Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 31:

  Please finish the following requirement on Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

  You need to provide a solution to administrator with the ability to manage Group Policy Objects (GPOs). The principle of least privilege must be fulfilled.

  You need to you add the administrator to the group:

  A. AAD DC Administrators

  B. Enterprise Admins

  C. Schema Admins

  D. Domain Admins

  Correct Answer: B

• Question 32:

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The root domain contains the domain controllers shown in the following table.

  

  A failure of which domain controller will prevent you from creating application partitions?

  A. DC1

  B. DC2

  C. DC3

  D. DC4

  E. DC5

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/fsmo-roles

• Question 33:

  You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1.

  You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager.

  You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From the Hyper-V Settings of Host1, select Allow enhanced session mode.

  B. From Virtual Machine Connection, select Show Options, and then select the USB hard drive.

  C. From Virtual Machine Connection, switch to a basic session.

  D. From Disk Management on Host1, select Rescan Disks.

  E. From Disk Management on Host1, attach a virtual hard disk.

  Correct Answer: AB

  Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hyper-v-virtual-machine-with-vmconnect

• Question 34:

  You have a Windows Server container host named Server1 and a container image named image1.

  You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine.

  Which parameter should you specify when you run the docker run command?

  A. --expose

  B. --privileged

  C. --runtime

  D. --isolation

  E. --entrypoint

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

• Question 35:

  You plan to deploy a containerized application that requires .NET Core.

  You need to create a container image for the application. The image must be as small as possible.

  Which base image should you use?

  A. Windows Server

  B. Nano Server

  C. Windows

  D. Server Core

  Correct Answer: B

  Reference: https://techcommunity.microsoft.com/t5/containers/nano-server-x-server-core-x-server-which-base-image-is-the-right/ba-p/2835785

• Question 36:

  You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1:

  1.

  Create a folder named Folder1 on volume C.

  2.

  Create a folder named Folder2 on volume D.

  3.

  Add a new data disk to VM1 and create a new volume that is assigned drive letter E.

  4.

  Install an app named App1 on volume E.

  You plan to resize VM1.

  Which objects will present after you resize VM1?

  A. Folder1, volume E, and App1 only

  B. Folder1 only

  C. Folder1 and Folder2 only

  D. Folder1, Folder2, App1, and volume E

  Correct Answer: A

  https://docs.microsoft.com/en-us/answers/questions/235/can-i-use-the-temporary-disk-the-d-drive-by-defaul.html

• Question 37:

  You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:

  1.

  Size: D2s_v4

  2.

  Operating system disk: 127-GiB standard SSD

  3.

  Data disk 128-GiB standard SSD

  4.

  Virtual machine generation: Gen 2

  You plan to perform the following changes to VM1:

  1.

  Change the virtual machine size to D4s_v4.

  2.

  Detach the data disk.

  3.

  Add a new standard SSD.

  Which changes require downtime for VM1?

  A. Detaching the data disk only and adding a new standard SSD.

  B. Detaching the data disk only.

  C. Changing the virtual machine size only.

  D. Adding a new standard SSD only.

  Correct Answer: C

  Data disks can be added and detached without requiring downtime. Changing the VM size requires the VM to be restarted.

• Question 38:

  You have a server named Server1 that hosts Windows containers.

  You plan to deploy an application that will have multiple containers. Each container will be on the same subnet. Each container requires a separate MAC address and IP address. Each container must be able to communicate by using its IP

  address.

  You need to create a Docker network that supports the deployment of the application.

  Which type of network should you create?

  A. NAT

  B. transparent

  C. I2bridge

  D. I2tunnel

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/network-drivers-topologies

• Question 39:

  You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2.

  A user named Admin1 is a member of the local Administrators group on Server1 and Server2.

  You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1.

  You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.

  What should you do first?

  A. From the Azure portal, generate a new onboarding script.

  B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

  C. Hybrid Azure AD join Server1 and Server2.

  D. Create an Azure cloud-only account for Admin1.

  Correct Answer: A

  The Answer is "A". The question asks that "Admin1", a user account, has the appropriate permissions. The role of Azure Connected Machine Onboarding can only be assigned to a service principal, as confirmed by the link given to justify the wrong answer. Admin1 cannot be assigned this role, it's impossible, check it for yourself. Admin1, as a local server admin, has all the rights he/she needs. The correct answer is "A", generate a new onboarding script. One can onboard more than one server with the same script. Onboarding two certainly doesn't impose an administrative burden to use this method.

• Question 40:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You have an Azure subscription that has Microsoft Defender for Cloud enabled.

  You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1. What should you do?

  A. Add the PowerShell Desired State Configuration (DSC) extension to VM1.

  B. Configure VM1 to use a user-assigned managed identity.

  C. Configure VM1 to use a system-assigned managed identity.

  D. Add the Custom Script Extension to VM1.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/guest-configuration