Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 171:

  HOTSPOT

  You have an Azure subscription. The subscription contains a virtual network named VNet1.

  VNet1 contains two virtual machines named VM1 and VM2 that run Windows Server.

  You need to ensure that when you sign in to the Azure portal from VM2, you can manage the operating system of VM1.

  The solution must minimize costs.

  Which two settings should you configure for VM1? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct answer is worth one point.

  

  

  ---

  Deploy Azure Bastion by using specified settings Prerequisites include:

  * Required inbound ports: [Box 1]

  For Windows VMs: RDP (3389)

  For Linux VMs: SSH (22)

  * Required VM roles: [Box 2]

  Reader role on the virtual machine Reader role on the network adapter (NIC) with the private IP of the virtual machine

  * Etc.

  Box 1: 'Networking'

  Need to open the proper ports.

  Required inbound ports for Bastion:

  For Windows VMs: RDP (3389)

  For Linux VMs: SSH (22)

  Note: Configure the port rule in the Azure Portal (No need of any restarts. The effect takes place in a few minutes.) Here are the steps (at the time of writing): Click on the VM -> Click on 'Networking' -> Click

  'Allow inbound port rule' '

  Access Control (IAM) Box 2: Access Control (IAM)

  Azure VM Pro: How to assign the necessary roles in Azure 1. In the Azure portal, go to Subscriptions.

  2. Click on the name of the relevant subscription.

  *-> 3. Go to Access control (IAM).

  4. Go to Role assignments.

  5. Click on Add > Add role assignment.

  6. Search for one of the roles you need to assign (in this case Disk Snapshot Contributor, Network Contributor and Virtual Machine Contributor). Click on the role name, then click Next.

  7. Click on Select members.

  8. Etc.

  Incorrect:

  * Bastion

  You configure this on the network, not on the Bastion host

  References:

  https://learn.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal

  https://redstor.my.site.com/support/s/article/1412-Azure-VM-Pro-How-to-assign-the-necessary-roles-in-Azure

• Question 172:

  SIMULATION

  You have an application that is copied to a folder named C:\app on SRV1. C:\app also contains a Dockerfile for the app.

  On SRV1, you need to create a container image for the application by using the Dockerfile. The container image must be named app1.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Create new container images on Windows Admin Center Create new container images.

  When working with containers, you'll write instructions to Docker on how your container image works, and then Docker creates a new container image based on these instructions. These instructions are saved on a file called "Dockerfile" that's saved to the same folder in which your application resides.

  Step 1:

  Windows Admin Center can considerably reduce the overhead of writing Dockerfiles or even remove the need to write these files entirely. To get started, on the Containers extension, select the Create New option on the Images tab.

  

  Step 2:

  Select: Use an existing Dockerfile

  Use an existing Dockerfile: This option allows you to rebuild a new container image based on an existing Dockerfile. This is useful when you need to make small changes to an existing Dockerfile or when you need to recreate the container to catch an application update.

  Step 3:

  Enter: Application source path: C:\app

  Once you select the type of application you want to containerize, you can select common options to finalize the creation of your image:

  Enter:

  Application source path: C:\app

  Step 4: Click Build

  References:

  https://learn.microsoft.com/en-us/virtualization/windowscontainers/wac-tooling/wac-images

• Question 173:

  You are planning the implementation Azure Arc to support the planned changes.

  You need to configure the environment to support configuration management policies.

  What should you do?

  A. Hybrid Microsoft Entra join all the servers.
  B. Create a hybrid runbook worker m Azure Automation.
  C. Deploy the Azure Connected Machine agent to all the servers.
  D. Deploy the Azure Monitor agent to all the servers.
  C. Deploy the Azure Connected Machine agent to all the servers.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/azure-arc/servers/plan-at-scale-deployment

• Question 174:

  HOTSPOT

  You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-expressroute-portal

• Question 175:

  You need to ensure that VM3 meets the technical requirements.

  What should you install first?

  A. Enhanced Storage
  B. the iSNS Server service
  C. File Server Resource Manager (FSRM)
  D. Windows Standards-Based Storage Management
  C. File Server Resource Manager (FSRM)

  ---

  Explanation

  VM3 must be configured to enable per-folder quotas.

  VM3 is a Windows Server 2022 Standard server, joined to the adatum.com domain, and has the File and Storage Services role installed.

  Configure Disk Quota using FSRM (Windows Server 2012 R2)

  File Server Resource Manager is a pack of tools for Windows Server 2008 or above that allows administrators to control and manage the quantity and type of data files that is stored on their network or servers.

  Disk Quota is a tool part of the FSRM Pack of tools. It helps to Manage the capacity of a storage device on the server or network.

  Example:

  Configure Disk Quota on DC1

  Step 1

  Go to Server Manager

  Step 2

  On the Server Manager Console. Select "Tools" on the right top corner and choose "File Server Resource Manager"

  Step 3

  On the File Server Resource Manager console, select "Quota Management -> Quotas", Then Right-Click on "Quotas". Select "Create Quota"

  Step 4

  Browser for Quota Path

  Step 5

  Select "Define Custom Quota Properties" and choose "custom Properties"

  Step 6

  Under the "Space Limit" Section, specify your preferred limit and choose "Ok"

  Step 7

  Select "Create"

  Step 8

  Save as a template with your preferred name. Our is "Graphic files template" and choose 'OK'

  We are done.

  References:

  https://vincenttechblog.com/disk-quota-fsrm-windows-server-2012-r2/

• Question 176:

  DRAG DROP

  Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.

  You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.

  You need to recommend a deployment plan that meets the following requirements:

  1. Ensures that a user named User1 can perform the RODC installation on Server1

  2. Ensures that Server1 is in a new site named RemoteSite1

  3. Uses the principle of least privilege

  Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: Pre-create an RODC account.

  You can deploy RODC using the Staged feature. It consists of pre-creating the RODC computer account in the ADUC console and basic setup.

  Step 2: Create a site and a subnet

  Step 3: Instruct User1 to run the Active Directory Domain Services installation Wizard on Server1.

  The Domain Controller Options page also enables you to choose the appropriate Active Directory logical site name from the forest configuration. By default, it selects the site with the most correct subnet. If there is only one site, it selects that site automatically.

  Important:

  If the server does not belong to an Active Directory subnet and there is more than one Active Directory site, nothing is selected and the Next button is unavailable until you choose a site from the list.

  Incorrect:

  * Add User1 to the Contoso\Administrators group.

  This is against the principle of least privilege.

  References:

  https://woshub.com/deploying-read-domain-controller-windows-server-2016/

  https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/rodc/install-a-windows-server-2012-active-directory-read-only-domain-controller--rodc---level-200-

• Question 177:

  You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements.

  What should you configure?

  A. loopback processing in GPO4
  B. security filtering for the link of GPO1
  C. loopback processing in GPO1
  D. the Enforced property for the link of GPO4
  E. the Enforced property for the link of GPO1
  F. security filtering for the link of GPO4
  A. loopback processing in GPO4

• Question 178:

  HOTSPOT

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Microsoft Entra tenant. The tenant contains a group named Group1 and the users shown in the following table.

  

  Domain/OU filtering in Microsoft Entra Connect is configured as shown in the Filtering exhibit. (Click the Filtering tab.)

  

  You review the Microsoft Entra Connect configurations as shown in the Configure exhibit. (Click the Configure tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  1. User1 can use self-service password reset (SSPR) to reset his password.

  -> [YES]. User1 can use self-service password reset (SSPR) because they are in the synchronized organizational unit (OU1), and "Enable Password writeback" is configured.

  2. If User1 connects to Microsoft Exchange Online, an on-premises domain controller provides authentication.

  -> [Yes]. When User1 connects to Microsoft Exchange Online or any other Azure AD-integrated service, their authentication request is passed directly to an on-premises AD domain controller for validation because Pass-through Authentication (PTA) is used.

  3. You can add User2 to Group1 as a member.

  -> [No]. User2 is in OU2, which is not selected for synchronization according to the provided configuration details. Since User2's OU is not included in the synchronization scope, you cannot directly add User2 to Group1 from the on-premises

  AD.

• Question 179:

  You have an Azure subscription that contains the following resources.

  1. An Azure Log Analytics workspace

  2. An Azure Automation account

  3. Azure Arc

  You have an on-premises server named Server1 that is onboarded to Azure Arc.

  You need to manage Microsoft updates on Server1 by using Azure Arc.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Add Microsoft Sentinel to the Log Analytics workspace.
  B. On Server1, install the Azure Monitor agent.
  C. From the Automation account, enable Update Management for Server1.
  D. From the Virtual machines data source of the Log Analytics workspace, connect Server1.
  B. On Server1, install the Azure Monitor agent.
  C. From the Automation account, enable Update Management for Server1.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/manage/hybrid/server/best-practices/arc-update-management

• Question 180:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a user named User1. User1 is a member of a group named Group1 and is in an organizational unit (OU) named OU1.

  The domain has minimum password lengths configured as shown in the following table.

  

  What is the minimum password length that User1 should use when changing to a new password?

  A. 7
  B. 8
  C. 10
  D. 12
  E. 14
  A. 7