Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 21:

  HOTSPOT

  You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.

  You need to limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely.

  You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files.

  How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/session-configurations?view=powershell-7.2 https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/new-pssessionconfigurationfile?view=powershell-7.2

• Question 22:

  HOTSPOT

  You have on-premises file servers that run Windows Server as shown in the following table.

  

  You have the Azure file shares shown in the following table.

  

  You add a Storage Sync Service named Sync1 and an Azure File Sync sync group named Group1. Group1 uses share1 as a cloud endpoint.

  You register Server1 and Server2 with Sync1. You add D:\Folder1 from Server1 as a server endpoint in Group1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  A sync group contains one cloud endpoint, or Azure file share, and at least one server endpoint.

  Box 2: No

  Azure File Sync does not support more than one server endpoint from the same server in the same Sync Group.

  Box 3: Yes

  Multiple server endpoints can exist on the same volume if their namespaces are not overlapping (for example, F:\sync1 and F:\sync2) and each endpoint is syncing to a unique sync group.

  Reference:

  https://docs.microsoft.com/en-us/answers/questions/110822/azure-file-sync-multiple-sync-directories-for-same.html

  https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

• Question 23:

  HOTSPOT

  You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.

  You have an Azure subscription.

  You need to monitor Server1 by using Azure Monitor.

  Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/agents/gateway https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-monitor

• Question 24:

  HOTSPOT

  Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain.

  The domains contain the servers shown in the following table.

  

  You need to configure resource based constrained delegation so that the users in contoso.com can use Windows Admin Center on Server1 to connect to Server2.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-constrained-delegation-overview https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-adcomputer?view=windowsserver2022-ps

• Question 25:

  HOTSPOT

  You have a Windows Server container host named Server1 that has a single disk.

  On Server1, you plan to start the containers shown in the following table.

  

  Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

• Question 26:

  HOTSPOT

  You have 10 on-premises servers that run Windows Server.

  You plan to use Azure Network Adapter to connect the servers to the resources in Azure.

  Which prerequisites do you require on-premises and in Azure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network-adapter

• Question 27:

  HOTSPOT

  You have an Azure Active Directory Domain Services (Azure AD DS) domain.

  You create a new user named Admin1.

  You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy

• Question 28:

  DRAG DROP

  You need to implement the planned change for Data1.

  Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Deploy the Azure Storage Sync Service

  A. Datum plans to implement the following changes: Sync Data1 to share1.

  The subscription contains a storage account named storage1 that has a file share named share1.

  Deploy Azure File Sync

  Deploy the Storage Sync Service

  The deployment of Azure File Sync starts with placing a Storage Sync Service resource into a resource group of your selected subscription.

  Step 2: Install and register the Azure File Sync agent.

  Install the Azure File Sync agent

  The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share.

  Register Windows Server with Storage Sync Service

  Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service. A server can only be registered to one Storage Sync Service and can sync with

  other servers and Azure file shares associated with the same Storage Sync Service.

  Step 3: Create a sync group

  Create a sync group and a cloud endpoint

  A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints.

  A server endpoint represents a path on a registered server. A server can have server endpoints in multiple sync groups. You can create as many sync groups as you need to appropriately describe your desired sync topology.

  Step 4: Add a server endpoint Create a server endpoint A server endpoint represents a specific location on a registered server, such as a folder on a server volume.

  To add a server endpoint, go to the newly created sync group. Under Server endpoints, select +Add server endpoint. The Add server endpoint blade opens. Etc.

  Reference: https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide

• Question 29:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.

  You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace.

  What should you do?

  A. On Server1, run the Add-DnsServerTrustAnchorcmdlet.

  B. On each member server, run the Add-DnsServerTrustAnchorcmdlet.

  C. From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT).

  D. From a Group Policy Object (GPO), modify the Network List Manager policies.

  Correct Answer: C

  NRPT The Name Resolution Policy Table (NRPT) is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. The NRPT can be configured using Group Policy or by using the Windows Registry.

  When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally. You can use the NRPT to require that the DNS Client service perform DNSSEC validation of DNS responses for the namespaces that you specify.

• Question 30:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IP addresses.

  You plan to use DHCP to assign IP addresses to the servers.

  You need to ensure that each server always receives the same IP address.

  Which type of identifier should you use to create a DHCP reservation for each server?

  A. universally unique identifier (UUID)

  B. fully qualified domain name (FQDN)

  C. NetBIOS name

  D. MAC address

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/powershell/module/dhcpserver/add-dhcpserverv4reservation?view=windowsserver2022-ps