Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 161:

  HOTSPOT

  You plan to deploy an Azure virtual machine that will run Windows Server. The virtual machine will host an Active Directory Domain Services (AD DS) domain controller and a drive named F: on a new virtual disk.

  You need to configure storage for the virtual machine. The solution must meet the following requirements:

  1. Maximize resiliency for AD DS.

  2. Prevent accidental data loss.

  How should you configure the storage? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: F

  Create a separate virtual data disk for storing the database, logs, and sysvol folder for Active Directory. Do not store these items on the same disk as the operating system.

  Box 2: None

  By default, data disks that are attached to a VM use write-through caching. However, this form of caching can conflict with the requirements of AD DS. For this reason, set the Host Cache Preference setting on the data disk to None.

  References:

  https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/identity/adds-extend-domain

• Question 162:

  SIMULATION

  You need to use Azure File Sync to replicate the contents of C:\app on SRV1 to an Azure file share named share1.

  The required source files are located in a folder named \\dc1.contoso.com\install.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Step 1:

  Create a sync group and a cloud endpoint

  A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints.

  A server endpoint represents a path on a registered server. A server can have server endpoints in multiple sync groups. You can create as many sync groups as you need to appropriately describe your desired sync topology.

  A cloud endpoint is a pointer to an Azure file share.

  To create a sync group, in the Azure portal, go to your Storage Sync Service, and then select + Sync group:

  

  In the pane that opens, enter the following information to create a sync group with a cloud endpoint:

  Sync group name: The name of the sync group to be created. This name must be unique within the Storage Sync Service, but can be any name that is logical for you.

  Subscription: The subscription where you deployed the Storage Sync Service in Deploy the Storage Sync Service.

  Storage account: If you select Select storage account, another pane appears in which you can select the storage account that has the Azure file share that you want to sync with.

  Azure file share: The name of the Azure file share with which you want to sync

  Enter: share1

  Step 2:

  Create a server endpoint

  A server endpoint represents a specific location on a registered server, such as a folder on a server volume.

  To add a server endpoint, go to the newly created sync group. Under Server endpoints, select +Add server endpoint. The Add server endpoint blade opens. Enter the following information to create a server endpoint:

  

  Registered server: The name of the server or cluster where you want to create the server endpoint.

  Enter: SRV1

  Path: The path on the Windows Server to be synced to the Azure file share. The path can be a folder (for example, D:\Data), volume root (for example, D:\), or volume mount point (for example, D:\Mount).

  Enter: C\app

  Step 3:

  Create an Azure File Sync server endpoint

  To add a server endpoint, go to the newly created sync group. Under Server endpoints, select +Add server endpoint. The Add server endpoint blade opens. Enter the following information to create a server endpoint:

  

  * Registered server: The name of the server or cluster where you want to create the server endpoint.

  Enter: SRV1

  * Path: The path on the Windows Server to be synced to the Azure file share. The path can be a folder (for example, D:\Data), volume root (for example, D:\), or volume mount point (for example, D:\Mount).

  Enter: C:\app

  Step 4:

  To add the server endpoint, select Create. Your files are now kept in sync across your Azure file share and Windows Server.

  References:

  https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide

  https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-server-endpoint-create

• Question 163:

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with Azure AD.

  You deploy an app that adds custom attributes to the domain.

  From Azure Cloud Shell, you discover that you cannot query the custom attributes of users.

  You need to ensure that the custom attributes are available in Azure AD.

  Which task should you perform from Microsoft Entra Connect first?

  A. Configure device options
  B. Manage federation
  C. Customize synchronization options
  D. Refresh directory schema
  C. Customize synchronization options

  ---

  Explanation

  Microsoft Entra Connect sync: Directory extensions

  You can use directory extensions to extend the schema in Azure Active Directory (Azure AD) with your own attributes from on-premises Active Directory. This feature enables you to build LOB apps by consuming attributes that you continue to manage on-premises. These attributes can be consumed through extensions. You can see the available attributes by using Microsoft Graph Explorer. You can also use this feature to create dynamic groups in Azure AD.

  Customize which attributes to synchronize with Azure AD

  You configure which additional attributes you want to synchronize in the custom settings path in the installation wizard.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-sync-feature-directory-extensions

• Question 164:

  HOTSPOT

  Your on-premises network contains an Active Directory domain named contoso.com and 500 servers that run Windows Server. All the servers are Azure Arc-enabled and joined to contoso.com.

  You need to implement PowerShell Desired State Configuration (DSC) on all the servers. The solution must minimize administrative effort.

  Where should you store the DSC scripts, and what should you use to apply DSC to the servers? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: An Azure Automation account Azure Automation allows you to automate tasks against resources in Azure, on-premises, and with other cloud providers such as Amazon Web Services (AWS).

  When you start Azure Automation for the first time, you must create at least one Automation account.

  Azure Automation State Configuration

  Prerequisites include: An Azure Automation account

  Azure Automation State Configuration is an Azure configuration management service that allows you to write, manage, and compile PowerShell Desired State Configuration (DSC) configurations for nodes in any cloud or on-premises datacenter.

  Box 2: Guest configuration in Azure policy

  Note: Before you enable Automation State Configuration, we would like you to know that a newer version of DSC is now generally available, managed by a feature of Azure Policy named guest configuration. The guest configuration service combines features of DSC Extension, Azure Automation State Configuration, and the most commonly requested features from customer feedback. Guest configuration also includes hybrid machine support through Arc-enabled servers.

  References:

  https://learn.microsoft.com/en-us/azure/automation/automation-security-overview

  https://learn.microsoft.com/en-us/azure/automation/automation-dsc-overview

• Question 165:

  You have on-premises servers running Windows Server, as shown in the following table.

  

  You have an Azure subscription that contains a virtual machine named VM1.

  You need to ensure that you can manage all the servers using Azure Arc. The solution must minimize administrative effort.

  On which servers should you install the Azure Connected Machine agent?

  A. Server1 only
  B. VM1 only
  C. VM2only
  D. VM1 and VM2 only
  E. Server1 and VM2 only
  F. Server1, VM1, and VM2
  E. Server1 and VM2 only

• Question 166:

  DRAG DROP

  You create a new Azure subscription.

  You plan to deploy Microsoft Entra Domain Services (Azure AD DS) and Azure virtual machines.

  You need to ensure that the virtual machines can join to Microsoft Entra Domain Services.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

• Question 167:

  You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:

  1. Size: D2s_v4

  2. Operating system disk: 127-GiB standard SSD

  3. Data disk 128-GiB standard SSD

  4. Virtual machine generation: Gen 2

  You plan to perform the following changes to VM1:

  1. Change the virtual machine size to D4s_v4.

  2. Detach the data disk.

  3. Add a new standard SSD.

  Which changes require downtime for VM1?

  A. Detaching the data disk only and adding a new standard SSD.
  B. Detaching the data disk only.
  C. Changing the virtual machine size only.
  D. Adding a new standard SSD only.
  C. Changing the virtual machine size only.

  ---

  Explanation

  Data disks can be added and detached without requiring downtime.

  Changing the VM size requires the VM to be restarted.

• Question 168:

  HOTSPOT

  Your company has offices in Boston and Montreal. The offices are connected by using a 10-Mbps WAN link that is often saturated.

  The office in Boston contains the following:

  1. An Active Directory Domain Services (AD DS) domain controller named DC1

  2. A server named Server1 that runs Windows Server and has the File Server role installed

  The office in Montreal contains 20 client computers that run Windows 10. Montreal does NOT have any servers.

  The company plans to deploy a new line-of-business (LOB) application to all the client computers. The installation source files for the application are in \\Server1\Apps.

  You need to make the installation source files available to the client computers in the Montreal office by using the minimum amount of WAN bandwidth possible.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 169:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server 2022.

  You need to manage Storage Quality of Service (QoS) from Server1.

  Which Remote Server Administration Tools (RSAT) feature should you install?

  A. RSAT: Failover Clustering Tools
  B. RSAT: File Services Tools
  C. RSAT: Storage Replica Module for Windows PowerShell
  D. RSAT: Data Center Bridging LLDP Tools
  A. RSAT: Failover Clustering Tools

  ---

  Explanation

  Storage Quality of Service (QoS) in Windows Server 2016 provides a way to centrally monitor and manage storage performance for virtual machines using Hyper-V and the Scale-Out File Server roles.

  Install Remote Administration Tools to manage Storage QoS policies from remote computers

  You can manage Storage QoS policies and monitor flows from compute hosts using the Remote Server Administration Tools. These are available as optional features on all Windows Server 2016 installations, and can be downloaded separately for Windows 10 at the Microsoft Download Center website.

  The RSAT-Clustering optional feature includes the Windows PowerShell module for remote management of *Failover Clustering*, including Storage QoS.

  * Windows PowerShell: Add-WindowsFeature RSAT-Clustering.

  The RSAT-Hyper-V-Tools optional feature includes the Windows PowerShell module for remote management of Hyper-V.

  * Windows PowerShell: Add-WindowsFeature RSAT-Hyper-V-Tools

  References:

  https://learn.microsoft.com/en-us/windows-server/storage/storage-qos/storage-qos-overview

• Question 170:

  You have five file servers that run Windows Server.

  You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort.

  What should you create?

  A. a Dynamic Access Control central access policy
  B. a data loss prevention (DLP) policy
  C. a Dynamic Access Control central access rule
  D. a file screen
  D. a file screen

  ---

  Explanation

  On the File Screening Management node of the File Server Resource Manager MMC snap-in, you can perform the following tasks:

  Create file screens to control the types of files that users can save, and generate notifications when users attempt to save unauthorized files.

  Define file screening templates that can be applied to new volumes or folders and that can be used across an organization.

  Create file screening exceptions that extend the flexibility of the file screening rules.