Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections. You need to minimize the convergence time for changes to Active Directory.What should you do?

For each site link, modify the replication schedule.

For each site link, modify the options attribute.

For each site link, modify the site link costs.

For each site link, modify the replication schedule.

Create a site link bridge that contains all the site links.

Your network contains an Active Directory Domain Services (AD DS) domain- The domain contains 10 servers that run Windows Server. The servers have static IP addresses. You plan to use DHCP to assign IP addresses to the servers.You need to ensure that each server always receives the same IP address.Which type of identifier should you use to create a DHCP reservation for each server?

universally unique identifier (UUID)

fully qualified domain name (FQDN)

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant The on-premises network is connected to Azure by using a Site-to- Site VPN. You have the DNS zones shown in the following table. You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network Which two actions should you perform? Each correct answer presents part of the solution, NOTE:Each correct selection Is worth one point

Create a conditional forwarder for fabrikam.com on DC1.

Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine &s a DNS forwarder.

Create a conditional forwarder for fabrikam.com on DC1.

Create a stub zone for fabrikam.com on DC1.

Create a secondary zone for fabnlcam.com on DO.

Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.

Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine &s a DNS forwarder.

You have an Azure subscription that contains the following resources:• An Azure Log Analytics workspace• An Azure Automation account• Azure Arc.You have an on-premises server named Server1 that is onboaraed to Azure Arc You need to manage Microsoft updates on Server! by using Azure Arc Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point

On Server1, install the Azure Monitor agent

From the Automation account, enable Update Management for Server1.

Add Microsoft Sentinel to the Log Analytics workspace

On Server1, install the Azure Monitor agent

From the Automation account, enable Update Management for Server1.

From the Virtual machines data source of the Log Analytics workspace, connect Server1.

You have an Azure virtual machine named VM1 that has a private IP address only.You configure the Windows Admin Center extension on VM1.You have an on-premises computer that runs Windows 11. You use the computer for server management.You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1.What should you configure?

a VPN connection to the virtual network that contains VM1.

an Azure Bastion host on the virtual network that contains VM1.

a VPN connection to the virtual network that contains VM1.

a network security group 1NSG) rule that allows inbound traffic on port 443.

a private endpoint on the virtual network that contains VM1.

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. You plan to implement self-service password reset (SSPR) in Azure AD.You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain. What should you do?

Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

Deploy the Azure AD Password Protection proxy service to the on premises network.

Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

Grant the Change password permission for the domain to the Azure AD Connect service account.

Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2.You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.What should you do first?

Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

From the Azure portal, generate a new onboarding script.

Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

Hybrid Azure AD join Server1 and Server2.

Create an Azure cloud-only account for Admin1.

You have an Azure virtual machine named VM1 that runs Windows Server.You have an Azure subscription that has Microsoft Defender for Cloud enabled.You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.What should you do?

Configure VM1 to use a system-assigned managed identity.

Add the PowerShell Desired State Configuration (DSC) extension to VM1.

Configure VM1 to use a user-assigned managed identity.

Configure VM1 to use a system-assigned managed identity.

Add the Custom Script Extension to VM1.

You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:Size: D2s_v4Operating system disk: 127-GiB standard SSDData disk 128-GiB standard SSDVirtual machine generation: Gen 2You plan to perform the following changes to VM1:Change the virtual machine size to D4s_v4.Detach the data disk.Add a new standard SSD.Which changes require downtime for VM1?

Changing the virtual machine size only.

Detaching the data disk only and adding a new standard SSD.

Changing the virtual machine size only.

Adding a new standard SSD only.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC. You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?

From a Group Policy Object (GPO). add a rule to the Name Resolution Policy Table (NRPT).

On Served, run the Add-DnsServerTrustAnchor cmdlet.

On each member server, run the Add-DnsServerTrustAnchor cmdlet.

From a Group Policy Object (GPO). add a rule to the Name Resolution Policy Table (NRPT).

From a Group Policy Object (GPO). modify the Network List Manager policies.

You have a server that runs Windows Server and contains a shared folder named UserData.You need to limit the amount of storage space that each user can consume in UserData.What should you use?

File Server Resource Manager (FSRM)

Distributed File System (DFS) Namespaces

File Server Resource Manager (FSRM)

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.The domain contains two servers named Server1 and Server2.Server1 contains a disk named Disk2. Disk2 contains a folder named UserDat a. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup.Server1 fails.You connect Disk2 to Server2.You need to ensure that you can access all the files on Disk2 as quickly as possible.What should you do?

Install the Data Deduplication server role.

Restore files from Azure Backup.

Install the File Server Resource Manager server role.

Install the Data Deduplication server role.

Microsoft AZ-800 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains the objects shown in the following table.

Microsoft AZ-800 image Question 12 88238 10022024015633000000

You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies What should you do?

Change the scope of Group2 to Universal

Clear the Configure device writeback option.

Change the scope o' Group1 and Group2 to Global

Select the Configure Hybrid Azure AD join option.

Comment (0)

Microsoft AZ-800 Practice Test 2

Question

Microsoft AZ-800 Practice Tests

Practice Tests