Microsoft Microsoft Certified: Windows Server Hybrid Administrator Associate AZ-800 Questions & Answers

• Question 1:

  DRAG DROP

  You create an Azure virtual machine named Server1 that runs Windows Server.

  Server1 has the disk configurations shown in the following exhibit.

  

  You need to create a new 100-GB volume on Server1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Create and attach a new data disk Add a data disk.

  1.

  Sign in to the Azure portal.

  2.

  Search for and select Virtual machines.

  3.

  Select a virtual machine from the list.

  4.

  On the Virtual machine pane, select Disks.

  5.

  On the Disks pane, select Create and attach a new disk.

  6.

  In the drop-downs for the new disk, make the selections you want, and name the disk.

  7.

  Select Save to create and attach the new data disk to the VM.

  Step 2: Initialize the disk Initialize a new data disk.

  1.

  Connect to the VM.

  2.

  Select the Windows Start menu inside the running VM and enter diskmgmt.msc in the search box. The Disk Management console opens.

  3.

  Disk Management recognizes that you have a new, uninitialized disk and the Initialize Disk window appears.

  4.

  Verify the new disk is selected and then select OK to initialize it.

  5.

  The new disk appears as unallocated. Right-click anywhere on the disk and select New simple volume. The New Simple Volume Wizard window opens.

  6.

  Etc.

  Step 3: Create a new simple volume

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal

• Question 2:

  DRAG DROP

  Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.

  You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.

  You need to recommend a deployment plan that meets the following requirements:

  1.

  Ensures that a user named User1 can perform the RODC installation on Server1

  2.

  Ensures that Server1 is in a new site named RemoteSite1

  3.

  Uses the principle of least privilege

  Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Pre-create an RODC account.

  You can deploy RODC using the Staged feature. It consists of pre-creating the RODC computer account in the ADUC console and basic setup.

  Step 2: Create a site and a subnet

  Step 3: Instruct User1 to run the Active Directory Domain Services installation Wizard on Server1.

  The Domain Controller Options page also enables you to choose the appropriate Active Directory logical site name from the forest configuration. By default, it selects the site with the most correct subnet. If there is only one site, it selects that

  site automatically.

  Important:

  If the server does not belong to an Active Directory subnet and there is more than one Active Directory site, nothing is selected and the Next button is unavailable until you choose a site from the list.

  Incorrect:

  * Add User1 to the Contoso\Administrators group.

  This is against the principle of least privilege.

  Reference:

  https://woshub.com/deploying-read-domain-controller-windows-server-2016/

  https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/rodc/install-a-windows-server-2012-active-directory-read-only-domain-controller--rodc---level-200

• Question 3:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table.

  

  Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)

  

  Folder1 is shared by using the following configurations:

  

  The share permissions for Share1 are shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  To access files in a shared folder, you need to be granted permissions on the folder (NTFS permissions) AND permissions on the share. The most restrictive permission of the folder permissions and share permissions apply.

  Box 1: Yes

  Group1 has Read access to Folder1 and Change access to Share1. Therefore, User1 can read the files in Share1.

  Box 2: No

  Group3 has Full Control access to Share1. However, Group3 has no permissions configured Folder1. Therefore, User3 cannot access the files in Share1.

  Box 3: Yes

  Group2 has write permission to Folder1. However, Group2 has no permission on Share1. Therefore, users in Group2 cannot access files in the shared folder.

  Access Based Enumeration when enabled hides files and folders that users do not have permission to access. However, Access Based Enumeration is not enabled on Share1. This is indicated by the FolderEnumerationMode

• Question 4:

  DRAG DROP

  You have two on-premises servers named Server1 and Server2 that run Windows Server.

  You have an Azure Storage account named storage1 that contains a file share named share1. Server1 syncs with share1 by using Azure File Sync.

  You need to configure Server2 to sync with share1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-server-registration https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-server-endpoint-create?tabs=azure-portal

• Question 5:

  DRAG DROP

  You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.

  You deploy five servers to the domain. You add the servers to a group named ITFarmHosts.

  You plan to configure a Network Load Balancing (NLB) cluster named NLBCluster.contoso.com that will contain the five servers.

  You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate.

  Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/create-the-key-distribution-services-kds-root-key https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts

• Question 6:

  DRAG DROP

  You have a server named Server1.

  You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.

  You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://redmondmag.com/articles/2018/07/31/storage-spaces-windows-server-2016-1.aspx

  https://redmondmag.com/articles/2018/08/02/storage-spaces-windows-server-2016-2.aspx

• Question 7:

  DRAG DROP

  You have a server named Server1 that has Windows Admin Center installed. The certificate used by Windows Admin Center was obtained from a certification authority (CA).

  The certificate expires.

  You need to replace the certificate.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.starwindsoftware.com/blog/change-the-windows-admin-center-certificate

• Question 8:

  DRAG DROP

  You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.

  Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.

  You need to make the device available to Server1.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/deploying-storage-devices-using-dda

• Question 9:

  DRAG DROP

  You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

  You rename Default-First-Site-Name as Site1.

  You plan to ship DC1, DC2, and DC3 to datacenters in different locations.

  You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:

  1.

  Each domain controller must reside in its own Active Directory site.

  2.

  The replication schedule between each site must be controlled independently.

  3.

  Interruptions to replication must be minimized.

  Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 10:

  DRAG DROP

  Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.

  You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.

  You need to recommend a deployment plan that meets the following requirements:

  1.

  Ensures that a user named User1 can perform the RODC installation on Server1

  2.

  Ensures that you can control the AD DS replication schedule to the Server1

  3.

  Ensures that Server1 is in a new site named RemoteSite1

  4.

  Uses the principle of least privilege

  Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Box 1.

  We need to create a site and subnet for the remote site. The new site will be added to the Default IP Site Link so we don't need to create a new site link. You configure the replication schedule on the site link.

  Box 2.

  When we pre-create an RODC account, we can specify who is allowed to attach the server to the prestaged account. This means that the User1 does not need to be added to the Domain Admins group.

  Box3.

  User1 can connect the RODC to the prestaged account by running the AD DS installation wizard.

  Reference:

  https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/rodc/install-a-windows-server-2012-active-directory-read-only-domain-controller--rodc---level-200