Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 41:

  You have a server that runs Windows Server and contains a shared folder named UserData. You need to limit the amount of storage space that each user can consume in UserData. What should you use?

  A. Storage Spaces

  B. Work Folders

  C. Distributed File System (DFS) Namespaces

  D. File Server Resource Manager (FSRM)

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/fsrm/fsrm-overview

• Question 42:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two servers named Server1 and Server2.

  Server1 contains a disk named Disk2. Disk2 contains a folder named UserData. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup.

  Server1 fails.

  You connect Disk2 to Server2.

  You need to ensure that you can access all the files on Disk2 as quickly as possible.

  What should you do?

  A. Create a storage pool.

  B. Restore files from Azure Backup.

  C. Install the File Server Resource Manager server role.

  D. Install the Data Deduplication server role.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows-server/storage/data-deduplication/overview

• Question 43:

  You have five file servers that run Windows Server.

  You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort.

  What should you create?

  A. a Dynamic Access Control central access policy

  B. a data loss prevention (DLP) policy

  C. a Dynamic Access Control central access rule

  D. a file screen

  Correct Answer: D

  On the File Screening Management node of the File Server Resource Manager MMC snap-in, you can perform the following tasks:

  Create file screens to control the types of files that users can save, and generate notifications when users attempt to save unauthorized files.

  Define file screening templates that can be applied to new volumes or folders and that can be used across an organization.

  Create file screening exceptions that extend the flexibility of the file screening rules.

• Question 44:

  You have a server that runs Windows Server and has the DHCP Server role installed. The server has a scope named Scope1 that has the following configurations:

  1.

  Address range: 192.168.0.2 to 192. 168.1.254

  2.

  Mask: 255.255.254.0

  3.

  Router: 192.168.0.1

  4.

  Lease duration: 3 days

  5.

  DNS server: 172.16.0.254

  You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range.

  You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from

  Scope1.

  What should you create?

  A. a scope

  B. a filter

  C. scope options

  D. a policy

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn425040(v=ws.11)

• Question 45:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are planning the deployment of DNS to a new network.

  You have three internal DNS servers as shown in the following table.

  

  The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.

  You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

  Solution: You configure Server2 and Server3 to forward DNS requests to 10.0.1.10.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 46:

  You have an on-premises network that is connected to an Azure virtual network by using a Site-to-Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet contains a virtual machine.

  You plan to migrate the virtual machine to the Azure subnet.

  You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort.

  What should you implement before you perform the migration?

  A. Azure Extended Network

  B. Azure Virtual Network NAT

  C. Azure Application Gateway

  D. Azure virtual network peering

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-extended-network

• Question 47:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are planning the deployment of DNS to a new network.

  You have three internal DNS servers as shown in the following table.

  

  The contoso.local zone contains zone delegations for east.conloso.local and west.contoso.local. All the DNS servers use root hints.

  You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

  Solution: On Server2 and Server3, you configure a conditional forwarder for contoso.local.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windowsserver-2008-r2-and-2008/cc794735(v=ws.10)

• Question 48:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  You need to identify which server is the PDC emulator for the domain.

  Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 49:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  You need to identify which server is the PDC emulator for the domain.

  Solution: From a command prompt, you run netdom.exe query fsmo.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://activedirectorypro.com/how-to-check-fsmo-roles/

• Question 50:

  You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

  You plan to implement self-service password reset (SSPR) in Azure AD.

  You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.

  What should you do?

  A. Deploy the Azure AD Password Protection proxy service to the on premises network.

  B. Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

  C. Grant the Change password permission for the domain to the Azure AD Connect service account.

  D. Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback