Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 131:

  HOTSPOT

  You need to sync files from an on premises server named Server1 to Azure by using Azure File Sync.

  You have a cloud tiering policy that is configured for 30 percent free space and 70 days.

  Volume E on Server1 is 500 GB.

  A year ago, you configured E:\Data on Server1 to sync by using Azure File Sync. The files that are visible in E:\Data are shown in the following table.

  

  Volume E does NOT contain any other files.

  Where are File1 and File3 located? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  File 1: File server and Azure file share File 3: Azure file share only

  Explanation with samples, as nazgul250 posted below:

  https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-policy

  upvoted 18 times

• Question 132:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains group managed service accounts (gMSAs).

  You have a server named Server1 that runs Windows Server and is in a workgroup. Server! hosts Windows containers.

  You need to ensure that the Windows containers can authenticate to contoso.com.

  Which three actions should you perform in sequence?

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 133:

  You have an Azure virtual machine named VM1 that contains the drives shown in the following table.

  

  On VM1, you plan to install an app named App1. The data for App1 must be stored on a persistent data disk assigned to drive D.

  You need assign the data disk to drive D.

  What should you do on VM1 first?

  A. Change the drive letter of the Temporary Storage drive to
  B. Move pagefile.sys to the Operating System drive.
  C. Stop (deallocate) VM1.
  D. Expand the Temporary Storage drive.
  C. Stop (deallocate) VM1.

• Question 134:

  HOTSPOT

  Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain.

  The domains contain the servers shown in the following table.

  

  You need to configure resource based constrained delegation so that the users in contoso.com can use Windows Admin Center on Server1 to connect to Server2.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-constrained-delegation-overview

  https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-adcomputer?view=windowsserver2022-ps

• Question 135:

  You have an Active Directory Domain Services (AD DS) domain. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server.

  You sign in to Server1 by using a domain account and start a remote PowerShell session to Server2. From the remote PowerShell session, you attempt to access a resource on Server3, but access to the resource is denied.

  You need to ensure that your credentials are passed from Server1 to Server3. The solution must minimize administrative effort.

  What should you do?

  A. Configure Kerberos constrained delegation.
  B. Configure Just Enough Administration (JEA).
  C. Configure selective authentication for the domain.
  D. Disable the Enforce user logon restrictions policy setting for the domain.
  A. Configure Kerberos constrained delegation.

  ---

  Explanation

  Configuring Kerberos constrained delegation allows you to pass your credentials from Server1 to Server3 when accessing a resource. Constrained delegation is a Kerberos feature that restricts the servers to which a service can delegate a user's credentials. This ensures that the delegation is secure and limited to specific services.

• Question 136:

  You need to meet the technical requirements for VM2.

  What should you do?

  A. Implement shielded virtual machines.
  B. Enable the Guest services integration service.
  C. Implement Credential Guard.
  D. Enable enhanced session mode.
  D. Enable enhanced session mode.

• Question 137:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain.

  The domain contains three servers named SRV1, SRV2, and SRV3 that run Windows Server. The domain contains a user named User1.

  You plan to perform the following tasks:

  1. Sign in to SRV1 as User1.

  2. Establish a PowerShell remoting session from SRV1 to SRV2.

  3. From the remoting session, invoke a command that targets SRV3 and runs the command in the security context of User1.

  You need to configure resource-based Kerberos constrained delegation to support the planned tasks.

  How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: $SRV3

  $SRV3 is the target server.

  Box 2: $SRV2

  $SRV2 is the source server.

  Set the PrincipalsAllowedToDelegateToAccount property: Use the Set-ADComputer cmdlet to modify the target server's AD object. The PrincipalsAllowedToDelegateToAccount parameter should be set to the source server's AD computer object.

  For example:

  Code

  # Get the source and target server AD objects

  $SourceServer = Get-ADComputer -Identity "SourceServerName"

  $TargetServer = Get-ADComputer -Identity "TargetServerName"

  # Configure constrained delegation

  Set-ADComputer -Identity $TargetServer -PrincipalsAllowedToDelegateToAccount $SourceServer

  References:

  https://learn.microsoft.com/en-us/powershell/scripting/security/remoting/ps-remoting-second-hop

• Question 138:

  SIMULATION

  You use a Group Policy preference to map \\dc1.contoso.com\install as drive H for all users. If a user already has an existing drive mapping for H, the new drive mapping must take precedence.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Mapping drives using Group Policy preferences

  Steps involved:

  1. Open Group Policy Management.

  2. Right-click the domain or the required subfolder to create a new GPO, or select an already existing one. Right-click and select Edit to open the Group Policy Management Editor.

  3. Go to User Configuration > Preferences > Windows Settings > Drive Maps.

  4. Right-click and select New > Mapped Drive.

  5. Under the General tab (see Figure below), do the following:

  

  6. Action: Select Create or Update.

  7. Location: Specify the full file path, e.g. \\Anjali-dc1\c.

  Specify: \\dc1.contoso.com\install

  8. Reconnect: Enable this to auto connect the drive.

  9. Label as: Pick a suitable name for the shared drive, e.g. SharedDrive.

  10. Drive Letter: Select a suitable letter for the drive, e.g. K.

  Specify H (11. Connect as: Enter a username and password if you want users to connect with certain credentials other than their own Windows login credentials.)

  (12. Hide/Show this drive: Select whether you want to hide the folder or make it visible on the network.) (13. Hide/Show all drives: Select whether, by default, all the shared drives/folders are hidden or visible.)

  References:

  https://blogs.manageengine.com/active-directory/active-directory-academy/2019/11/18/mapping-drives-using-group-policy-preferences.html

• Question 139:

  You have a server named Server1 that runs Windows Server, has the File Server Resource Manager role service installed, and contains the volumes shown in the following table.

  

  You plan to configure file screens on Server1.

  On which volumes can you configure a file screen?

  A. C, D, E, and F
  B. F only
  C. C and F only
  D. C, E and F only
  E. E and F only
  C. C and F only

  ---

  Explanation

  File Server Resource Manager (FSRM) in Windows Server can only be configured on volumes formatted with the NTFS file system. It does not support volumes formatted with ReFS or other file systems like ExFAT.

  References:

  https://learn.microsoft.com/en-us/windows-server/storage/fsrm/fsrm-overview

• Question 140:

  Your network contains an Active Directory Domain Services (AD DS) domain.

  The domain contains the servers shown in the following table.

  

  You need to ensure that from Server1, you can use Windows Admin Center to manage the DHCP Server role on Server2.

  What should you do first?

  A. Install the DHCP Server Tools feature on Server1.
  B. Install a Windows Admin Center extension.
  C. Install the DHCP Server Tools feature on Server2.
  D. Modify the PowerShell remoting settings for Server2.
  B. Install a Windows Admin Center extension.