Home / Microsoft / AZ-800

Microsoft AZ-800 Practice Test - Questions Answers, Page 7

Question list

List of questions

Question 61

(0)

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user

Question 62

(0)

You have an Azure virtual machine named VM1 that runs Windows Server. You have an Azure subscription that has Microsoft Defender for Cloud enabled. You need to ensure that you can use the Azure Po

Question 63

(0)

You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations: Size: D2s_v4 Operating system disk: 127-GiB standard SSD Data disk 128-GiB standard SSD

Question 64

(0)

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might

Question 65

(0)

You have an on-premises network that is connected to an Azure virtual network by using a Site-to- Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet

Question 66

(0)

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might

Question 67

(0)

You have servers that have the DNS Server role installed. The servers are configured as shown in the following table. All the client computers in the New York office use Server2 as the DNS server

Question 68

(0)

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was sign

Question 69

(0)

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might

Question 70

(0)

You have a server that runs Windows Server and contains a shared folder named UserData. You need to limit the amount of storage space that each user can consume in UserData. What should you use?

Related questions

Task 4 You need to run a container that uses the mcrmicrosoft.com/windows/servercofe/iis image on SRV1. Port 80 on the container must be published to port 5001 on SRV1 and the container must run in the background

SIMULATION LAB 8 You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255.

SIMULATION LAB 10 You need to configure Hyper-V to ensure that running virtual machines can be moved between SRV1 and SRV2 without downtime. You do NOT need to move any virtual machines at this time.

SIMULATION LAB 9 You plan to create group managed service accounts (gMSAs). You need to configure the domain to support the creation of gMSAs.

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The root domain contains the domain controllers shown in the following table. A failure of which domain controller will prevent you from creating application partitions?

Task 10 You use a Group Policy preference to map \\dd.contoso.com\instal1 as drive H for all users>. If a user already has an existing drive mapping for H. the new drive mapping must take precedence.

DRAG DROP You have a disaggregated cluster deployment. The deployment contains a scale-out file server (SOFS) cluster that runs Windows Server and a compute duster that has the Hyper-V role enabled. You need to implement Storage Quality of Service (QoS). The solution must ensure that you can control the bandwidth usage between the SOFS cluster and the Hyper-V cluster. Which cmdlet should you run on each cluster? To answer, drag the appropriate cmdlets to the correct clusters. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

HOTSPOT Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table. You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients: VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections. For each of the following statements, select Yes If the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

HOTSPOT Your network contains two VLANs for client computers and one VLAN for a datacenter Each VLAN is assigned an IPv4 subnet Currently, all the client computers use static IP addresses. You plan to deploy a DHCP server to the VLAN in the datacenter. You need to use the DHCP server to provide IP configurations to all the client computers. What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Task 8 You need to deploy a new primary DNS zone named fabrikam.com to DC1. The zone must be signed.

Question 61

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2.

You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.

What should you do first?

From the Azure portal, generate a new onboarding script.

Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

Hybrid Azure AD join Server1 and Server2.

Create an Azure cloud-only account for Admin1.

Show Answer Comment (0)

Question 62

You have an Azure virtual machine named VM1 that runs Windows Server.

You have an Azure subscription that has Microsoft Defender for Cloud enabled.

You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.

What should you do?

Add the PowerShell Desired State Configuration (DSC) extension to VM1.

Configure VM1 to use a user-assigned managed identity.

Configure VM1 to use a system-assigned managed identity.

Add the Custom Script Extension to VM1.

Show Answer Comment (0)

Question 63

You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:

Size: D2s_v4

Operating system disk: 127-GiB standard SSD

Data disk 128-GiB standard SSD

Virtual machine generation: Gen 2

You plan to perform the following changes to VM1:

Change the virtual machine size to D4s_v4.

Detach the data disk.

Add a new standard SSD.

Which changes require downtime for VM1?

Detaching the data disk only and adding a new standard SSD.

Detaching the data disk only.

Changing the virtual machine size only.

Adding a new standard SSD only.

Show Answer Comment (0)

Question 64

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are planning the deployment of DNS to a new network.

You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: You configure Server2 and Server3 to forward DNS requests to 10.0.1.10.

Does this meet the goal?

Yes

Show Answer Comment (0)

Question 65

You have an on-premises network that is connected to an Azure virtual network by using a Site-to- Site VPN. Each network contains a subnet that has the same IP address space. The on-premises subnet contains a virtual machine. You plan to migrate the virtual machine to the Azure subnet.

You need to migrate the on premises virtual machine to Azure without modifying the IP address. The solution must minim administrative effort. What should you implement before you perform the migration?

Azure Extended Network

Azure Virtual Network NAT

Azure Application Gateway

Azure virtual network peering

Show Answer Comment (0)

Question 66

You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.conloso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2 and Server3, you configure a conditional forwarder for contoso.local.

Does this meet the goal?

Yes

Show Answer Comment (0)

Question 67

You have servers that have the DNS Server role installed. The servers are configured as shown in the following table.

All the client computers in the New York office use Server2 as the DNS server.

You need to configure name resolution in the New York office to meet the following requirements:

Ensure that the client computers in New York can resolve names from contoso.com.

Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200.

The solution must NOT require modifications to Server1.

Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

a forwarder

a conditional forwarder

a delegation

a secondary zone

a reverse lookup zone

Show Answer Comment (0)

Question 68

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC. You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace. What should you do?

On Served, run the Add-DnsServerTrustAnchor cmdlet.

On each member server, run the Add-DnsServerTrustAnchor cmdlet.

From a Group Policy Object (GPO). add a rule to the Name Resolution Policy Table (NRPT).

From a Group Policy Object (GPO). modify the Network List Manager policies.

Show Answer Comment (0)

Question 69

You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints. You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts. Solution: On Server2, you create a conditional forwarder for contoso.local and west.contoso.local. On Server3, you create a conditional forwarder for contoso.local and east.contoso.local. Does this meet the goal?

Yes