100% Pass Top-selling AZ-800 Exams – New 2022 Microsoft Pratice Exam [Q28-Q43]

Rate this post

100% Pass Top-selling AZ-800 Exams – New 2022 Microsoft Pratice Exam

Windows Server Dumps AZ-800 Exam for Full Questions – Exam Study Guide

Microsoft AZ-800 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage VM using PowerShell Remoting, PowerShell Direct, and HVC.exe Deploy Azure services using Azure Virtual Machine extensions on non-Azure machines
Topic 2	Configure and manage multi-site, multi-domain, and multi-forest environments Troubleshoot flexible single master operations (FSMO) roles
Topic 3	Manage IaaS virtual machines (VMs) in Azure that run Windows Server Manage Windows Server by using domain-based Group Policies
Topic 4	Configure File Server Resource Manager (FSRM) quotas Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
Topic 5	Implement and manage an on-premises and hybrid networking infrastructure Implement on-premises and hybrid network connectivity
Topic 6	Create and manage AD DS security principals Configure CredSSP or Kerberos delegation for second hop remoting
Topic 7	Manage Windows Servers in a hybrid environment Integrate Windows Servers with Azure Security Center
Topic 8	Implement site-to-site virtual private network (VPN) Integrate Windows Server DNS with Azure DNS private zones
Topic 9	Manage users and groups in multi-domain and multi-forest scenarios Manage Windows Servers and workloads in a hybrid environment

NO.28 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.
Does this meet the goal?

Yes

NO.29 You have a server named Server1 that has Windows Admin Center installed. The certificate used by Windows Admin Center was obtained from a certification authority (CA).
The certificate expires.
You need to replace the certificate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – From Internet Information Services (IIS) Manager, bind a certificate.
2 – Copy the certificate thumbprint.
3 – Rerun Windows Admin Center Setuo and select Change.
Reference:
https://www.starwindsoftware.com/blog/change-the-windows-admin-center-certificate

NO.30 You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.
You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.
To which group should you add the administrator?

AAD DC Administrators

Domain Admins

Schema Admins

Enterprise Admins

Group Policy Creator Owners

Only the Domain Admins group and the Enterprise Admins group can fully manage GPOs. Members of the Group Policy Creator Owners group can create new GPOs but they can’t link the GPOs to sites, the domain or OUs and they cannot manage existing GPOs.

NO.31 You create a new Azure subscription.
You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.
You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Create an Azure ADDS intance.
2 – Create an Azure virual network.
3 – Run the Active Directory Domain Service installation Wizard.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

NO.32 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You create an organizational unit (OU) that contains the client computers in the new branch office. You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to the new OU.
Does this meet the goal?

Yes

NO.33 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You create a new site named Site4 and associate Site4 to DEFAULTSITELINK.
Does this meet the goal?

Yes

NO.34 You have an Azure subscription that contains the following resources:
* An Azure Log Analytics workspace
* An Azure Automation account
* Azure Arc.
You have an on-premises server named Server1 that is onboaraed to Azure Arc
You need to manage Microsoft updates on Server! by using Azure Arc
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point

Add Microsoft Sentinel to the Log Analytics workspace

On Server1, install the Azure Monitor agent

From the Automation account, enable Update Management for Server1.

From the Virtual machines data source of the Log Analytics workspace, connect Server1.

Reference:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arc-update-management

NO.35 Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.

You need to configure resources based constrained delegation so that the users In contoso.com can use Windows Admin Center on Server) to connect to Server? How should you complete the command? To answer, select the appropriate options in the answer are
a. NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-constrained-delegation-overview
https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-adcomputer?view=windowsserver2022-ps

NO.36 You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2.
A user named Admin1 is a member of the local Administrators group on Server1 and Server2.
You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1.
You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.
What should you do first?

From the Azure portal, generate a new onboarding script.

Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

Hybrid Azure AD join Server1 and Server2.

Create an Azure cloud-only account for Admin1.

Reference:
https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal

NO.37 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.
Does this meet the goal?

Yes

NO.38 You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.
Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to Server1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – From Server1, stop VM1.
2 – From Server1, run the Remove-VMAssignableDevice cmdlet.
3 – From Server1, run the Mount-VMHost AssignableDevice cmdlet.
4 – From Server1, enable the device by using Device Manager.
Reference:
https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/deploying-storage-devices-using-dda

NO.39 You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.
You deploy five servers to the domain. You add the servers to a group named iTFarmHosts.
You plan to configure a Network Load Balancing (NIB) cluster named NLBCluster.contoso.com that will contain the five servers.
You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdiets from the list of cmdlets to the answer area and arrange them in the correct order.

1 – New-ADServiceAccount
2 – Install-ADServiceAccount
3 – Add-ADComputerServiceAccount

NO.40 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are planning the deployment of DNS to a new network.
You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.
You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.
Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local.
Does this meet the goal?

Yes

NO.41 You have a Windows Server container host named Server 1 and a container image named Image1.
You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine.
Which parameter should you specify when you run the docker run command?

–expose

–privileged

–runtime

–entrypoint

–isolation

Reference:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

NO.42 You need to meet the technical requirements for VM3
On which volumes can you enable Data Deduplication?

D and E only

C, D, E, and F

D only

C and D only

D, E, and F only

NO.43 Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table.

Server1 contains a folder named D:Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)

Folder1 is shared by using the following configurations:

The share permissions for Share1 are shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.