Free Microsoft 70-533 Practice Test & Real Exam Questions

  • Exam Code/Number: 70-533
  • Exam Name/Title: Implementing Microsoft Azure Infrastructure Solutions
  • Certification Provider: Microsoft
  • Corresponding Certification: Microsoft Azure Infrastructure Solutions
  • Exam Questions: 412
  • Updated On: Jun 03, 2026
An application uses Windows Azure Table storage.
The application uses five tables.
One table used by the application is approaching the limit for storage requests per second. You need to recommend an approach for avoiding data access throttling.
What should you recommend?
Correct Answer: D Vote an answer
Your company manages several Azure Web Apps that are running in an existing App Service plan named plan1.
You need to move one of the Web Apps named contoso, to a new App Service plan named plan2.
How should you complete the Azure PowerShell command?? To answer, drag the appropriate Azure PowerShell segment to the correct location. Each PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:

Explanation
HOTSPOT
You manage two websites for your company. The sites are hosted on an internal server that is beginning to experience performances issues due to high traffic.
You plan to migrate the sites to Azure Web Sites.
The sites have the following configurations:

In the table below, identity the web hosting plan with the lowest cost for each site. Make only one selection in each column.
Correct Answer:

Explanation

Site 2 contains 9 GB of data so Basic mode is enough as it provided 10 GB of data (FREE and Shared only provide 1 GB of data).
Site 1 contains 11 GB of data so Standard mode is adequate as it provided 50 GB of data.
References:
http://azure.microsoft.com/en-us/documentation/articles/azure-subscription-service-limits/
A company uses Azure to host virtual machines (VMs) and web apps.
You plan to delegate access using Role-Based Access Control (RBAC). Users must not have more permissions than necessary.
* Admin1 must not be able to manage resource access.
* Admin1 must be able to manage all other Azure components.
* Admin2 must be able to stop and restart Azure jobs.
You need to assign the appropriate role to the new admins.
Which role should you assign to each admin account? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation

References:
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-control-what-is#built-in-roles
https://docs.microsoft.com/en-us/azure/active-directory/role-based-access-built-in-roles
You manage an on-premises monitoring platform. You plan to deploy virtual machines (VMs) in Azure.
You must use existing on-premises monitoring solutions for Azure VMs. You must maximize security for any communication between Azure and the on-premises environment.
You need to ensure that Azure alerts are sent to the on-premises solution.
What should you do?
Correct Answer: C Vote an answer
You plan to use Azure Resource Manager (ARM) templates to deploy resources in Azure. You define the following variables in the template.

Use drop-down meus to select the answer choice that answers each question based on the information presents in the template.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation

Box 1: One
Box 2: Two
We see the two lines Nic1NamePrefix and Nic2NamePrefix.
Box 3: Sent to the VM through a load balancer.
The variable lbID references a LoadBalancer.
References:
http://www.ravichaganti.com/blog/building-azure-resource-manager-templates-using-copy-object/
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview#template-deployment
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A company plans to use a third-party cloud app. Users must be able to use single sign-on (SSO) with Azure Active Directory (Azure AD) and the app. SSO has not been deployed. The solution must support SAML 2.0 and OpenID Connect protocols. You need to enable SSO with the app.
Solution: You configure an Active Directory Federation Services (AD FS) cluster.
Does the solution meet the goal?
Correct Answer: A Vote an answer
DRAG DROP
You administer an Azure Virtual Machine (VM) named CON-CL1. CON-CL1 is in a cloud service named ContosoService1.
You discover unauthorized traffic to CON-CL1. You need to:
* Create a rule to limit access to CON-CL1.
* Ensure that the new rule has the highest precedence.
Which Azure Power Shell cmdlets and values should you use? To answer, drag the appropriate cmdlet or value to the correct location in the Power Shell command. Each cmdlet or value may be used once, more than once, or not at all. You may need to drag the split bat between panes or scroll to view content.
Correct Answer:

Explanation

* Example 1
This example uses two commands:
The first command creates a new ACL object and stores it in a variable named $acl1.
The second command updates the ACL object with a rule that permits incoming network traffic only from remote subnet 10.0.0.0/8.
Windows PowerShell
PS C:\> $acl1 = New-AzureAclConfigC:\PS> Set-AzureAclConfig -AddRule -ACL $acl1 -Order 100
-Action permit -RemoteSubnet "10.0.0.0/8" -
*Parameter: -Order<Int32>
Specifies the relative order in which this rule should be processed compared to the other rules applied to the ACL object. The lowest order takes precedence. 0 is allowed.
References:
http://msdn.microsoft.com/en-us/library/dn495192.aspx
http://blogs.technet.com/b/heyscriptingguy/archive/2013/08/31/weekend-scripter-creating-acls-for-windows-azur
You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet, which is used for testing a line of business (LOB) application. The application is deployed to a VM named TestWebServiceVM.
You need to ensure that TestWebServiceVM always starts by using the same IP address. You need to achieve this goal by using the least amount of administrative effort.
What should you do?
Correct Answer: D Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You manage an Azure Service Bus for your company. You plan to enable access to the Azure Service Bus for an application named ContosoLOB.
You need to create a new shared access policy for subscriptions and queues that has the following requirements:
* Receives messages from a queue
* Deadletters a message
* Defers a message for later retrieval
* Enumerates subscriptions
* Gets subscription description
In the table below, identify the permission you need to assign to ensure that ContosoLOB is able to accomplish the above requirements. Make only one selection in each column.
Correct Answer:

Explanation

For Service Bus, the three permission claims are 'Send' for all send operations, 'Listen' to open up listeners or receive messages, and 'Manage' to observe or manage the state of the Service Bus tenant.
To receive a message from a queue we need to have Listen access level.
To numerate subscriptions, we need to have the manage access level.
References:
http://msdn.microsoft.com/en-us/library/azure/hh403962.aspx