Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 91:

  You should fulfill the security requirements.

  How do you configure the remote administration?

  A. Use the Azure Bastion host

  B. Use Azure AD Privileged Identity Management (PIM)

  C. Just in time (JIT) VM access

  D. Use the Remote Desktop extension for Azure Cloud Services

  Correct Answer: C

• Question 92:

  You need to meet the technical requirements for Server3. Which users can perform the required tasks?

  A. Admin3 only

  B. Admin1 and Admin3 only

  C. Admin1 only

  D. Admin1, Admin2, and Admin3

  E. Admin1 and Admin2 only

  Correct Answer: C

• Question 93:

  You need to use the principle of least privilege.

  Choose a solution to meet the technical requirements for User1.

  A. Create a delegation on contoso.com.

  B. Create a delegation on OU3.

  C. Add Users1 to the Server Operators group in contoso.com.

  D. Add Users1 to the Account Operators group in contoso.com.

  Correct Answer: B

• Question 94:

  You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

  A. Admin1 only.

  B. Admin3 only.

  C. Admin1 and Admin3 only.

  D. Admin1, Admin2 and Admin3.

  Correct Answer: C

• Question 95:

  You need to meet the technical requirements for the site links. Which users can perform the required tasks?

  A. Admin1 only.

  B. Admin1 and Admin3 only.

  C. Admin1 and Admin2 only.

  D. Admin3 only.

  E. Admin1, Admin2 and Admin3.

  Correct Answer: A

  Membership in the Enterprise Admins group or the Domain Admins group in the forest root domain is required.

• Question 96:

  You need to meet the technical requirements for VM3. On which volumes can you enable Data Deduplication?

  A. C and D only

  B. D only

  C. C, D, E, and F

  D. D and E only

  E. D, E, and F only

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/data-deduplication/understand

• Question 97:

  You need to meet the technical requirements for VM2. What should you do?

  A. Implement shielded virtual machines.

  B. Enable the Guest services integration service.

  C. Implement Credential Guard.

  D. Enable enhanced session mode.

  Correct Answer: D

• Question 98:

  You need to meet the technical requirements for User1. The solution must use the principle of least privilege. What should you do?

  A. Add Users1 to the Server Operators group in contoso.com.

  B. Create a delegation on contoso.com.

  C. Add Users1 to the Account Operators group in contoso.com.

  D. Create a delegation on OU3.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-of-account-ous-and-resource-ous

• Question 99:

  DRAG DROP

  You have an on-premises server named Server1 that runs Windows Server. Server1 contains a file share named Share1.

  You have an Azure subscription.

  You perform the following actions:

  1.

  Deploy Azure File Sync.

  2.

  Install the Azure File Sync agent on Server1.

  3.

  Register Server1 with Azure File Sync.

  You need to ensure that you can add Share1 as an Azure File Sync server endpoint.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Create an Azure File Sync server endpoint

  Prerequisites

  To create a server endpoint, you must first ensure that the following criteria are met:

  The server has the Azure File Sync agent installed and has been registered.

  Ensure that a Storage Sync Service has been deployed.

  Ensure that a sync group has been deployed. (Step 3)

  Ensure that the server is connected to the internet and that Azure is accessible. Azure File Sync uses port 443 for all communication between the server and cloud service.

  Step 1: Create an Azure Storage account

  We need a storage account for the file share.

  Step 2: Create an Azure File Share

  Before you can create a server endpoint in Azure File Sync, you need to create an Azure Files share.

  In the left pane, click Storage accounts, and then click the name of the storage account that you want to use for Azure Files.

  Step 3: Create a sync group

  Note: A server endpoint consists of the following components:

  Namespace: The namespace is the name of the Azure Files share that the server endpoint is associated with. The Azure Files share is the destination for the synchronized files.

  Path: The path is the local file system path of the folder on the file server that is being synchronized.

  Sync group: A sync group is a group of server endpoints that synchronize files with the same Azure Files share.

  Reference:

  https://k21academy.com/microsoft-azure/az-500/what-is-server-endpoint-in-azure-file-sync-and-how-to-configure-it/

• Question 100:

  DRAG DROP

  You have a disaggregated cluster deployment. The deployment contains a scale-out file server (SOFS) cluster that runs Windows Server and a compute cluster that has the Hyper-V role enabled.

  You need to implement Storage Quality of Service (QoS). The solution must ensure that you can control the bandwidth usage between the SOFS cluster and the Hyper-V cluster.

  Which cmdlet should you run on each cluster? To answer, drag the appropriate cmdlets to the correct clusters. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: New-StorageQosPolicy SOFS

  Set up Storage QoS on a Compute Cluster

  Create and apply a Dedicated policy

  First, use the New-StorageQosPolicy cmdlet to create a policy on the Scale-Out File Server as shown in the following example:

  $desktopVmPolicy = New-StorageQosPolicy -Name Desktop -PolicyType Dedicated -MinimumIops 100 -MaximumIops 200

  Next, apply it to the appropriate virtual machines' hard disk drives on the Hyper-V server. Note the PolicyId from the previous step or store it in a variable in your scripts.

  On the Scale-Out File Server, using PowerShell, create a Storage QoS policy and get its Policy ID as shown in the following example:

  PS C:\> $desktopVmPolicy = New-StorageQosPolicy -Name Desktop -PolicyType Dedicated -MinimumIops 100 -MaximumIops 200

  C:\> $desktopVmPolicy.PolicyId

  Guid

  cd6e6b87-fb13-492b-9103-41c6f631f8e0

  Box 2: Set-VMHardDiskDrive

  Hyper-V

  On the Hyper-V server, using PowerShell, set the Storage QoS Policy using the Policy ID as shown in the following example:

  Get-VM -Name Build* | Get-VMHardDiskDrive | Set-VMHardDiskDrive -QoSPolicyID cd6e6b87-fb13-492b-9103-41c6f631f8e0

  Reference:

  https://learn.microsoft.com/en-us/windows-server/storage/storage-qos/storage-qos-overview