Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 181:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  You have a Microsoft Entra tenant. You need to implement Microsoft Entra Connect Sync.

  The solution must meet the following requirements:

  1. Prevent the password hashes of contoso.com from being synced to the Microsoft Entra tenant.

  2. Minimize user effort when authenticating to Microsoft Entra registered apps.

  3. Minimize the number of on-premises infrastructure components.

  What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Prevent contoso.com password hashes from being synced to the tenant - Pass-through Authentication

  Pass-through Authentication allows users to authenticate directly against the on-premises Active Directory without syncing password hashes to the cloud, meeting the requirement of not syncing password hashes to the Microsoft Entra tenant.

  Minimize user effort when authenticating to Microsoft Entra registered apps - Single Sign-On (SSO)

  Single Sign-On (SSO) minimizes user effort by allowing users to sign in once and access all registered apps without the need to re-enter credentials. This meets the goal of simplifying authentication for users.

• Question 182:

  SIMULATION

  You need to ensure that all DHCP clients that get an IP address from SRV1 will be configured to use DC1 as a DNS server.

  To complete this task, sign in the required computer or computers.

  A. See the explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See the explanation below.

  ---

  Explanation

  One possible solution to ensure that all DHCP clients that get an IP address from SRV1 will be configured to use DC1 as a DNS server is to use the DHCP scope options. DHCP scope options are settings that apply to all DHCP clients that obtain an IP address from a specific scope. You can use the DHCP scope options to specify the DNS server IP address, as well as other parameters such as the default gateway, the domain name, and the DNS suffix. Here are the steps to configure the DHCP scope options on

  SRV1:

  On SRV1, openDNS Managerfrom theAdministrative Toolsmenu or by typingdnsmgmt.mscin the Run box.

  In the left pane, expand your DHCP server and click onIPv4.

  In the right pane, right-click on the scope that you want to configure and selectProperties.

  In theScope Propertiesdialog box, click on theDNStab.

  Check the boxEnable DNS dynamic updates according to the settings below. This option allows the DHCP server to register and update the DNS records for the DHCP clients.

  Select the optionAlways dynamically update DNS records. This option ensures that the DHCP server updates both the A and PTR records for the DHCP clients, regardless of whether they request or support dynamic updates.

  Check the boxDiscard A and PTR records when lease is deleted. This option allows the DHCP server to delete the DNS records for the DHCP clients when their leases expire or are released.

  Check the boxDynamically update DNS records for DHCP clients that do not request updates. This option allows the DHCP server to update the DNS records for the DHCP clients that do not support dynamic updates, such as legacy or non-Windows clients.

  In theDNS serverssection, click on theAddbutton to add a new DNS server IP address.

  In theAdd Serverdialog box, enter the IP address of DC1, which is the DNS server that you want to use for the DHCP clients, and clickAdd.

  ClickOKto close theAdd Serverdialog box and return to theScope Propertiesdialog box.

  ClickOKto apply the changes and close theScope Propertiesdialog box.

  Now, all DHCP clients that get an IP address from SRV1 will be configured to use DC1 as a DNS server. You can verify the DNS configuration by using theipconfig /allcommand on a DHCP client computer and checking theDNS Serversentry.

  You can also check the DNS records for the DHCP clients by using theDNS Managerconsole on DC1.

• Question 183:

  You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs

  Windows Server and has the following disks:

  OS disk: Disk1

  Size: 512 GiB

  Free space: 260 GiB

  Encryption: SSE with PMK

  Stora6ge type: Standard SSD

  Data disk: Disk2

  Size: 512 GiB

  Free space: 45 GiB

  Storage type: Standard HDD

  Encryption: Platform-managed key

  You are planning a maintenance strategy for VM1.

  You need to identify which task can be performed on Disk2 without causing downtime to VM1.

  What should you do on Disk2?

  A. Increase the size.
  B. Change the encryption type.
  C. Decrease the size.
  D. Change the storage type to Premium SSD.
  A. Increase the size.

  ---

  Explanation

  Increasing Data Disk Size (Live Resize):

  Supported Operations:

  Azure allows you to expand data disks while the VM is running without needing to deallocate it. This is known as live resize.

  Limitations:

  Not supported for Ultra Disks or Premium SSD v2 disks: These disk types may require deallocation for resizing.

  Not supported for shared disks: Resizing shared disks requires taking the VM offline.

  Incorrect:

  Not B:

  Decreasing Data Disk Size (Not Live Resize):

  Requires careful steps:

  Decreasing the size of a data disk is not a live operation and requires careful steps to avoid data loss.

  Not C: Changing the encryption type of a data disk on an Azure VM while it's running is not directly possible.

  You'll need to either detach the disk, create a new VM with the desired encryption, and then attach the disk, or potentially use a different method like a snapshot and restore with a different encryption.

  Not D: You cannot change the storage type of an Azure data disk from Standard to Premium SSD, or viceversa,without causing downtime.

  Steps to Change Data Disk Storage Type and Encryption:

  1. Stop (Deallocate) the Virtual Machine:

  First, you need to stop the virtual machine. In the Azure portal, navigate to your VM, select "Stop" and then "Deallocate".

  This will release the resources and allow you to modify the disk settings.

  2. Change Storage Type:

  Navigate to the data disk associated with your VM. Find the "Configuration" settings for the disk.

  Select the desired storage type (Premium SSD) and save the changes.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-machines/disks-convert-types

• Question 184:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following table.

  Server 1 hosts the DNS zone tor contoso.com. The General tab of the eontoso.com properties is configured as shown in the following exhibit.

  

  Server3 hosts the DNS zone for east.contoso.com and is configured as shown in the following exhibit.

  

  for each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 185:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.

  You open a new branch office that contains only client computers.

  You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

  Solution: You create an organization unit (OU) that contains the client computers in the branch office. You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to the new OU.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 186:

  DRAG DROP

  You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. VM1 contains a 128-GB operating system disk.

  You need to increase the size of volume C on VM1 to 250 GB.

  Which four actions should you perform in sequence?

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  How to expand virtual hard disks attached to a Windows virtual machine

  You may need to expand the OS disk if you're supporting a legacy application that installs components on the OS disk or if you're migrating a physical PC or VM from on-premises that has a larger OS disk.

  Step 1: Stop VM1.

  Resize a managed disk by using PowerShell 1. Stop the VM before resizing the disk:

  Stop-AzVM -ResourceGroupName $rgName -Name $vmName

  Step 2: Resize the operating system disk.

  2. Obtain a reference to the managed OS disk. Set the size of the managed OS disk to the desired value and update the Disk:

  $disk= Get-AzDisk -ResourceGroupName $rgName -DiskName $diskName

  $disk.DiskSizeGB = 1023

  Update-AzDisk -ResourceGroupName $rgName -Disk $disk -DiskName $disk.Name

  Step 3: Start VM1.

  3. Updating the VM might take a few seconds. When the command finishes executing, restart the VM:

  Start-AzVM -ResourceGroupName $rgName -Name $vmName

  Step 4: Resize Volume C.

  Expand the volume in the operating system.

  When you've expanded the disk for the VM, you need to go into the OS and expand the volume to encompass the new space.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-machines/windows/expand-os-disk

• Question 187:

  You need to meet the technical requirements for Server3.

  Which users can perform the required tasks?

  A. Admin3 only
  B. Admin1 and Admin3 only
  C. Admin1 only
  D. Admin1, Admin2, and Admin3
  E. Admin1 and Admin2 only
  C. Admin1 only

• Question 188:

  HOTSPOT

  Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Group 3 = Group 1, 2 4 and 5 only. Domain-Local groups can contain members from the "forest".

  Group 5 = Group 4 only. Global groups can only contain Users, Computers and Global groups from the "same" domain.

  References:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

• Question 189:

  You have a server named Server1 that runs Windows Server. Server1 has the storage pools shown in the following table.

  

  You plan to create a virtual disk named VDisk1 that will use storage tiers.

  Which pools can you use to create VDisk1?

  A. Pool2 only
  B. Pool1 only
  C. Pool1, Pool2, and Pool3
  D. Pool1 and Pool2 only
  E. Pool3 only
  F. Pool2 and Pool3 only
  G. Pool1 and Pool3 only
  F. Pool2 and Pool3 only

  ---

  Explanation

  Storage tiering requires both standard HDDs and SSDs. We cannot use Pool1 because it does not have any SSDs.

• Question 190:

  You have a server named Server1 that runs Windows Server and contains two drives named C and D. Server1 hosts multiple file shares.

  You enable Data Deduplication on drive D and select the General purpose file server workload.

  You need to minimize the space consumed by files that were recently modified or deleted.

  What should you do?

  A. Run the set-dedupvolume cmdlet and configure the scrubbing job.
  B. Run the Set-DedupSchedule Cmdlet and configure a GarbageCollection job.
  C. Run the set-Dedupvoiume cmdlet and configure the InputOutputScale settings.
  D. Run the Set-DedupSchedule cmdlet and configure the optimization job.
  B. Run the Set-DedupSchedule Cmdlet and configure a GarbageCollection job.

  ---

  Explanation

  Reclaim disk space after deleting files from Windows Server Deduplication.

  Clean up a drive and empty it but still it shows space used.

  There is a command that need to execute to recover the disk space using PowerShell.

  Start-DedupJob -Type GarbageCollection -Volume

  R:

  References:

  https://infrontconsulting.asia/reclaim-disk-space-after-deleting-files-from-windows-server-deduplication