Weekend Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

Home > Microsoft > Microsoft Certified: Windows Server Hybrid Administrator Associate > AZ-800

AZ-800 Administering Windows Server Hybrid Core Infrastructure Question and Answers

Question # 4

You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

A.

Admin1 only

B.

Admin3 only

C.

Admin1 and Admin3 only

D.

Admin1 Admin2. and Admm3

Full Access
Question # 5

You need to meet the technical requirements for VM1.

Which cmdlet should you run first? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 6

Task 7

You need to collect the recommended Windows Performance Counters from SRV1 in a Log Analytics workspace.

The required tiles are stored in a shared folder named \dc\install.

Full Access
Question # 7

Task 6

You need to enable nested visualization for a virtual machine named VM1 onSRV1.

Full Access
Question # 8

You need to meet the technical requirements for VM3

On which volumes can you enable Data Deduplication?

A.

D and E only

B.

C, D, E, and F

C.

D only

D.

D and E only

E.

D, E, and F only

Full Access
Question # 9

Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 10

You need to meet the technical requirements for User1. The solution must use the principle of least privilege.

What should you do?

A.

Add Users1 to the Server Operators group in contoso.com.

B.

Create a delegation on contoso.com.

C.

Add Users1 to the Account Operators group in contoso.com.

D.

Create a delegation on OU3.

Full Access
Question # 11

You need to meet the technical requirements for Server4.

Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 12

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Full Access
Question # 13

You need to meet the technical requirements for the site links. Which users can perform the required tasks?

A.

Admin1 only

B.

Admin1 and Admin3 only

C.

Admin1 and Admin2 only

D.

Admin3 only

E.

Admin1, Adrrun2. and Admin3

Full Access
Question # 14

You need to meet the technical requirements for VM2.

What should you do?

A.

Implement shielded virtual machines.

B.

Enable the Guest services integration service.

C.

Implement Credential Guard.

D.

Enable enhanced session mode.

Full Access
Question # 15

Which groups can you add lo Group3 and Groups? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Full Access
Question # 16

You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

A.

security filtering for the link of GP04

B.

security filtering for the link of GPO1

C.

loopback processing in GPO4

D.

the Enforced property for the link of GP01

E.

loopback processing in GPO1

F.

the Enforced property for the link of GP04

Full Access
Question # 17

You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 18

You need to implement an availability solution for DHCP that meets the networking requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

On DHCP1. create a scope that contains 25 percent of the IP addresses from Scope2.

B.

On the router in each office, configure a DHCP relay.

C.

DHCP2. configure a scope that contains 25 percent of the IP addresses from Scope 1 .

D.

On each DHCP server, install the Failover Clustering feature and add the DHCP cluster role.

E.

On each DHCP scope, configure DHCP failover.

Full Access
Question # 19

You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

A.

Create an Azure private DNS zone named corp.fabhkam.com.

B.

Create a virtual network link in the coip.fabnkam.c om Azure private DNS zone.

C.

Create an Azure DNS zone named corp.fabrikam.com.

D.

Configure the DNS Servers settings for Vnet1.

E.

Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.

F.

On DC3, install the DNS Server role.

G.

Configure a conditional forwarder on DC3.

Full Access
Question # 20

You need to meet the security requirements for passwords.

Where should you configure the components for Azure AD Password Protection? lo answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE Each correct selection is worth one point.

Full Access
Question # 21

DC1 fails.

You need to meet the technical requirements for the schema master.

Yourunntdsutil.exe.

Which five commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order?

Full Access
Question # 22

Which two languages can you use for Task1? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Java

B.

Bicep

C.

JavaScript

D.

Python

E.

PowerShell

Full Access
Question # 23

You need to implement the planned change for Data1.

Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 24

You need to meet technical requirements for HyperV1.

Which command should you run? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 25

You need to implement the planned changes for Microsoft Entra users to sign in to Server1.

Which PowerShell cmdlet should you run?

A.

Add-ADComputerServiceAccount

B.

Set-AzVM

C.

Set-AzVMExtension

D.

New-ADComputer

Full Access
Question # 26

You need to implement the planned changes for the Azure DNS Private Resolver.

Which private DNS zones can you use for name resolution?

A.

Zone1.com only

B.

Zone2.com only

C.

Zone1.com and Zone2.com only

D.

Zone2.com and Zone3.com only

E.

Zone1.com, Zone2.com, and Zone3.com

Full Access
Question # 27

You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.

What should you implement?

A.

Microsoft Entra Connect cloud sync

B.

Active Directory Federation Services (AD FS)

C.

Microsoft Entra Connect in staging mode

D.

Microsoft Entra Connect in active mode

Full Access
Question # 28

You have an Azure virtual machine named VM1 that runs Windows Server.

You need to ensure that administrators request access to VM1 before establishing a Remote Desktop connection.

What should you configure?

A.

Azure Front Door

B.

Microsoft Defender for Cloud

C.

Azure AD Privileged Identity Management (PIM)

D.

a network security group (NSG)

Full Access
Question # 29

Your network contains an Active Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.

You plan to store a DNS zone in a custom active Directory partition.

You need to create the Active Directory partition for the zone. The partition replicate to only four of the domain controllers.

What should you use?

A.

Active Directory Sites and Services

B.

Active Directory Administrator Center

C.

dnscmd.exe

D.

DNS Manager

Full Access
Question # 30

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.

You need to configure resources based constrained delegation so that the users In contoso.com can use Windows Admin Center on Server) to connect to Server? How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Full Access
Question # 31

You have a Group Policy Object (GPO) named GPO1 that contains user settings only.

You plan to apply GPO1 to a global security group named Group1.

You link GP01 to the domain, and you remove all the permissions granted to the Authenticated Users group.

You need to configure permissions for GP01 to meet the following requirements.

• GPO1 must apply only to the users in Group 1.

• The solution must use the principle of least privilege

Full Access
Question # 32

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You plan to implement self-service password reset (SSPR) in Azure AD.

You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.

What should you do?

A.

Deploy the Azure AD Password Protection proxy service to the on premises network.

B.

Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

C.

Grant the Change password permission for the domain to the Azure AD Connect service account.

D.

Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

Full Access
Question # 33

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role. Server1 contains a single DHCP scope named Scope1.

You deploy five printers to the network.

You need to ensure that the printers are always assigned the same IP address.

Solution: You configure the DHCP scope options for Scope1.

Does this meet the requirement?

A.

Yes

B.

No

Full Access
Question # 34

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. Server1 contains a virtual machine named VM1 that runs Windows Server.

You need to install the Hyper-V server role on VM1.

Which PowerShell command should you run first? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 35

Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains the objects shown in the following table.

You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies What should you do?

A.

Change the scope of Group2 to Universal

B.

Clear the Configure device writeback option.

C.

Change the scope o' Group1 and Group2 to Global

D.

Select the Configure Hybrid Azure AD join option.

Full Access
Question # 36

You have an Active Directory Domain Services (AD DS) domain that contains a group named Group1.

You need to create a group managed service account (gMSA) named Account1. The solution must ensure that Group1 can use Account1.

How should you complete the script? To answer, select the appropriate options in the answer area,

NOTE: Each correct selection is worth one point.

Full Access
Question # 37

You have a server named Server 1 that runs Windows Server and has the Hyper-V server role installed.

Server1 hosts a virtual machine named VM1. Server1 has an NV Me storage device that is assigned to VM1 by using Discrete Device Assignment.

You need to make the device available to the host.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 38

You need to ensure that VM3 meets the technical requirements.

What should you install first?

A.

Enhanced Storage

B.

File Server Resource Manager (FSRM)

C.

Windows Standards-Based Storage Management

D.

the iSNS Server service

Full Access
Question # 39

You need to ensure that Automanage meets the technical requirements.

On which Azure virtual machines should you enable Automanage?

A.

Server1 only

B.

Server2 only

C.

Server1 and Server2 only

D.

Server2 and Server3 only

E.

Server1 and Server4 only

Full Access
Question # 40

You need to ensure that data availability on SSPace1 meets the technical requirements.

What is the maximum number of physical disks that can fail on each disk? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 41

You have an on-premises server that runs Windows Server and contains the folders shown in the following table.

You have an Azure subscription.

You plan to implement Azure File Sync

Which folders can be added as Azure File Sync server endpoints?

A.

Folder1 and Folder? only

B.

Folder1, FoWer2, and FoWet3

C.

Folder1 only

D.

Folder? and Foldet3 only

E.

Folder3 only

F.

Folder? only

Full Access
Question # 42

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.

You need 10 limit which Hyper-V module cmdlets helpdesk users can use when administering Server 1 remotely.

You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files.

How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 43

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You plan to manage VM1 by using a PowerShell runbook.

You need to create the runbook. What should you create first?

A.

an Azure workbook

B.

a Microsoft Power Automate flow

C.

a Log Analytics workspace

D.

an Azure Automation account

Full Access
Question # 44

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant Group writeback is enabled in Azure AD Connect.

The AD DS domain contains a server named Server1 Server 1 contains a shared folder named share1.

You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2 account contains a share named shared

You need to create a security group that meets the following requirements:

• Can contain users from the AD DS domain

• Can be used to authorize user access to share 1 and share2

What should you do?

A.

in the AD DS domain, create a universal security group

B.

in the Azure AD tenant create a security group that has assigned membership

C.

in the Azure AD Tenant create a security group that has dynamic membership.

D.

in the Azure AD tenant create a Microsoft 365 group

Full Access
Question # 45

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant

You have an on-premises web app named WebApp1 that only supports Kerberos authentication.

You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access