最新的Microsoft Architecting Microsoft Azure Solutions (070-534日本語版) - 070-534日本語免費考試真題

Explanation:

Application Permission: Read directory data
The application must be able to Read data from the tenant directly.
Delegated Permission: Read and write Directory Data
The application must be able to write data to the tenant on behalf of a user.
As an administrator, you can also consent to an application's delegated permissions on behalf of all the users in your tenant. This will prevent the consent dialog from appearing for every user in the tenant. You can do this from the Azure portal from your application page.
From the Settings blade for your application, click Required Permissions and click on the
Grant Permissions button.
References: https://docs.microsoft.com/en-us/azure/active-directory/develop/active- directory-integrating-applications

說明：（僅 Fast2test 成員可見）

==========================================
Topic 9, Trey Research Case B
Background
General
Trey Research is the global leader in analytical data collection and research. Trey
Research houses its servers in a highly secure server environment. The company has continuous monitoring, surveillance, and support to prevent unauthorized access and data security.
The company uses advanced security measures including firewalls, security guards, and surveillance to ensure the continued service and protection of data from natural disaster, intruders, and disruptive events.
Trey Research has recently expanded its operations into the cloud by using Microsoft
Azure. The company creates an Azure virtual network and a Virtual Machine (VM) for moving on-premises Subversion repositories to the cloud. Employees access Trey
Research applications hosted on-premises and in the cloud by using credentials stored on- premises.
Applications
Trey Research hosts two mobile apps on Azure, DataViewer and DataManager. The company uses Azure-hosted web apps for internal and external users. Federated partners of Trey Research have a single sign-on (SSO) experience with the DataViewer application.
Architecture
You have an Azure Virtual Network (VNET) named TREYRESEARCH_VNET. The VNET includes all hosted VMs. The virtual network includes a subnet named Frontend and a subnet named RepoBackend. A resource group has been created to contain the
TREYRESEARCH_VNET, DataManager and DataViewer. You manage VMs by using
System Center VM Manager (SCVMM). Data for specific high security projects and clients are hosted on-premises. Data for other projects and clients are hosted in the cloud.
Azure Administration

DataManager
The DataManager app connects to a RESTful service. It allows users to retrieve, update, and delete Trey Research data.
Requirements
General
You have the following general requirements:
* Azure deployment tasks must be automated by using Azure Resource Manager
(ARM).
* Azure tasks must be automated by using Azure PowerShell.
Disaster recovery
Disaster recovery and business continuity plans must use a single, integrated service that supports the following features:
* All VMs must be backed up to Azure.
* All on-premises data must be backed up off-site and available for recovery in the event of a disaster.
* Disaster testing must be performed to ensure that recovery times meet management guidelines.
* Fail-over testing must not impact production.
Security
You identify the following security requirements:
* You host multiple subversion (SVN) repositories in the RepoBackend subnet. The
SVN servers on this subnet must use inbound and outbound TCP at port 8443.
* Any configuration changes to account synchronization must be tested without disrupting the services.
* High availability is required for account synchronization services.
* Employees must never have to revert to old passwords.
* Usernames and passwords must not be passed in plain text.
* Any identity solution must support Kerberos authentication protocol. You must use
Security Assertion Markup Language (SAML) claims to authenticate to on- premises data resources. You must implement an on-premises password policy.
* Users must be able to reset their passwords in the cloud.
* Users must be able to access all of the applications and resources that they need in order to do business by signing in only using a single user account.
Subversion server
Subversion Server Sheet
TREYRESEARCH_SVN_VM
Azure Virtual Machine - Window Server Technical Preview 2016
Installed SVN Server
Outbound TCP 8443
Resource group - TREYRESEARCHVM_RG
Location - West US
Computer name - TREYRESEARCHSVNVM
User name - admin
Size - Standard A2
Disk type - Standard
Storage account - (new) TREYRESEARCHstore
Virtual network - TREY RESEARCH_VNET
Subnet - RepoBackend (10.0.2.0/24)
Public IP address - (new) TREYRESEARCHSVNVM
Network security group - (new) TREYRESEARCHSVNVM
Availability set - None
Diagnostics - Enabled
Diagnostics storage account - (new) TREYRESEARCHstore

Explanation:

Example code:
autoscaler =
EnterpriseLibraryContainer.Current.GetInstance<Autoscaler>();
autoscaler.Start();
References: https://msdn.microsoft.com/en-us/library/hh680914(v=pandp.50).aspx

說明：（僅 Fast2test 成員可見）

說明：（僅 Fast2test 成員可見）

說明：（僅 Fast2test 成員可見）

說明：（僅 Fast2test 成員可見）

說明：（僅 Fast2test 成員可見）