Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 1:

  SIMULATION

  You need to register SRV1 to sync Azure file shares. The registration must use the 12345678 Storage Sync Service.

  The required source files are located in a folder named \\dc1.contoso.com\install.

  You do NOT need to configure file share synchronization at this time, and you do NOT need to update the agent.

  A. See the explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See the explanation below.

  ---

  Explanation

  Install the Azure File Sync agent

  The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share.

  Step 1: Browse to the folder folder named \\dc1.contoso.com\install.

  Step 2: Double-click the MSI package located to start the Azure File Sync agent installation.

  Step 3: Complete the wizard.

  Register Windows Server with Storage Sync Service

  Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.

  The Server Registration UI should open automatically after installation of the Azure File Sync agent.

  Step 4: When the Server Registration UI opens, select Sign-in to begin.

  After you sign in, you are prompted for the following information:

  

  Azure Subscription: The subscription that contains the Storage Sync Service.

  Resource Group: The resource group that contains the Storage Sync Service.

  Storage Sync Service: The name of the Storage Sync Service with which you want to register. \[Here 12345678]

  Step 5: Click Register.

  References:

  https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide

• Question 2:

  You have an on premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant. The domain contains two servers named Server1 and Server2.

  A user named Admin1 is a member of the local Administrators group on Server1 and Server2.

  You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1.

  You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.

  What should you do first?

  A. From the Azure portal, generate a new onboarding script.
  B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1.
  C. Hybrid Microsoft Entra join Server1 and Server2.
  D. Create an Azure cloud-only account for Admin1.
  B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

• Question 3:

  HOTSPOT

  You have a server named Server1 that runs Windows Server. Server1 has a single network interface and the Hyper-V virtual switches shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

• Question 4:

  You have an on-premises server that runs Windows Server and contains the folders shown in the following table.

  You have an Azure subscription.

  You plan to implement Azure File Sync

  Which folders can be added as Azure File Sync server endpoints?

  A. Folder1 and Folder2 only
  B. Folder1, FoWer
  C. Folder1 only
  D. Folder1 and Foldet3 only
  E. Folder3 only
  F. Folder2 only
  A. Folder1 and Folder2 only

  ---

  Explanation

  A server endpoint can be created only on an NTFS volume. ReFS, FAT, FAT32, and other file systems aren't currently supported by Azure File Sync.

  A server endpoint can't be nested. It can coexist on the same volume in parallel with another endpoint.

  References:

  https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-release-notes

• Question 5:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role. Server1 contains a single DHCP scope named Scope1.

  You deploy five printers to the network.

  You need to ensure that the printers are always assigned the same IP address.

  Solution: You create a DHCP address exclusion for each printer.

  Does this meet the requirement?

  A. Yes
  B. No
  B. No

• Question 6:

  HOTSPOT

  You have an Azure subscription and a computer named Computer1 that runs Windows 11.

  From the Azure portal, you deploy a virtual machine named VM1 that runs Windows Server. You configure VM1 to use the default settings.

  You need to ensure that you can connect to VM1 by using PowerShell remoting.

  Which cmdlet should you run, and what should you use to run the cmdlet? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: A PowerShell session on VM1

  Box 2: Enable-AzVMPSRemoting

  Connecting to VMs with Azure PSRemoting

  Enabling Azure PSRemoting

  With the Enable-AzureVMPSRemoting cmdlet, Azure PowerShell configures the pieces necessary for running commands and code against target VMs in Azure, much like you do on-premises. To do this, it performs the following:

  Based on the Operating System, it ensures WinRM (Windows) or SSH (Linux) is setup.

  It ensures Network Security Group rules are in place to allow communication to the target, again based on communications type.

  For Linux VMs, it installs PowerShell core on the target system.

  To enable your VMs for PSRemoting in Azure, you would run a command similar to these for windows and Linux VMs:

  # Enable Windows VM PS Azure:\> Enable-AzVMPSRemoting -Name 'vm-win-01' -ResourceGroupName 'azure-cloudshell-demo' -Protocol https -OsType Windows

  # Enable Linux VM PS Azure:\> Enable-AzVMPSRemoting -Name 'vm-lin-01' -ResourceGroupName 'azure-cloudshell-demo' -Protocol ssh -OsType Linux

  References:

  https://techcommunity.microsoft.com/t5/itops-talk-blog/powershell-basics-connecting-to-vms-with-azure-psremoting/ba-p/428403

• Question 7:

  DRAG DROP

  You have a server named Server1.

  You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.

  You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://redmondmag.com/articles/2018/07/31/storage-spaces-windows-server-2016-1.aspx

  https://redmondmag.com/articles/2018/08/02/storage-spaces-windows-server-2016-2.aspx

• Question 8:

  You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server.

  You plan to manage VM1 by using a PowerShell runbook.

  You need to create the runbook.

  What should you create first?

  A. an Azure Automation account
  B. an Azure workbook
  C. a Log Analytics workspace
  D. a Microsoft Power Automate flow
  A. an Azure Automation account

  ---

  Explanation

  Create Automation PowerShell runbook using managed identity

  This tutorial walks you through creating a PowerShell runbook in Azure Automation that uses a managed identity, rather than the Run As account to interact with resources. PowerShell runbooks are based on Windows PowerShell. A managed identity from Azure Active Directory (Azure AD) allows your runbook to easily access other Azure AD-protected resources.

  Prerequisites

  * An Azure Automation account with at least one user-assigned managed identity.

  * Etc.

  References:

  https://learn.microsoft.com/en-us/azure/automation/learn/powershell-runbook-managed-identity

• Question 9:

  You need to meet the technical requirements for Server1.

  Which users can currently perform the required tasks?

  A. Admin1 only.
  B. Admin3 only.
  C. Admin1 and Admin3 only.
  D. Admin1, Admin2 and Admin3.
  C. Admin1 and Admin3 only.

• Question 10:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.

  You have a partner company named ADatum Corporation that has an AD DS forest named adatum.com.

  You configure the trust relationship shown in the following exhibit.

  

  The forests contain the groups shown in the following table.

  

  The ADatum domains contain the member servers shown in the following table.

  

  For each of the following statements, select Yes if the statement is true Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  No - Group2 can be assigned permissions for the resources on Server2.

  Group2 is a Domain local group in the adatum.com domain.

  Server2 is in the west.adatum.com.

  A domain local group in one domain cannot be directly assigned resources in a server located in a subdomain. Domain local groups are primarily used to grant permissions to resources within the same domain where they are created. While they can contain members from other domains, their scope of permissions is limited to the domain they belong to.

  Note:

  Domain local groups are designed to manage access to resources within their own domain.

  Box 2: Yes

  Yes - Group3 can be added as a member of Group1. Group3 is a Global group in the west.adatum.com. Group1 is a Domain local group in contoso.com.

  A global group from one domain can be added as a member to a domain local group in another domain, provided the domains trust each other. This is a common practice for managing permissions across domains

  Box 3: Yes

  Yes - Group4 can be assigned permissions for the resources on Server1. Group4 is a Universal group in the contoso.com domain.

  Server1 is in the adatum.com domain. A Universal group in one domain can indeed be assigned permissions to resources in another domain, provided both domains are part of the same Active Directory forest. This is one of the key features of Universal groups, which allows for centralized management of permissions across multiple domains.

  References:

  https://blog.netwrix.com/2023/04/26/active-directory-nested-groups/

  https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups