How can you connect on-premise server and an application via IPSec with Azure？（）  

单项选择题A Windows Azure application is activated for Windows Azure Connect A corporate policy blocks Internet traffic for local servers.  You need to recommend the firewall rule that will allow Windows Azure Connect traffic for local servers.  What should you recommend？（）

A. Allow TCP port 443 inbound.
B. Allow TCP port 3389 outbound.
C. Allow TCP port 3389 inbound.
D. Allow TCP port 443 outbound.

多项选择题You are designing a Windows Azure application that will communicate with existing on-premise applications and services.  The application will be activated for Windows Azure Connect.  You need to recommend a solution for completing the Windows Azure Connect configuration.  Which two actions should you recommend？（）

A. Place local endpoints in groups and then configure a connection between the groups and the application.
B. Place hosted endpoints in groups and then configure a connection between the groups and the application.
C. Install endpoint software on local computers or virtual machines.
D. Install endpoint software on hosted virtual machines.

单项选择题You are designing a Windows Azure application that will include two web roles.  The web roles will communicate with on-premise development computers and on-premise databases.  Web Role 1 must connect to development computers and databases.  Web Role 2 must connect to only databases.  What should you recommend？（）

A. Create one endpoint group that contains the development computers and one endpoint group that contains the databases. Connect Web Role 1 to both endpoint groups. Connect Web Role 2 to only the database endpoint group.
B. Create one endpoint group that contains the development computers and databases. Connect Web Role 1 and Web Role 2 to the endpoint group.
C. Create one endpoint group that contains the development computers and one endpoint group that contains the databases. Connect the endpoint groups. Connect Web Role 1 and Web Role 2 to the development computer group.
D. Create one endpoint group that contains the development computers and databases， and connectit to Web Role 1.  Create one endpoint group that contains only the databases， and connect it to Web Role 2.

单项选择题You are designing a plan to migrate an existing application to Windows Azure.  The application must use the existing Active Directory Domain Services （AD DS） domain. You need to recommend an approach for joining Windows Azure virtual machines to the domain.  What should you recommend？（）

A. Install the Active Directory Certificate Services （AD CS） root certificate into the Enterprise Trust certificate store on each virtual machine.
B. Configure Windows Azure Connect.
C. Configure Windows Azure AppFabric Access Control.
D. Install Active Directory Federation Services （AD FS） in the existing domain.

单项选择题You develop an ASP.NET web application that uses a Windows Azure web role. The application includes a startup script that installs a third-party component. You are developing a test plan for the startup script.  What should you recommend？（）

A. Enable Remote Desktop Protocol （RDP） and deploy the application without the startup script.  Connect to the web role instance by using RDP， and then manually test the startup script.
B. Deploy the application in the Windows Azure Compute Emulator.
C. Deploy the application with a custom error page.
D. Deploy the application and then use IntelliTrace.