70-533

70-533 practice questions, page 9 of 10, with answer review and explanations.

Question 41

You plan to use Password Sync on your DirSync Server with Azure Active Directory (Azure AD) on your company network. You configure the DirSync server and complete an initial synchronization of the users. Several remote users are unable to log in to Office 365. You discover multiple event log entries for "Event ID 611 Password synchronization failed for domain." You need to resolve the password synchronization issue. Which two actions should you perform? Each correct answer presents part of the solution.

  1. Restart Azure AD Sync Service.
  2. Run the Set-FullPasswordSync Power Shell cmdlet.
  3. Force a manual synchronization on the DirSync server.
  4. Add the DirSync service account to the Schema Admins domain group.

Question 42

You administer an Access Control Service namespace named contosoACS that is used by a web application. ContosoACS currently utilizes Microsoft and Yahoo accounts. Several users in your organization have Google accounts and would like to access the web application through ContosoACS. You need to allow users to access the application by using their Google accounts. What should you do?

  1. Register the application directly with Google.
  2. Edit the existing Microsoft Account identity provider and update the realm to include Google.
  3. Add a new Google identity provider.
  4. Add a new WS-Federation identity provider and configure the WS-Federation metadata to point to the Google sign-in URL.

Question 43

You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access to the web APIs through OAuth 2.0. MyApp is generating numerous user consent prompts. You need to reduce the amount of user consent prompts. What should you do?

  1. Enable Multi-resource refresh tokens.
  2. Enable WS-federation access tokens.
  3. Configure the Open Web Interface for .NET.
  4. Configure SAML 2.0.

Question 44

Your company network includes users in multiple directories. You plan to publish a software-as-a-service application named SaasApp1 to Azure Active Directory. You need to ensure that all users can access SaasApp1. What should you do?

  1. Configure the Federation Metadata URL
  2. Register the application as a web application.
  3. Configure the application as a multi-tenant.
  4. Register the application as a native client application.

Question 45

You administer an Azure SQL database named contosodb that is running in Standard/S1 tier. The database is in a server named server1 that is a production environment. You also administer a database server named server2 that is a test environment. Both database servers are in the same subscription and the same region but are on different physical clusters. You need to copy contosodb to the test environment. Which three steps should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place: