Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 171:

  You have an Azure subscription that contains the storage accounts shown in the following table.

  

  In the West US Azure region, you create a storage sync service named SyncA.

  You plan to create a sync group named GroupA.

  What is the maximum number of cloud endpoints you can use with GroupA?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: B

• Question 172:

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the servers shown in the following table.

  

  On Server1, you create a DNS zone named Zone1.com as shown in the following exhibit.

  

  To which DNS servers is Zone1.com replicated?

  A. Server2 only

  B. Server2 and Server3 only

  C. Setver2 and Sen/er4 only

  D. Server2. Server3, and Server4 only

  E. Server2, Server3, Server4, and Server5

  Correct Answer: D

• Question 173:

  You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server.

  You need to ensure that you can manage password policies for the domain from Serve1.

  Which command should you run first on Server1?

  A. Install-Windows Feature RSAT-AO-PowerShell

  B. Install-Windows Feature 6PHC

  C. Install-Windows Feature RSAT-AD-Tool$

  D. Install-windows Feature RSAT-AWIMS

  Correct Answer: C

• Question 174:

  You have an Azure virtual machine named VM1 that contains the drives shown in the following table.

  

  On VM1, you plan to install an app named App1. The data for App1 must be stored on a persistent data disk assigned to drive D.

  You need assign the data disk to drive D.

  What should you do on VM1 first?

  A. Change the drive letter of the Temporary Storage drive to F.

  B. Move pagefile.sys to the Operating System drive.

  C. Stop (deallocate) VM1.

  D. Expand the Temporary Storage drive.

  Correct Answer: C

• Question 175:

  HOTSPOT

  You have a Group Policy Object (GPO) named GPO1 that contains user settings only.

  You plan to apply GPO1 to a global security group named Group1.

  You link GPO1 to the domain, and you remove all the permissions granted to the Authenticated Users group.

  You need to configure permissions for GPOI to meet the following requirements:

  1.

  GPO1 must apply only to the users in Group1.

  2.

  The solution must use the principle of least privilege.

  Which permissions should you grant to Group1 and the Domain Computers group? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 176:

  HOTSPOT

  Your network contains a two-domain on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table.

  

  All domain controllers are backed up by using Azure Backup.

  You create an Active Directory site named Site3. Site1, Site2, and Site3 each has a dedicated site link to the Hub site.

  In Site3, you install a new server named Server1.

  You need to promote Server1 to an RODC in child.contoso.com by using the Install from Media (IFM) option. The solution must minimize network traffic.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 177:

  HOTSPOT

  You have an on-premises DNS server named Server1 that runs Windows Server. Server1 hosts a DNS zone named fabnkam.com.

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to design a solution that will automatically resolve the names of any PaaS resources for which you configure private endpoints in Vnet1.

  How should you configure the name resolution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 178:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  The network contains the servers shown in the following table.

  

  You plan to implement IP Address Management (IPAM).

  You need to use the Group Policy based provisioning method for managed servers. The solution must support server discovery.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 179:

  HOTSPOT

  Your company has a main office and 10 branch offices that are connected by using WAN links. The network contains an Active Directory domain.

  All users have laptops and regularly travel between offices.

  You plan to implement BranchCache in the branch offices.

  In each branch office, you install a server that runs Windows Server and the BranchCache feature. You register the servers in Active Directory.

  You need to configure the laptops to use the local BranchCache server automatically. The solution must minimize administrative effort.

  Which two Group Policy settings should you configure? To answer, select the settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Turn on BranchCache

  To create a Group Policy Object and configure BranchCache modes (see steps 5 and 7 below).

  On a computer upon which the Active Directory Domain Services server role is installed, in Server Manager, click Tools, and then click Group Policy Management. The Group Policy Management console opens.

  In the Group Policy Management console, expand the following path: Forest: example.com, Domains, example.com, Group Policy Objects, where example.com is the name of the domain where the BranchCache client computer accounts that

  you want to configure are located.

  Right-click Group Policy Objects, and then click New. The New GPO dialog box opens. In Name, type a name for the new Group Policy Object (GPO). For example, if you want to name the object BranchCache Client Computers, type

  BranchCache Client Computers. Click OK.

  In the Group Policy Management console, ensure that Group Policy Objects is selected, and in the details pane right-click the GPO that you just created. For example, if you named your GPO BranchCache Client Computers, right-click

  BranchCache Client Computers. Click Edit. The Group Policy Management Editor console opens.

  In the Group Policy Management Editor console, expand the following path: Computer Configuration, Policies, Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, Network, BranchCache.

  Click BranchCache, and then in the details pane, double-click Turn on BranchCache. The policy setting dialog box opens.

  In the Turn on BranchCache dialog box, click Enabled, and then click OK.

  To enable BranchCache distributed cache mode, in the details pane, double-click Set BranchCache Distributed Cache mode. The policy setting dialog box opens.

  In the Set BranchCache Distributed Cache mode dialog box, click Enabled, and then click OK.

  If you have one or more branch offices where you are deploying BranchCache in hosted cache mode, and you have deployed hosted cache servers in those offices, double-click Enable Automatic Hosted Cache Discovery by Service

  Connection Point. The policy setting dialog box opens.

  In the Enable Automatic Hosted Cache Discovery by Service Connection Point dialog box, click Enabled, and then click OK.

  Box 2: Set BranchCache Distributed Cache mode

  BranchCache modes

  BranchCache has two modes of operation: distributed cache mode and hosted cache mode.

  When you deploy BranchCache in distributed cache mode, the content cache at a branch office is distributed among client computers.

  When you deploy BranchCache in hosted cache mode, the content cache at a branch office is hosted on one or more server computers, which are called hosted cache servers.

  Reference: https://learn.microsoft.com/en-us/windows-server/networking/branchcache/deploy/use-group-policy-to-configure-domain-member-client-computers

• Question 180:

  HOTSPOT

  You have an Azure subscription that contains the storage accounts shown in the following table.

  

  In the East US Azure region, you create a storage sync service named Sync1.

  You need to create a sync group in Sync1.

  Which storage accounts can you use, and what can you specify as the cloud endpoints. To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: storage1 and storage3 only

  Storage1 and storage3 are in the same region as the storage sync service. They are both of acceptable types, StorageV2 and FileStorage respectively.

  Incorrect:

  *

  storage2

  Storage2 is BlobBlobStorage.

  *

  storage4

  Storage4 is in another region.

  Note:

  There are two main types of storage accounts you will use for Azure Files deployments:

  *

  General purpose version 2 (GPv2) storage accounts: GPv2 storage accounts allow you to deploy Azure file shares on standard/hard disk-based (HDD-based) hardware. In addition to storing Azure file shares, GPv2 storage accounts can store other storage resources such as blob containers, queues, or tables.

  *

  FileStorage storage accounts: FileStorage storage accounts allow you to deploy Azure file shares on premium/solid-state disk-based (SSD-based) hardware.

  Region

  The storage account for the Azure file share must be located in the same region as the Storage Sync Service.

  Box 2: share1 and share3 only

  A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints.

  A cloud endpoint is a pointer to an Azure file share. All server endpoints will sync with a cloud endpoint, making the cloud endpoint the hub. The storage account for the Azure file share must be located in the same region as the Storage Sync

  Service.

  Reference: https://learn.microsoft.com/en-us/azure/storage/files/storage-files-planning https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide