Microsoft Microsoft Certified: Windows Server Hybrid Administrator Associate AZ-800 Questions & Answers

• Question 11:

  DRAG DROP

  You create a new Azure subscription.

  You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.

  You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

• Question 12:

  DRAG DROP

  You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.

  You deploy a server to the domain and configure the server to run a service.

  You need to ensure that the service can use a group managed service account (gMSA) to authenticate.

  Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 13:

  DRAG DROP

  Your network contains an Active Directory domain, a web app named App1, and a perimeter network. The perimeter network contains a server named Server1 that runs Windows Server.

  You plan to provide external access to App1.

  You need to implement the Web Application Proxy role service on Server1.

  Which role should you add to Server1, and which role should you add to the network? To answer, drag the appropriate roles to the correct targets. Each role may be used once, more than once, or not at all. You may need to drag the split bar

  between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Remote Access

  Web Application Proxy is a new Remote Access role service in Windows Server 2012 R2.

  To install the Web Application Proxy role service (see step 4 below).

  1.

  On the edge server, open Server Manager. To do this, click Server Manager on the Start screen, or Server Manager in the taskbar on the desktop.

  2.

  In the Quick Start tab of the Welcome tile on the Dashboard page, click Add roles and features. Alternatively, you can click Add Roles and Features on the Manage menu.

  3.

  In the Add Roles and Features Wizard, click Next three times to get to the server role selection screen.

  4.

  On the Select server roles dialog, select Remote Access, and then click Next.

  5.

  Click Next twice.

  6.

  On the Select role services dialog, select Web Application Proxy, click Add Features, and then click Next.

  7.

  On the Confirm installation selections dialog, click Install.

  8.

  On the Installation progress dialog, verify that the installation was successful, and then click Close.

  Box 2: Active Directory Federation Services Web Application Proxy preauthenticates access to web applications using Active Directory Federation Services (AD FS), and also functions as an AD FS proxy. Using Active Directory Federation Services

  This scenario describes the additions and changes that you must make to your AD FS servers to provide the following functionality:

  Application publishing

• Question 14:

  DRAG DROP

  You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. VM1 contains a 128-GB operating system disk.

  You need to increase the size of volume C on VM1 to 250 GB.

  Which four actions should you perform in sequence.

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  How to expand virtual hard disks attached to a Windows virtual machine

  You may need to expand the OS disk if you're supporting a legacy application that installs components on the OS disk or if you're migrating a physical PC or VM from on-premises that has a larger OS disk.

  Step 1: Stop VM1.

  Resize a managed disk by using PowerShell

  1.

  Stop the VM before resizing the disk:

  Stop-AzVM -ResourceGroupName $rgName -Name $vmName

  Step 2: Resize the operating system disk.

  2.

  Obtain a reference to the managed OS disk. Set the size of the managed OS disk to the desired value and update the Disk:

  $disk= Get-AzDisk -ResourceGroupName $rgName -DiskName $diskName $disk.DiskSizeGB = 1023 Update-AzDisk -ResourceGroupName $rgName -Disk $disk -DiskName $disk.Name

  Step 3: Start VM1.

  3. Updating the VM might take a few seconds. When the command finishes executing, restart the VM:

  Start-AzVM -ResourceGroupName $rgName -Name $vmName

  Step 4: Resize Volume C.

  Expand the volume in the operating system

  When you've expanded the disk for the VM, you need to go into the OS and expand the volume to encompass the new space.

  Reference: https://learn.microsoft.com/en-us/azure/virtual-machines/windows/expand-os-disk

• Question 15:

  DRAG DROP You need to meet the security requirements for passwords. Where should you configure the components for Azure AD Password Protection? To answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag

  the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises

• Question 16:

  HOTSPOT

  You need to meet the technical requirements for VM1.

  Which cmdlet should you run first? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/nested-virtualization

• Question 17:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise. select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 18:

  DRAG DROP

  Which three actions should you perform in sequence to meet the security requirements for Webapp1?

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview

• Question 19:

  HOTSPOT

  You need to meet the technical requirements for Server4.

  Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://4sysops.com/wiki/enable-powershell-remoting/

• Question 20:

  HOTSPOT

  Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Group 3 = Group 1, 2 4 and 5 only. Domain-Local groups can contain members from the "forest".

  Group 5 = Group 4 only. Global groups can only contain Users, Computers and Global groups from the "same" domain.

  Reference:

  https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups