv4 IP address and a compatible VPN device
B. a private IPv4 IP address and a RRAS running on Windows Server 2012
C. a public-facing IPv4 IP address and a compatible VPN device
D. a public-facing IPv4 IP address and a RRAS running on Windows Server 2012
Answer: CD
QUESTION 100
You administer a DirSync server configured with Azure Active Directory (Azure AD).
You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Restart the DirSync server.
B. Run the Start-OnlineCoexistenceSync PowerShell cmdlet.
C. Run the Enable-SyncShare PowerShell cmdlet.
D. Run the Azure AD Sync tool Configuration Wizard.
E. Replicate the Directory in Active Directory Sites and Services.
Answer: BD
QUESTION 101
An application sends Azure push notifications to a client application that runs on Windows Phone, iOS, and Android devices.
Users cannot use the application on some devices.
The authentication mechanisms that the application uses are the source of the problem.
You need to monitor the number of notifications that failed because of authentication errors.
Which three metrics should you monitor? Each correct answer presents part of the solution.
A. Microsoft Push Notification Service (MPNS) authentication errors
B. External notification system errors
C. Apple Push Notification Service (APNS) authentication errors
D. Channel errors
E. Windows Push Notification Services (WNS) authentication errors
F. Google Cloud Messaging (GCM) authentication errors
Answer: ACF
QUESTION 102
You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user information.
The application access key for TeamSite1 has been compromised.
You need to ensure that users can continue to use TeamSite1 and that the compromised key does not allow access to the data in your Azure AD tenant.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Remove the compromised key from the application definition for TeamSite1.
B. Delete the application definition for TeamSite1.
C. Generate a new application key for TeamSite1.
D. Generate a new application definition for TeamSite1.
E. Update the existing application key.
Answer: AC
QUESTION 103
You manage a cloud service on two instances.
The service name is Service1 and the role name is ServiceRole1.
Service1 has performance issues during heavy traffic periods.
You need to increase the existing deployment of Service1 to three instances.
Which Power Shell cmdlet should you use?
A. PS C:\>Set-AzureService -ServiceName “Service1” -Label “ServiceRole1′ -Description “Instance count=3”
B. PS C:\>Set-AzureRole -ServiceName “Service1” -Slot “Production” -RoleName “ServiceRole1” -Count 3
C. PS C:\>Add-AzureWebRole -Name ‘ServiceRole1″ -Instances 3
D. PS C:\> $instancecount = New-Object Hashtable$settings[‘INSTANCECOUNT=3] PS C:\> Set-AzureWebsite -AppSettings $instancecount ServiceRole1
Answer: B
QUESTION 105
Your company has a subscription to Azure.
You configure your contoso.com domain to use a private Certificate Authority.
You deploy a web site named MyApp by using the Shared (Preview) web hosting plan.
You need to ensure that clients are able to access the MyApp website by using https.
What should you do?
A. Back up the Site and import into a new website.
B. Use the internal Certificate Authority and ensure that clients download the certificate chain.
C. Add custom domain SSL support to your current web hosting plan.
D. Change the web hosting plan to Standard.
Answer: D
QUESTION 106
You manage a cloud service that hosts a customer-facing application.
The application allows users to upload images and create collages.
The cloud service is running in two medium instances and utilizes Azure Queue storage for image processing.
The storage account is configured to be locally redundant.
The sales department plans to send a newsletter to potential clients.
As a result, you expect a significant increase in global traffic.
You need to recommend a solution that meets the following requirements:
– Configure the cloud service to ensure the application is responsive to the traffic increase.
– Minimize hosting and administration costs.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Configure the cloud service to run in two Large instances.
B. Configure the cloud service to auto-scale to three instances when processor utilization is above 80%.
C. Configure the storage account to be geo-redundant
D. Deploy a new cloud service in a separate data center.
Use Azure Traffic Manager to load balance traffic between the cloud services.
E. Configure the cloud service to auto-scale when the queue exceeds 1000 entries per machine.
Answer: BE
QUESTION 107
You manage an application running on Azure Web Sites Standard tier. The application uses a substantial amount of large image files and is used by people around the world.
Users from Europe report that the load time of the site is slow.
You need to implement a solution by using Azure services.
Which two actions will achieve the goal? Each correct answer presents a complete solution.
A. Configure Azure blob storage with a custom domain.
B. Configure Azure CDN to cache all responses from the application web endpoint.
C. Configure Azure Web Site auto-scaling to increase instances at high load.
D. Configure Azure CDN to cache site images and content stored in Azure blob storage.
Answer: AD
70-534 New Exam Questions from:
https://drive.google.com/drive/folders/0B75b5xYLjSSNUHBaUmJfQlRsbjA?usp=sharing