[Mar 25, 2022] Latest Windows Server AZ-800 Actual Free Exam Questions [Q15-Q38]

March 25, 2022 admin 0

Categories : AZ-800 , Microsoft

Rate this post

[Mar 25, 2022] Latest Windows Server AZ-800 Actual Free Exam Questions

Windows Server AZ-800 Dumps Updated Practice Test and 95 unique questions

NEW QUESTION 15
You need to meet the technical requirements for VM1.
Which cmdlet should you run first? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Topic 2, Fabrikam inc.
On-premises Network
The New York and Seattle offices are connected by using redundant WAN links.
The client computers in each office get IP addresses from their local DHCP server.
DHCP! contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.
Group Policy Object (GPOs)
The cwp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

Requirements:
Fabrikam Identifies the following planned changes:
* Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
* Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
* Create three Azure file shares named newyorkfiles, seattfefiles, and companyfiles.
* Create a domain controller named dc3.corp.fabrikam,com in Vnet1.
* Deploy an Azure Virtual Desktop host pool lo Vnet1. The Azure Virtual Desktop session hosts will be hybrid Azure AD joined.
* License all servers for Microsoft Defender for servers.
* Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.
Networking Requirements
Fabrikam identifies the following security requirements:
* Apply GP04 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout lime manually from their client computer.
* Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
* Prevent user passwords from containing all or part of words that are based on the company name, such as Fab. fabrikam or fsbr! |.
* Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
* Prevent domain controllers from directly contacting hosts on the internet.
File Sharing Requirements
You need to configure the synchronization of Azure files to meet the following requirements:
* Ensure that seattlefiles syncs to FS2.
* Ensure that newyorkfiles syncs to FS1.
* Ensure that companyfiles syncs to both FS1 and FS2.

NEW QUESTION 16
You need to implement an availability solution for DHCP that meets the networking requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

On DHCP1. create a scope that contains 25 percent of the IP addresses from Scope2.

On the router in each office, configure a DHCP relay.

DHCP2. configure a scope that contains 25 percent of the IP addresses from Scope 1 .

On each DHCP server, install the Failover Clustering feature and add the DHCP cluster role.

On each DHCP scope, configure DHCP failover.

Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831385(v=ws.11)

NEW QUESTION 17
You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

transparent

I2bridge

NAT

I2tunnel

Reference:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/network-drivers-topologies

NEW QUESTION 18
You have servers that have the DNS Server role installed. The servers are configured as shown in the following table.

All the client computers in the New York office use Server2 as the DNS server.
You need to configure name resolution in the New York office to meet the following requirements:
Ensure that the client computers in New York can resolve names from contoso.com.
Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200.
The solution must NOT require modifications to Server1.
Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

a forwarder

a conditional forwarder

a delegation

a secondary zone

a reverse lookup zone

A conditional forwarder is required for contoso.com.
A forwarder is required for all other domains.
When you have a conditional forwarder and a forwarder configured, the conditional forwarder will be used for the specified domain.
You could use a secondary zone for contoso.com but that would require a configuration change on Server1.

NEW QUESTION 19
You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.
Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to Server1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – From Server1, stop VM1.
2 – From Server1, run the Remove-VMAssignableDevice cmdlet.
3 – From Server1, run the Mount-VMHost AssignableDevice cmdlet.
4 – From Server1, enable the device by using Device Manager.
Reference:
https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/deploying-storage-devices-using-dda

NEW QUESTION 20
Which groups can you add lo Group3 and Groups? To answer, select the appropriate options in the answer are a. NOTE Each correct selection is worth one point.

NEW QUESTION 21
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.
Does this meet the goal?

Yes

NEW QUESTION 22
Your network contains an Active Directory Domain Services (AD DS) domain named conioso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: from Active Directory Users and Computers, you right-click contoso.com in the console tree, and then select Operations Master
Does this meet the goal?

Yes

NEW QUESTION 23
You have a server named Server1 that runs Windows Server. Server1 has the storage pools shown in the following table.

You plan to create a virtual disk named VDisk1 that will use storage tiers. Which pools can you use to create VDisk1 ?

Pool2 and Pool3 only

Pool 2only

Pool only

Pool, Pool2, and Pool3

Pool1 and Pool2 only

Pool1 and Pool3 only

Pool3 only

Storage tiering requires both standard HDDs and SSDs. We cannot use Pool1 because it does not have any SSDs.

NEW QUESTION 24
You have a Windows Server container host named Server1 that has a single disk.
On Server1, you plan to start the containers shown in the following table.

Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

NEW QUESTION 25
You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point

Create an Azure private DNS zone named corp.fabhkam.com.

Create a virtual network link in the coip.fabnkam.com Azure private DNS zone.

Create an Azure DNS zone named corp.fabrikam.com.

Configure the DNS Servers settings for Vnet1.

Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.

On DC3, install the DNS Server role.

Configure a conditional forwarder on DC3.

Virtual machines in an Azure virtual network receive their DNS configuration from the DNS settings configured on the virtual network. You need to configure the Azure virtual network to use DC3 as the DNS server. Then all virtual machines in the virtual network will use DC3 and their DNS server.

NEW QUESTION 26
You have 10 on-premises servers that run Windows Server.
You plan to use Azure Network Adapter to connect the servers to the resources in Azure.
Which prerequisites do you require on-premises and in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network-adapter

NEW QUESTION 27
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.
in the contoso.com domain, you create two users named Admin1 and Admin2.
You need to ensure that the users can perform the following tasks:
* Admin1 can create and manage Active Directory sites.
* Admin2 can deploy domain controller to the easl.conloso.com domain.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.

NEW QUESTION 28
Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com The domain contains a server named Server1 and the users shown In the following table.

Server1 contains a folder named D:Folder1. The advanced security settings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)

Folder1 is shared by using the following configurations

NEW QUESTION 29
You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table.

On which volumes can you use BitLocker Drive Encryption (BitLocker) and disk quotas? To answer select the appropriate options in the answer are
a. NOTE Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview

NEW QUESTION 30
You need to meet the security requirements for passwords.
Where should you configure the components for Azure AD Password Protection? lo answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.

NEW QUESTION 31
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You create a new subnet object that is associated to Site1.
Does this meet the goal?

Yes

NEW QUESTION 32
You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

transparent

I2bridge

NAT

I2tunnel

Reference:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/network-drivers-topologies

NEW QUESTION 33
Your network contains an Active Directory Domain Services (AD DS) domain.
You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences.
You plan to link GPO1 to the domain.
You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort.
Which type of item level targeting should you use?

Domain

Operating System

Security Group

Environment Variable

Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789189(v=ws.11)#operating-system-targeting

NEW QUESTION 34
You need to meet the technical requirements for Server4.
Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://4sysops.com/wiki/enable-powershell-remoting/

NEW QUESTION 35
You need to configure Azure File Sync to meet the file sharing requirements. What should you do? To answer, select the appropriate options in the answer are a. NOTE Each correct selection is worth one point.

NEW QUESTION 36
What should you implement for the deployment of DC3?

Azure Active Directory Domain Services (Azure AD DS}

Azure AD Application Proxy

an Azure virtual machine

an Azure AD administrative unit

Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
In a hybrid network, you can configure Azure virtual machines as domain controllers. The domain controllers in Azure communicate with the on-premises domain controllers in the same way that on-premises domain controllers communicate with each other.

NEW QUESTION 37
You need to configure remote administration to meet the security requirements. What should you use?

the Remote Desktop extension for Azure Cloud Services

just in time (JIT) VM access

an Azure Bastion host

Azure AD Privileged Identity Management (PIM)

NEW QUESTION 38
You have on-premises file servers that run Windows Server as shown in the following table.

You have the Azure file shares shown in the following table.

You add a Storage Sync Service named Sync1 and an Azure File Sync sync group named Group1. Group1 uses share1 as a cloud endpoint.
You register Server1 and Server2 with Sync1. You add D:Folder1 from Server1 as a server endpoint in Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-planning

Loading …

Microsoft AZ-800 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage users and groups in multi-domain and multi-forest scenarios Manage Windows Servers and workloads in a hybrid environment
Topic 2	Configure and manage multi-site, multi-domain, and multi-forest environments Troubleshoot flexible single master operations (FSMO) roles
Topic 3	Configure File Server Resource Manager (FSRM) quotas Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
Topic 4	Configure and manage Windows Server file shares Implement high availability for virtual machines
Topic 5	Implement site-to-site virtual private network (VPN) Integrate Windows Server DNS with Azure DNS private zones
Topic 6	Manage VM using PowerShell Remoting, PowerShell Direct, and HVC.exe Deploy Azure services using Azure Virtual Machine extensions on non-Azure machines
Topic 7	Manage Windows Servers and workloads by using Azure services Implement DSC to prevent configuration drift in IaaS machines
Topic 8	Implement and manage an on-premises and hybrid networking infrastructure Implement on-premises and hybrid network connectivity