AZ-800 Online Practice Questions and Answers

Your network contains an Active Directory Domain Services (AD DS) domain.

You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences.

You plan to link GPO1 to the domain.

You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must

minimize administrative effort.

Which type of item level targeting should you use?

A. Domain

B. Operating System

C. Security Group

D. Environment Variable

You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1:

1.

Create a folder named Folder1 on volume C.

2.

Create a folder named Folder2 on volume D.

3.

Add a new data disk to VM1 and create a new volume that is assigned drive letter E.

4.

Install an app named App1 on volume E.

You plan to resize VM1.

Which objects will present after you resize VM1?

A. Folder1, volume E, and App1 only

B. Folder1 only

C. Folder1 and Folder2 only

D. Folder1, Folder2, App1, and volume E

You have a server that runs Windows Server and contains a shared folder named UserData. You need to limit the amount of storage space that each user can consume in UserData. What should you use?

A. Storage Spaces

B. Work Folders

C. Distributed File System (DFS) Namespaces

D. File Server Resource Manager (FSRM)

You have an Azure virtual machine named VM1 that runs Windows Server.

You need to configure the management of VM1 to meet the following requirements:

1.

Require administrators to request access to VM1 before establishing a Remote Desktop connection.

2.

Limit access to VM1 from specific source IP addresses.

3.

Limit access to VM1 to a specific management port. What should you configure?

A. a network security group (NSG)

B. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

C. Microsoft Defender for Cloud

D. Azure Front Door

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are planning the deployment of DNS to a new network.

You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations use root hints.

You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

Solution: On Server2, you create a conditional forwarder for contoso.local and west.contoso.local. On Server3, you create a conditional forwarder for contoso.local and east.contoso.local.

Does this meet the goal?

A. Yes

B. No

Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections.

You need to minimize the latency for changes to Active Directory.

What should you do?

A. For each site links, modify the site link costs.

B. Create a site link bridge that contains all the site links.

C. For each site link, modify the optionsattribute.

D. For each site link, modify the replication schedule.

You have an Azure subscription that contains the virtual networks shown in the following table.

You deploy a virtual machine named VM1 that runs Windows Server. VM1 is connected to Subnet11.

You plan to add an additional network interface named NIC1 to VM1.

To which subnets can NIC1 be attached?

A. Subnet11 only

B. Subnet12 only

C. Subnet11 and Subnetl2 only

D. Submet12 and Subnet21 only

E. Subnet11, Subnet12, Subnet21, and Subnet31

You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

A. Admin1 only.

B. Admin3 only.

C. Admin1 and Admin3 only.

D. Admin1, Admin2 and Admin3.

HOTSPOT

You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.

You have an Azure subscription.

You need to monitor Server1 by using Azure Monitor.

Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You have an on-premises web app named WebApp1 that only supports Kerberos authentication.

You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

Your network contains a two-domain on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table.

All domain controllers are backed up by using Azure Backup.

You create an Active Directory site named Site3. Site1, Site2, and Site3 each has a dedicated site link to the Hub site.

In Site3, you install a new server named Server1.

You need to promote Server1 to an RODC in child.contoso.com by using the Install from Media (IFM) option. The solution must minimize network traffic.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You have an on-premises DNS server named Server1 that runs Windows Server. Server1 hosts a DNS zone named fabnkam.com.

You have an Azure subscription that contains the resources shown in the following table.

You need to design a solution that will automatically resolve the names of any PaaS resources for which you configure private endpoints in Vnet1.

How should you configure the name resolution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

DRAG DROP

You create a new Azure subscription.

You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.

You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

DRAG DROP

You have two on-premises servers named Server1 and Server2 that run Windows Server.

You have an Azure Storage account named storage1 that contains a file share named share1. Server1 syncs with share1 by using Azure File Sync.

You need to configure Server2 to sync with share1.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a server named Server1 that has the DFS Namespaces role service installed. Server1 hosts a domain-based Distributed

File System (DFS) Namespace named Files.

The domain contains a file server named Server2. Server2 contains a shared folder named Share1. Share1 contains a subfolder named Folder1.

In the Files namespace, you create a folder named Folder1 that has a target of \\Server2.contoso.com\Share1\Folder1.

You need to configure a logon script that will map drive letter M to Folder1. The solution must use the path of the DFS Namespace.

How should you configure the command to map the drive letter? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area: