Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 111:

  DRAG DROP

  You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.

  Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.

  You need to make the device available to Server1.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/deploying-storage-devices-using-dda

• Question 112:

  DRAG DROP

  You have a server named Server1 that has Windows Admin Center installed. The certificate used by Windows Admin Center was obtained from a certification authority (CA).

  The certificate expires.

  You need to replace the certificate.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.starwindsoftware.com/blog/change-the-windows-admin-center-certificate

• Question 113:

  DRAG DROP

  You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

  You rename Default-First-Site-Name as Site1.

  You plan to ship DC1, DC2, and DC3 to datacenters in different locations.

  You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:

  1.

  Each domain controller must reside in its own Active Directory site.

  2.

  The replication schedule between each site must be controlled independently.

  3.

  Interruptions to replication must be minimized.

  Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 114:

  DRAG DROP

  You create a new Azure subscription.

  You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.

  You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

• Question 115:

  DRAG DROP

  Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.

  You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.

  You need to recommend a deployment plan that meets the following requirements:

  1.

  Ensures that a user named User1 can perform the RODC installation on Server1

  2.

  Ensures that you can control the AD DS replication schedule to the Server1

  3.

  Ensures that Server1 is in a new site named RemoteSite1

  4.

  Uses the principle of least privilege

  Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Box 1.

  We need to create a site and subnet for the remote site. The new site will be added to the Default IP Site Link so we don't need to create a new site link. You configure the replication schedule on the site link.

  Box 2.

  When we pre-create an RODC account, we can specify who is allowed to attach the server to the prestaged account. This means that the User1 does not need to be added to the Domain Admins group.

  Box3.

  User1 can connect the RODC to the prestaged account by running the AD DS installation wizard.

  Reference:

  https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/rodc/install-a-windows-server-2012-active-directory-read-only-domain-controller--rodc---level-200

• Question 116:

  Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections.

  You need to minimize the convergence time for changes to Active Directory.

  What should you do?

  A. For each site link, modify the options attribute.

  B. For each site link, modify the site link costs.

  C. For each site link, modify the replication schedule.

  D. Create a site link bridge that contains all the site links.

  Correct Answer: A

• Question 117:

  You have an Azure subscription that contains the following resources.

  1.

  An Azure Log Analytics workspace

  2.

  An Azure Automation account

  3.

  Azure Arc

  You have an on-premises server named Server1 that is onboarded to Azure Arc.

  You need to manage Microsoft updates on Server1 by using Azure Arc.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Add Microsoft Sentinel to the Log Analytics workspace.

  B. On Server1, install the Azure Monitor agent.

  C. From the Automation account, enable Update Management for Server1.

  D. From the Virtual machines data source of the Log Analytics workspace, connect Server1.

  Correct Answer: BC

  Reference: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arc-update-management

• Question 118:

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed. Each server has a

  Switch Embedded Teaming (SET) team.

  You need to verify that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server to support an Azure Stack HCI cluster.

  What should you use?

  A. Server Manager.

  B. The validate-DCB cmdtet.

  C. The Get-NetAdaptor cmdlet.

  D. Failover Cluster Manager.

  Correct Answer: B

  Reference: https://github.com/Microsoft/Validate-DCB

• Question 119:

  Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains the objects shown in the following table.

  

  You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies

  What should you do?

  A. Change the scope of Group2 to Universal.

  B. Clear the Configure device writeback option.

  C. Change the scope of Group1 and Group2 to Global.

  D. Select the Configure Hybrid Azure AD join option.

  Correct Answer: D

  Hybrid Azure AD join needs to be configured to enable Computer1 to be used in Conditional Access Policies. Synchronized users, universal groups and domain local groups can be used in Conditional Access Policies.

• Question 120:

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

  You have several Windows 10 devices that are Azure AD hybrid-joined.

  You need to ensure that when users sign in to the devices, they can use Windows Hello for Business.

  Which optional feature should you select in Azure AD Connect?

  A. Device writeback

  B. Group writebeack

  C. Azure AD app and attribute filtering

  D. Password writeback

  E. Directory extension attribute sync

  Correct Answer: A

  Device writeback is an optional feature in Azure AD Connect that allows the on-premises AD DS domain to receive information about the Azure AD joined devices, including the device registration state. By enabling this feature, you can ensure that the on-premises AD DS domain has information about the Azure AD joined devices, which is required for Windows Hello for Business to function correctly. Once this information is available in the on-premises AD DS domain, you can set the appropriate policies and configure the required infrastructure to support Windows Hello for Business.