Published: September 4, 2014
Languages: English, Japanese
Audiences: IT professionals
Technology: Microsoft Azure
Credit toward certification: MCP, Microsoft Specialist
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.
If you have concerns about specific questions on this exam, please submit an exam challenge.
If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.
The Microsoft Azure environment is constantly evolving. To maximize relevance, this exam is regularly updated to reflect both deprecated and new technologies and processes. As of March 10, 2016, this exam reflects an update. To learn more about these changes and how they affect the skills measured, please download and review the Exam 70-533 changes document.
Note To ensure that they are aware of the latest updates, it is recommended that all individuals registering for this exam review this page several times before their scheduled exam.
Implement Web Apps (15–20%)
Deploy Web Apps
Define deployment slots; roll back deployments, configure and deploy packages, deploy web jobs, schedule web jobs
Configure Web Apps
Configure app settings, connection strings, handlers, and virtual directories; configure certificates, custom domains, and traffic manager; configure SSL bindings and runtime configurations; manage Web Apps by using Azure PowerShell and Xplat-CLI
Configure diagnostics, monitoring, and analytics
Retrieve diagnostics data; view streaming logs; configure endpoint monitoring, alerts, and diagnostics; monitor website resources
Configure scale and resilience
Configure auto-scale using built-in and custom schedules; configure by metric; change the size of an instance
Manage App Services plans
Create App Service plans; migrate Web Apps between App Service plans; create a Web App within an App Service plan
Implement virtual machines (15–20%)
Deploy workloads on Azure virtual machines (VMs)
Identify supported Microsoft workloads; deploy and connect to a Linux VM; create VMs
Implement images and disks
Create specialized and generalized images for Windows and Linux; copy images between storage accounts and subscriptions; upload VHDs
Perform configuration management
Automate configuration management by using PowerShell Desired State Configuration and custom script extensions; enable puppet and chef extensions
Configure VM networking
Settings include reserved IP addresses, access control list (ACL), internal name resolution, DNS at the virtual network level, load balancing endpoints, HTTP and TCP health probes, public IPs, firewall rules, direct server return, and Keep Alive
Configure VM resiliency
Scale up and scale down VM sizes; auto-scale; configure availability sets
Design and implement VM storage
Configure disk caching; plan storage capacity; configure operating system disk redundancy; configure shared storage using Azure File service; configure geo-replication; encrypt disks
Monitor VMs
Configure endpoint monitoring, alerts, and diagnostics
Implement cloud services (15–20%)
Configure cloud services and roles
Configure instance count and size, operating system version and family, upgrade and fault domains, implement Network Security Groups (NSG) and reserved IPs and network access rules; configure local storage; configure dedicated and co-located caching, local and cloud configurations, and local disks; configure multiple Web Apps; configure custom domains
Deploy and manage cloud services
Upgrade a deployment; VIP swap a deployment; package a deployment; modify configuration files; perform in-place updates; perform runtime configuration changes using the portal; scale a cloud service; create service bus namespaces and choose a tier; apply scalability targets
Monitor cloud services
Monitor service bus queues, topics, relays, and notification hubs; configure diagnostics
Implement storage (15–20%)
Implement blobs and Azure files
Read data; change data; set metadata on a container; use encryption (SSL); perform an async blob copy; configure a Content Delivery Network (CDN); implement storage for backup and disaster recovery; configure Azure Backup; define blob hierarchies; configure custom domains; configure the Import and Export Service; implement Premium storage
Manage access
Create and manage shared access signatures; use stored access policies; regenerate keys
Configure diagnostics, monitoring, and analytics
Configure retention policies and logging levels; analyze logs
Implement SQL databases
Choose the appropriate database tier and performance level; configure point in time recovery and geo-replication; import and export data and schema; design a scaling strategy
Implement recovery services
Create a backup vault; deploy a backup agent; back up and restore data
Implement an Azure Active Directory (15–20%)
Integrate an Azure AD with existing directories
Implement Azure AD Connect, Office 365 integration, and single sign-on with on-premises Windows Server 2012 R2; add custom domains; monitor Azure AD
Configure the Application Access Panel
Configure single sign-on with SaaS applications using federation and password based; add users and groups to applications; revoke access to SaaS applications; configure access; federation with Facebook and Google ID
Integrate an app with Azure AD
Web applications (WS-federation); desktop apps (OAuth); graph API
Implement virtual networks (15–20%)
Configure a virtual network
Deploy a VM into a virtual network; deploy a cloud service into a virtual network; configure static IPs; configure internal load balancing; design subnets
Modify a network configuration
Modify a subnet; import and export a network configuration
Design and implement a multi-site or hybrid network
Choose the appropriate solution between ExpressRoute, site-to-site, and point-to-site; choose the appropriate gateway; identify supported devices and software VPN solutions; identify networking prerequisites; configure regional virtual networks and multi-site virtual networks
QUESTION 1
You administer a Microsoft Azure SQL Database database in the US Central region named contosodb. Contosodb runs on a Standard tier within the SI performance level.
You have multiple business-critical applications that use contosodb.
You need to ensure that you can bring contosodb back online in the event of a natural disaster in the US Central region. You want to achieve this goal with the least amount of downtime.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Upgrade to S2 performance level.
B. Use active geo-replication.
C. Use automated Export.
D. Upgrade to Premium tier.
E. Use point in time restore.
F. Downgrade to Basic tier.
Answer: B,D
QUESTION 2
You manage two datacenters in different geographic regions and one branch office.
You plan to implement a geo-redundant backup solution.
You need to ensure that each datacenter is a cold site for the other.
You create a recovery vault. What should you do next?
A. Install the provider.
B. Upload a certificate to the vault.
C. Generate a vault key.
D. Set all virtual machines to DHCP.
E. Prepare System Center Virtual Machine Manager (SCVMM) servers.
F. Create mappings between the virtual machine (VM) networks.
Answer: C
QUESTION 3
You manage a cloud service that has a web application named WebRole1. WebRole1 writes error messages to the Windows Event Log.
Users report receiving an error page with the following message: "Event 26 has occurred. Contact your system administrator."
You need to access the WebRole1 event log.
Which three actions should you perform? Each correct answer presents part of the solution.
A. Enable verbose monitoring.
B. Update the WebRole1 web.config file.
C. Update the cloud service definition file and the service configuration file.
D. Run the Set-AzureVMDiagnosticsExtension PowerShell cmdlet.
E. Run the Enable-AzureWebsiteApplicationDiagnostic PowerShell cmdlet.
F. Create a storage account.
Answer: A,C,F
QUESTION 4
You manage a web application published to Azure Cloud Services.
Your service level agreement (SLA) requires that you are notified in the event of poor
performance from customer locations in the US, Asia, and Europe.
You need to configure the Azure Management Portal to notify you when the SLA performance targets are not met.
What should you do?
A. Create an alert rule to monitor web endpoints.
B. Create a Notification Hub alert with response time metrics.
C. Add an endpoint monitor and alert rule to the Notification Hub.
D. Configure the performance counter on the cloud service.
Answer: A
Languages: English, Japanese
Audiences: IT professionals
Technology: Microsoft Azure
Credit toward certification: MCP, Microsoft Specialist
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.
If you have concerns about specific questions on this exam, please submit an exam challenge.
If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.
The Microsoft Azure environment is constantly evolving. To maximize relevance, this exam is regularly updated to reflect both deprecated and new technologies and processes. As of March 10, 2016, this exam reflects an update. To learn more about these changes and how they affect the skills measured, please download and review the Exam 70-533 changes document.
Note To ensure that they are aware of the latest updates, it is recommended that all individuals registering for this exam review this page several times before their scheduled exam.
Implement Web Apps (15–20%)
Deploy Web Apps
Define deployment slots; roll back deployments, configure and deploy packages, deploy web jobs, schedule web jobs
Configure Web Apps
Configure app settings, connection strings, handlers, and virtual directories; configure certificates, custom domains, and traffic manager; configure SSL bindings and runtime configurations; manage Web Apps by using Azure PowerShell and Xplat-CLI
Configure diagnostics, monitoring, and analytics
Retrieve diagnostics data; view streaming logs; configure endpoint monitoring, alerts, and diagnostics; monitor website resources
Configure scale and resilience
Configure auto-scale using built-in and custom schedules; configure by metric; change the size of an instance
Manage App Services plans
Create App Service plans; migrate Web Apps between App Service plans; create a Web App within an App Service plan
Implement virtual machines (15–20%)
Deploy workloads on Azure virtual machines (VMs)
Identify supported Microsoft workloads; deploy and connect to a Linux VM; create VMs
Implement images and disks
Create specialized and generalized images for Windows and Linux; copy images between storage accounts and subscriptions; upload VHDs
Perform configuration management
Automate configuration management by using PowerShell Desired State Configuration and custom script extensions; enable puppet and chef extensions
Configure VM networking
Settings include reserved IP addresses, access control list (ACL), internal name resolution, DNS at the virtual network level, load balancing endpoints, HTTP and TCP health probes, public IPs, firewall rules, direct server return, and Keep Alive
Configure VM resiliency
Scale up and scale down VM sizes; auto-scale; configure availability sets
Design and implement VM storage
Configure disk caching; plan storage capacity; configure operating system disk redundancy; configure shared storage using Azure File service; configure geo-replication; encrypt disks
Monitor VMs
Configure endpoint monitoring, alerts, and diagnostics
Implement cloud services (15–20%)
Configure cloud services and roles
Configure instance count and size, operating system version and family, upgrade and fault domains, implement Network Security Groups (NSG) and reserved IPs and network access rules; configure local storage; configure dedicated and co-located caching, local and cloud configurations, and local disks; configure multiple Web Apps; configure custom domains
Deploy and manage cloud services
Upgrade a deployment; VIP swap a deployment; package a deployment; modify configuration files; perform in-place updates; perform runtime configuration changes using the portal; scale a cloud service; create service bus namespaces and choose a tier; apply scalability targets
Monitor cloud services
Monitor service bus queues, topics, relays, and notification hubs; configure diagnostics
Implement storage (15–20%)
Implement blobs and Azure files
Read data; change data; set metadata on a container; use encryption (SSL); perform an async blob copy; configure a Content Delivery Network (CDN); implement storage for backup and disaster recovery; configure Azure Backup; define blob hierarchies; configure custom domains; configure the Import and Export Service; implement Premium storage
Manage access
Create and manage shared access signatures; use stored access policies; regenerate keys
Configure diagnostics, monitoring, and analytics
Configure retention policies and logging levels; analyze logs
Implement SQL databases
Choose the appropriate database tier and performance level; configure point in time recovery and geo-replication; import and export data and schema; design a scaling strategy
Implement recovery services
Create a backup vault; deploy a backup agent; back up and restore data
Implement an Azure Active Directory (15–20%)
Integrate an Azure AD with existing directories
Implement Azure AD Connect, Office 365 integration, and single sign-on with on-premises Windows Server 2012 R2; add custom domains; monitor Azure AD
Configure the Application Access Panel
Configure single sign-on with SaaS applications using federation and password based; add users and groups to applications; revoke access to SaaS applications; configure access; federation with Facebook and Google ID
Integrate an app with Azure AD
Web applications (WS-federation); desktop apps (OAuth); graph API
Implement virtual networks (15–20%)
Configure a virtual network
Deploy a VM into a virtual network; deploy a cloud service into a virtual network; configure static IPs; configure internal load balancing; design subnets
Modify a network configuration
Modify a subnet; import and export a network configuration
Design and implement a multi-site or hybrid network
Choose the appropriate solution between ExpressRoute, site-to-site, and point-to-site; choose the appropriate gateway; identify supported devices and software VPN solutions; identify networking prerequisites; configure regional virtual networks and multi-site virtual networks
QUESTION 1
You administer a Microsoft Azure SQL Database database in the US Central region named contosodb. Contosodb runs on a Standard tier within the SI performance level.
You have multiple business-critical applications that use contosodb.
You need to ensure that you can bring contosodb back online in the event of a natural disaster in the US Central region. You want to achieve this goal with the least amount of downtime.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Upgrade to S2 performance level.
B. Use active geo-replication.
C. Use automated Export.
D. Upgrade to Premium tier.
E. Use point in time restore.
F. Downgrade to Basic tier.
Answer: B,D
QUESTION 2
You manage two datacenters in different geographic regions and one branch office.
You plan to implement a geo-redundant backup solution.
You need to ensure that each datacenter is a cold site for the other.
You create a recovery vault. What should you do next?
A. Install the provider.
B. Upload a certificate to the vault.
C. Generate a vault key.
D. Set all virtual machines to DHCP.
E. Prepare System Center Virtual Machine Manager (SCVMM) servers.
F. Create mappings between the virtual machine (VM) networks.
Answer: C
QUESTION 3
You manage a cloud service that has a web application named WebRole1. WebRole1 writes error messages to the Windows Event Log.
Users report receiving an error page with the following message: "Event 26 has occurred. Contact your system administrator."
You need to access the WebRole1 event log.
Which three actions should you perform? Each correct answer presents part of the solution.
A. Enable verbose monitoring.
B. Update the WebRole1 web.config file.
C. Update the cloud service definition file and the service configuration file.
D. Run the Set-AzureVMDiagnosticsExtension PowerShell cmdlet.
E. Run the Enable-AzureWebsiteApplicationDiagnostic PowerShell cmdlet.
F. Create a storage account.
Answer: A,C,F
QUESTION 4
You manage a web application published to Azure Cloud Services.
Your service level agreement (SLA) requires that you are notified in the event of poor
performance from customer locations in the US, Asia, and Europe.
You need to configure the Azure Management Portal to notify you when the SLA performance targets are not met.
What should you do?
A. Create an alert rule to monitor web endpoints.
B. Create a Notification Hub alert with response time metrics.
C. Add an endpoint monitor and alert rule to the Notification Hub.
D. Configure the performance counter on the cloud service.
Answer: A
