Microsoft Microsoft Certifications AZ-800 Questions & Answers

• Question 61:

  SIMULATION

  You need to ensure that you can manage SRV1 remotely by using PowerShell.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Configure remote Management in Server Manager

  To enable Server Manager remote management by using the Windows interface

  Step 1: On the computer that you want to manage remotely, open Server Manager, if it is not already open. On the Windows taskbar, click Server Manager. On the start screen, click the Server Manager tile.

  Step 2: In the Properties area of the Local Servers page, click the hyperlinked value for the remote management property.

  Step 3: Do one of the following, and then click OK.

  To let this computer be managed remotely by using Server Manager or Windows PowerShell, select Enable remote management of this server from other computers.

  (To prevent this computer from being managed remotely by using Server Manager (or Windows PowerShell if it is installed), clear the Enable remote management of this server from other computers check box.)

  Reference:

  https://learn.microsoft.com/en-us/windows-server/administration/server-manager/configure-remote-management-in-server-manager

• Question 62:

  SIMULATION

  You need to deploy a new primary DNS zone named fabrikam.com to DC1. The zone must be signed.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Step 1: Create the zone

  Manage DNS zones using DNS server in Windows Server Create a primary zone Create an Active Directory integrated primary zone To create an Active Directory integrated primary zone, select the relevant method and follow the steps.

  Here's how to create a forward look up zone using DNS Manager.

  1.

  From the Windows desktop, open the Start menu, select Windows Administrative Tools > DNS.

  2.

  In the console tree, connect to the DNS server you wish to manage, expand the DNS server, right-click, then select New Zone. Connect to: DC1

  3.

  On the New Zone Wizard page, select Next.

  4.

  On the Zone Type page, select Primary zone and ensure Store the zone in Active Directory is checked. This option is available when the DNS server is also an AD DS domain controller.

  5.

  On the Active Directory Zone Replication Scope page, choose one of the following options:

  All DNS servers running on AD DS domain in the domain.

  All domain controllers in this domain (for Windows 2000 compatibility).

  All domain controllers enrolled in a specific directory partition.

  6.

  On the Forward or Reverse Lookup Zone page, select Forward lookup zone.

  7.

  On the zone name page, specify the name of the DNS zone. For example, north.contoso.com Type: fabrikam.com

  8.

  On the Dynamic Update page, choose one of the following options:

  Allow only secure dynamic updates (recommended for Active Directory).

  Allow both nonsecure and secure dynamic updates.

  Do not allow dynamic updates.

  9.

  Select Finish to complete the New Zone Wizard. Step 2: Sign the zone Zone Signing Wizard

  To start the Zone Signing Wizard in DNS Manager, right-click a forward or reverse DNS zone on a primary, authoritative DNS server, point to DNSSEC, and click Sign the Zone. See the following example.

  

  After you click Sign the Zone, the wizard displays an introductory page with a summary of DNSSEC (not shown). Click Next to view the Signing Options page.

  Signing options

  The Signing Options page requires you to choose a method for specifying DNSSEC parameter values. See the following example.

  

  Select: Use default settings to sign the zone.

  If you choose this option, the zone will be signed with default parameters. These parameters are the same as those that are displayed by default if you choose to customize zone signing parameters, provided the zone has not been previously

  signed with a different set of parameters. If you choose to sign the zone with default settings, the wizard will skip to the summary page.

  Reference:

  https://learn.microsoft.com/en-us/windows-server/networking/dns/manage-dns-zones

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593642(v=ws.11)

• Question 63:

  SIMULATION

  You need to make the shares named Marketing and Sales from SRV1 available on the network by using the following UNC paths:

  1.

  \\contoso.com\documents\marketing

  2.

  \\contoso.com\documents\sales

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  How to Set Up Windows Server for File Sharing

  Windows File Sharing Setup

  Step 1: Open the Computer Management window, which you can access by going to Server Manager > Tools > Computer Management. Open SRV1.

  Step 2: Select the directory that you want to share (or select a new directory).

  We select: \\contoso.com\documents\marketing

  Step 3: Right-click this directory (folder) and in the context menu, hit Properties.

  

  Step 4: Specify name of the Share as Marketing

  

  Step 5: Share

  Reference: https://www.nakivo.com/blog/create-file-share-windows-server/

• Question 64:

  SIMULATION

  You need to create a group-managed service account (gMSA) named gMSA1 and make gMSA1 available on SRV1.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  To create a gMSA using the New-ADServiceAccount cmdlet.

  Step 1: On the Windows Server 2012 domain controller (here SRV1), run Windows PowerShell from the Taskbar.

  Step 2: At the command prompt for the Windows PowerShell, type the following commands, and then press ENTER. (The Active Directory module will load automatically.)

  New-ADServiceAccount gMSA1

  Enter the command on a single line.

  Step 3: Install the gMSA on the host

  The Install-ADServiceAccount cmdlet installs an existing gMSA on the server on which the cmdlet is run. Use the cmdlet with the following syntax:

  Install-ADServiceAccount `

  -Identity Run the following PowerShell commands as administrator. Install-ADServiceAccount gMSA1 Note: Managed Service Accounts container

  To work effectively, gMSAs must be in the Managed Service Accounts container.

  

  Reference: https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts https://learn.microsoft.com/en-us/entra/architecture/service-accounts-group-managed

• Question 65:

  SIMULATION

  You use a Group Policy preference to map \\dc1.contoso.com\install as drive H for all users. If a user already has an existing drive mapping for H, the new drive mapping must take precedence.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Mapping drives using Group Policy preferences

  Steps involved:

  1.

  Open Group Policy Management.

  2.

  Right-click the domain or the required subfolder to create a new GPO, or select an already existing one. Right-click and select Edit to open the Group Policy Management Editor.

  3.

  Go to User Configuration > Preferences > Windows Settings > Drive Maps.

  4.

  Right-click and select New > Mapped Drive.

  5.

  Under the General tab (see Figure below), do the following:

  6.

  Action: Select Create or Update.

  7.

  Location: Specify the full file path, e.g. \\Anjali-dc1\c. Specify: \\dc1.contoso.com\install

  8.

  Reconnect: Enable this to auto connect the drive.

  9.

  Label as: Pick a suitable name for the shared drive, e.g. SharedDrive.

  10.

  Drive Letter: Select a suitable letter for the drive, e.g. K. Specify H

  

  (11. Connect as: Enter a username and password if you want users to connect with certain credentials other than their own Windows login credentials.)

  (12. Hide/Show this drive: Select whether you want to hide the folder or make it visible on the network.)

  (13. Hide/Show all drives: Select whether, by default, all the shared drives/folders are hidden or visible.)

  Reference: https://blogs.manageengine.com/active-directory/active-directory-academy/2019/11/18/mapping-drives-using-group-policy-preferences.html

• Question 66:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are planning the deployment of DNS to a new network.

  You have three internal DNS servers as shown in the following table.

  

  The contoso.local zone contains zone delegations use root hints.

  You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

  Solution: On Server2, you create a conditional forwarder for contoso.local and west.contoso.local. On Server3, you create a conditional forwarder for contoso.local and east.contoso.local.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The solution of creating conditional forwarders on Server2 and Server3 for contoso.local and east.contoso.local or west.contoso.local, respectively, does meet the goal.

  Since all the DNS servers are already using root hints, they will be able to resolve internet host names. By creating the conditional forwarders, the DNS servers will be able to resolve the names of all the internal namespaces as well.

  By configuring conditional forwarders, the DNS servers can forward DNS queries for specific domains to specified DNS servers, improving the efficiency and speed of name resolution for those domains.

• Question 67:

  SIMULATION

  You need to collect errors from the System event log of SRV1 to a Log Analytics workspace.

  The required source files are located in a folder named \\dc1.contoso.com\install.

  To complete this task, sign in the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Configure Windows event logs

  Configure Windows event logs from the Agents configuration menu for the Log Analytics workspace.

  Step 1: Go to the Log Analytics workspaces menu in the Azure portal.

  Configure data sources

  To configure data sources for Log Analytics agents, go to the Log Analytics workspaces menu in the Azure portal and select a workspace.

  Step 2: Select Agents configuration.

  Step 3: Select the tab for the data source you want to configure.

  In this case the Windows event log of SRV1.

  Step 4: Select only Error option in the System Log row.

  Azure Monitor only collects events from Windows event logs that are specified in the settings.

  

  Reference: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-data-sources#configure-data-sources

• Question 68:

  SIMULATION

  You need to enable nested virtualization for a virtual machine named VM1 on SRV1.

  To complete this task, sign in the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Configure Nested Virtualization

  Step 1: While the virtual machine is in the OFF state, run the following command on the physical Hyper-V host, in this case on SRV1. This enables nested virtualization for the virtual machine.

  Step 2: Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true

  In our case: Set-VMProcessor -VMName VM1 -ExposeVirtualizationExtensions $true

  Step 3: Start the virtual machine.

  Install Hyper-V within the virtual machine, just like you would for a physical server.

  Enable the Hyper-V role through Settings

  Step 4: Right click on the Windows button and select ‘Apps and Features’.

  Step 5: Select Programs and Features on the right under related settings.

  Step 6: Select Turn Windows Features on or off.

  Step 7: Select Hyper-V and click OK.

  

  When the installation has completed you are prompted to restart your computer.

  Reference: https://learn.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/nested-virtualization https://learn.microsoft.com/en-us/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v

• Question 69:

  SIMULATION

  SRV1 contains a virtual machine named VM1.

  You need attach c:\vhds\Disk1.vhdx to VM1. The solution must ensure that Disk1 can be expanded dynamically when VM1 runs.

  To complete this task, sign in the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Step 1: Sign in to the Azure portal.

  Step 2: Search for and select Virtual machines. Select VM1 from the list..

  Step 3: On the Virtual machine pane, select Disks.

  Step 4: On the Disks pane, select Create and attach a new disk.

  Step 5: In the drop-downs for the new disk, select attach c:\vhds\Disk1.vhdx

  Step 6: Specify that the disk is managed.

  Step 7: Select Save to create and attach the new data disk to the VM.

  Reference: https://learn.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal

• Question 70:

  SIMULATION

  You need to replicate a read-only copy of a DNS zone named contoso.com D to SRV2.

  To complete this task, sign in the required computer or computers.

  A. See explanation below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Replicate read-only copy DNS zone. Step 1: In DNS Manager log in to SRV2.

  

  Step 2: Right click Forward Lookup Zones, and select New Zone...

  Step 3: Select Secondary Zone

  

  Step 4: Select Secondary Zone

  

  Step 5: Enter the same domain name as the first DNS server. In our case: contoso.com

  

  Step 6: At the next screen enter the Hostname or IP address of the primary DNS server and hit Enter. In our case: contoso.com

  

  Step 7: Hit Next, Next, Finish - That's it, you’re all done.

  The secondary server will now replicate changes FROM the first DNS server.

  Reference: https://cogenesis.com.au/blog/how-to-setup-windows-dns-replication-dns-manager