Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 11:

  HOTSPOT

  Your network contains three Active Directory Domain Services (AD DS) forests as shown in the following exhibit.

  

  The network contains the users shown in the following table.

  

  The network contains the security groups shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise. select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  User1 is in east.contoso.com. Group1 is Domain Local group in west.adutm.com.

  Accounts from any domain or any trusted domain Global groups from any domain or any trusted domain can be members of Domain Local groups.

  Accounts, Global groups, and Universal groups from other forests and from external domains can also be members of Domain Local groups.

  Box 2: No

  User2 is in the fabrikam.com domain.

  Group3 is a Universal group in east.contso.com.

  Only accounts from any domain in the same forest can be added as members.

  Box 3: Yes

  Group2 is a Universal group in contoso.com.

  Group2 can grant permissions On any domain in the same forest or trusting forests.

  Active Directory Domain Services add to Domain Local group.

  Reference:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

• Question 12:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.

  In the contoso.com domain, you create two users named Admin1 and Admin2.

  You need to ensure that the users can perform the following tasks:

  1.

  Admin1 can create and manage Active Directory sites.

  2.

  Admin2 can deploy domain controllers to the east.contoso.com domain.

  The solution must use the principle of least privilege.

  To which group should you add each user? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/remote/remote-access/ras/multisite/configure/step-2-configure-the-multisite-infrastructure

• Question 13:

  HOTSPOT

  You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You need 10 limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely. You configure Just

  Enough Administration (JEA) and successfully build the role capabilities and session configurationfiles.

  How should you complete the PowerShell command? (To answer, select the appropriate options in the answer area.)

  Hot Area:

  

  Correct Answer:

  

• Question 14:

  HOTSPOT

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

  You have an on-premises web app named WebApp1 that only supports Kerberos authentication.

  You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

• Question 15:

  HOTSPOT

  You have a Windows Server container host named Server1 and an Azure subscription.

  You deploy an Azure container registry named Registry1 to the subscription.

  On Server1, you create a container image named image1.

  You need to store image1 in Registry1.

  Which command should you run on Server1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure-cli#push-the-image-to-your-registry

• Question 16:

  HOTSPOT

  You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table.

  

  On which volumes can you use BitLocker Drive Encryption (BitLocker) and disk quotas? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview

• Question 17:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a file server named Server1 and three users named User1, User2, and User3.

  Server1 contains a shared folder named Share1 that has the following configurations:

  

  The share permissions for Share1 are configured as shown in the Share Permissions exhibit.

  

  Share1 contains a file named File1.bxt. The advanced security settings for File1.txt are configured as shown in the File Permissions exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box1: no- has change but not full controll cannot take ownership Box2: yes Box 3:no - Has write but not read- Access based enumeration says no see

• Question 18:

  HOTSPOT

  Your network contains two VLANs for client computers and one VLAN for a datacenter. Each VLAN is assigned an IPv4 subnet. Currently, all the client computers use static IP addresses.

  You plan to deploy a DHCP server to the VLAN in the datacenter.

  You need to use the DHCP server to provide IP configurations to all the client computers.

  What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate option the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 3

  You need a DHCP scope for each of the three subnets.

  Box 2: 2

  The two client VLANs need a DHCP Relay Agent to forward DHCP requests to the DHCP server. The datacenter VLAN that contains the DHCP server does not require a DHCP Relay Agent.

• Question 19:

  HOTSPOT

  You need to sync files from an on premises server named Server1 to Azure by using Azure File Sync.

  You have a cloud tiering policy that is configured for 30 percent free space and 70 days.

  Volume E on Server1 is 500 GB.

  A year ago, you configured E:\Data on Server1 to sync by using Azure File Sync. The files that are visible in E:\Data are shown in the following table.

  

  Volume E does NOT contain any other files.

  Where are File1 and File3 located? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  File 1: File server and Azure file share File 3: Azure file share only

  with samples, as nazgul250 posted below: https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-policy upvoted 18 times

• Question 20:

  HOTSPOT

  You have on-premises servers that run Windows Server as shown in the following table.

  

  You have an Azure file share named share1 that stores two files named File2.docx and File3.docx. You create an Azure File Sync sync group that includes the following endpoints:

  1.

  share

  2.

  D:\Folder1 on Server1

  3.

  D:\Datal on Server2

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  1.

  N - You are not changing a file, it asks if you can create a file with a name that already exists on all endpoints as File2.docx has already been synced from Azure file share (share1) to on-premise endpoints

  2.

  N - As I understand this is the same scenario. File1 from Server1 has already been synced to all endpoints when you try to create a new file with the same name.

  3.

  Y - If you add an Azure file share that has an existing set of files as a cloud endpoint to a sync group, the existing files will sync to server endpoints that you add to the same sync group.