Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 11:

  SIMULATION

  You need to collect errors from the System event log of SRV1 to a Log Analytics workspace.

  The required source files are located in a folder named \\dc1.contoso.com\install.

  To complete this task, sign in the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Configure Windows event logs

  Configure Windows event logs from the Agents configuration menu for the Log Analytics workspace.

  Step 1: Go to the Log Analytics workspaces menu in the Azure portal.

  Configure data sources

  To configure data sources for Log Analytics agents, go to the Log Analytics workspaces menu in the Azure portal and select a workspace.

  Step 2: Select Agents configuration.

  Step 3: Select the tab for the data source you want to configure.

  In this case the Windows event log of SRV1.

  Step 4: Select only Error option in the System Log row.

  Azure Monitor only collects events from Windows event logs that are specified in the settings.

  

  References:

  https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events

  https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-data-sources#configure-data-sources

• Question 12:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You need to configure the management of VM1 to meet the following requirements:

  1. Require administrators to request access to VM1 before establishing a Remote Desktop connection.

  2. Limit access to VM1 from specific source IP addresses.

  3. Limit access to VM1 to a specific management port.

  What should you configure?

  A. a network security group (NSG)
  B. Microsoft Entra Privileged Identity Management (PIM)
  C. Microsoft Defender for Cloud
  D. Azure Front Door
  C. Microsoft Defender for Cloud

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage?tabs=jit-config-asc%2Cjit-request-asc

• Question 13:

  HOTSPOT

  You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. You need 10 limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely. You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configurationfiles.

  How should you complete the PowerShell command? (To answer, select the appropriate options in the answer area.)

  

  

• Question 14:

  You need to implement a name resolution solution that meets the networking requirements.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create an Azure private DNS zone named corp.fabhkam.com.
  B. Create a virtual network link in the coip.fabnkam.com Azure private DNS zone.
  C. Create an Azure DNS zone named corp.fabrikam.com.
  D. Configure the DNS Servers settings for Vnet1.
  E. Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.
  F. On DC3, install the DNS Server role.
  G. Configure a conditional forwarder on DC3.
  D. Configure the DNS Servers settings for Vnet1.
  F. On DC3, install the DNS Server role.

  ---

  Explanation

  Virtual machines in an Azure virtual network receive their DNS configuration from the DNS settings configured on the virtual network. You need to configure the Azure virtual network to use DC3 as the DNS server. Then all virtual machines in the virtual network will use DC3 and their DNS server.

• Question 15:

  You have an Azure subscription. The subscription contains a virtual machine named Server1 that runs Windows Server 2019 Standard and has the following configurations:

  1. Size: Standard_D2_v3

  2. vCPUs: 2

  3. RAM: 8 GB

  4. Temp storage: 50 GB

  5. Max data disks: 4

  You need to resize Server1 to use a virtual machine that has the following configurations:

  1. Size: Standard_D4_v5

  2. vCPUs: 4

  3. RAM: 16 GB

  4. Temp storage: None

  5. Max data disks: 16

  What should you do first?

  A. Reformat the OS disk as ReFS.
  B. Move Pagefile.sys to drive
  C. Upgrade Server1 to Windows Server 2022 Datacenter: Azure Edition.
  D. Convert the data disks into GTP disks.
  B. Move Pagefile.sys to drive

  ---

  Explanation

  Limitations

  You can't resize a VM size that has a local temp disk to a VM size with no local temp disk and vice versa.

  The only combinations allowed for resizing are:

  VM (with local temp disk) -> VM (with local temp disk); and VM (with no local temp disk) -> VM (with no local temp disk).

  Workaround:

  How do I migrate from a VM size with local temp disk to a VM size with no local temp disk?

  You can migrate by following these steps:

  1. Connect to your Virtual Machine that has a local temporary disk (for example, a D: Drive) as a local admin.

  *-> 2. Follow the guidelines on the "Temporarily move pagefile.sys to C drive" section of Use the D: drive as a data drive on a Windows VM to move the page file from the local temporary disk (D: drive) to the C:drive.

  3. Take a snapshot of the VM.

  4. Use snapshot to create a new diskless VM (such as, Dv5, Dsv5, Dasv5, Ev5, Esv5, Easv5 series)

  References:

  https://learn.microsoft.com/en-us/azure/virtual-machines/azure-vms-no-temp-disk

  https://learn.microsoft.com/en-us/azure/virtual-machines/sizes/resize-vm

• Question 16:

  HOTSPOT

  Your on-premises network contains a server named Server1 and uses an IP address space of 192.168.10.0/24.

  You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 uses an IP address space of 192.168.10.0/24.

  You need to migrate Server1 to Subnet1. You must use Azure Extended Network to maintain the existing IP address of Server1.

  What is the minimum number of virtual machines that you should deploy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point

  

  

  ---

  Box 1: 1

  Configuration in Azure

  Before you use Windows Admin Center, you must perform the following steps through the Azure Portal:

  1. Create a Virtual network in Azure that contains at least two subnets, in addition to subnets required for your gateway connection. One of the subnets you create must use the same subnet CIDR as the on-premises subnet you want to extend. The subnet must be unique within your routing domain so that it does not overlap with any on-premises subnets.

  2. Configure a virtual network gateway to use a site-to-site or ExpressRoute connection to connect the virtual network to your on-premises network.

  3. Create a Windows Server 2022 Azure Edition VM in Azure that is capable of running nested virtualization. This is one of your two virtual appliances. Connect the primary network interface to the routable subnet, and the second network interface to the extended subnet.

  Note: Extended network for Azure requires Windows Server 2022 Azure Edition for the VM that is running in Azure.

  4. Etc.

  Box 2: 1

  On-premises configuration

  You must also perform some manual configuration in your on-premises infrastructure, including creating a VM to serve as the on-premises virtual appliance:

  1. Make sure the subnets are available on the physical machine where you will deploy the on-premises VM (virtual appliance). This includes the subnet you want to extend and a second subnet that is unique and doesn't overlap with any subnets in the Azure virtual network.

  2. Create a Windows Server 2019 or 2022 VM on any hypervisor that supports nested virtualization. This is the on-premises virtual appliance. We recommend that you create this as a highly available VM in a cluster. Connect a virtual network adapter to the routable subnet and a second virtual network adapter to the extended subnet.

  3. Etc.

  Note: Azure using extended network for Azure Extended network for Azure enables you to stretch an on-premises subnet into Azure to let on-premises virtual machines keep their original on-premises private IP addresses when migrating to Azure.

  The network is extended using a bidirectional VXLAN tunnel between two Windows Server 2019 VMs acting as virtual appliances, one running on-premises and the other running in Azure, each also connected to the subnet to be extended.

  Each subnet that you are going to extend requires one pair of appliances. Multiple subnets can be extended using multiple pairs

  References:

  https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-extended-network

• Question 17:

  DRAG DROP

  Your network contains an Active Directory domain, a web app named App1, and a perimeter network. The perimeter network contains a server named Server1 that runs Windows Server.

  You plan to provide external access to App1.

  You need to implement the Web Application Proxy role service on Server1.

  Which role should you add to Server1, and which role should you add to the network? To answer, drag the appropriate roles to the correct targets. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box 1: Remote Access

  Web Application Proxy is a new Remote Access role service in Windows Server 2012 R2.

  To install the Web Application Proxy role service (see step 4 below).

  1. On the edge server, open Server Manager. To do this, click Server Manager on the Start screen, or Server Manager in the taskbar on the desktop.

  2. In the Quick Start tab of the Welcome tile on the Dashboard page, click Add roles and features. Alternatively, you can click Add Roles and Features on the Manage menu.

  3. In the Add Roles and Features Wizard, click Next three times to get to the server role selection screen.

  4. On the Select server roles dialog, select Remote Access, and then click Next.

  5. Click Next twice.

  6. On the Select role services dialog, select Web Application Proxy, click Add Features, and then click Next.

  7. On the Confirm installation selections dialog, click Install.

  8. On the Installation progress dialog, verify that the installation was successful, and then click Close.

  Box 2: Active Directory Federation Services

  Web Application Proxy preauthenticates access to web applications using Active Directory Federation Services (AD FS), and also functions as an AD FS proxy.

  Using Active Directory Federation Services

  This scenario describes the additions and changes that you must make to your AD FS servers to provide the following functionality:

  Application publishing - For all applications and services that you want to publish through Web Application Proxy, you must configure a relying party on the AD FS server.

  Authentication - No specific configuration is required to provide authentication for published applications.

  Incorrect:

  * Active Directory Certificate Services

  * Network Policy and Access Services

  References:

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn280943(v=ws.11)

• Question 18:

  You have an Azure subscription.

  The subscription contains a virtual machine that has the following configurations:

  1. Name: VM1

  2. Size: Standard DS1 v2

  3. Operating system: Windows Server 2022 Datacenter: Azure Edition

  VM1 contains an OS disk named Disk0 that has the following configurations:

  1. Size: 127 GB

  2. Type: Standard SSD

  3. Redundancy: Locally-redundant storage (LRS)

  You perform the following actions:

  1. From the Azure portal, you add a new data disk named Disk1 to VM1.

  2. From VM1, you install an app named App1.

  You need to ensure that Disk1 will be used as the D drive for VM1.

  The solution must ensure that data written by App1 to drive D will be retained when VM1 restarts.

  What should you do first?

  A. Move Pagefile.sys to the C drive.
  B. From Disk Management, change the drive letter assigned to the volume on Disk0.
  C. From Disk Management, change the drive letter assigned to the volume on Disk1.
  D. Resize VM1 to Standard DS2 v2.
  A. Move Pagefile.sys to the C drive.

  ---

  Explanation

  Use the D: drive as a data drive on a Windows VM

  If your application needs to use the D drive to store data, follow these instructions to use a different drive letter for the temporary disk. Never use the temporary disk to store data that you need to keep.

  If you resi6ze or Stop (Deallocate) a virtual machine, this may trigger placement of the virtual machine to a new hypervisor. A planned or unplanned maintenance event may also trigger this placement. In this scenario, the temporary disk will be reassigned to the first available drive letter. If you have an application that specifically requires the D: drive, you need to follow these steps to temporarily move the pagefile.sys, attach a new data disk and assign it the letter D and then move the pagefile.sys back to the temporary drive. Once complete, Azure will not take back the

  D: if the VM moves to a different hypervisor.

  Step 1:

  Attach the data disk [already done First, you'll need to attach the data disk to the virtual machine.

  *-> Step 2: Temporarily move pagefile.sys to C drive 1. Connect to the virtual machine.

  2. Right-click the Start menu and select System.

  3. In the left-hand menu, search for and select View advanced system settings.

  4. In the Performance section, select Settings.

  5. Select the Advanced tab.

  6. In the Virtual memory section, select Change.

  7. Select the C drive and then click System managed size and then click Set.

  8. Select the D drive and then click No paging file and then click Set.

  9. Click Apply. You will get a warning that the computer needs to be restarted for the changes to take affect.

  10. Restart the virtual machine.

  Step 3: Change the drive letters 1. Once the VM restarts, log back on to the VM.

  2. Click the Start menu and type diskmgmt.msc and hit Enter. Disk Management will start.

  3. Right-click on D, the Temporary Storage drive, and select Change Drive Letter and Paths.

  4. Under Drive letter, select a new drive such as T and then click OK.

  5. Right-click on the data disk, and select Change Drive Letter and Paths.

  6. Under Drive letter, select drive D and then click OK.

  Step 4: Move pagefile.sys back to the temporary storage drive

  https://learn.microsoft.com/en-us/azure/virtual-machines/windows/change-drive-letter

• Question 19:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You perform the following actions on VM1:

  1. Create a folder named Folder1 on volume C.

  2. Create a folder named Folder2 on volume D.

  3. Add a new data disk to VM1 and create a new volume that is assigned drive letter E.

  4. Install an app named App1 on volume E.

  You plan to resize VM1.

  Which objects will present after you resize VM1?

  A. Folder1, volume E, and App1 only
  B. Folder1 only
  C. Folder1 and Folder2 only
  D. Folder1, Folder2, App1, and volume E
  A. Folder1, volume E, and App1 only

  ---

  Explanation

  https://docs.microsoft.com/en-us/answers/questions/235/can-i-use-the-temporary-disk-the-d-drive-by-defaul.html

• Question 20:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the sites and site links shown in the following exhibit.

  

  The sites contain the bridgehead domain controllers shown in the following table.

  

  The IP intersite transport container is configured as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.