Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 201:

  HOTSPOT

  You have an Azure subscription that contains the virtual machines shown in the following table.

  

  You plan to implement Azure Automanage for Windows Server.

  You need to identify the operating system prerequisites.

  Which virtual machines support Hotpatch, and which virtual machines support SMB over QUIC? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://learn.microsoft.com/en-us/windows-server/get-started/editions-comparison-windows-server-2022?tabs=full-comparison

• Question 202:

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain.

  The domain contains a user named User1 and the servers shown in the following table.

  

  User1 is a member of the Protected Users security group.

  User1 performs the following actions:

  1. From Server1, establishes a remote PowerShell session on Server2

  2. From the PowerShell session on Server2, attempts to access a resource on Backup1

  The request to access the resource on 8ackup1 is denied.

  You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2.

  The solution must follow the principle of least privilege and minimize administrative effort.

  What should you configure?

  A. Kerberos delegation (unconstrained)
  B. CredSSP
  C. PSSessionConfigu ration by using RunAs
  D. resource-based Kerberos constrained delegation
  D. resource-based Kerberos constrained delegation

• Question 203:

  You have a Windows Server container host named Server1 and a container image named image1.

  You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine.

  Which parameter should you specify when you run the docker run command?

  A. --expose
  B. --privileged
  C. --runtime
  D. --isolation
  E. --entrypoint
  D. --isolation

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

• Question 204:

  HOTSPOT

  You need to ensure that data availability on SSPace1 meets the technical requirements.

  What is the maximum number of physical disks that can fail on each disk? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: 2

  The data on SSPace1 must be available always.

  SSPace1 contains the Storage Spaces virtual disks shown in the following table.

  Disk1, 8 physical disks, Three-way mirror

  Three-way mirror

  Three-way mirroring writes three copies of everything. Its storage efficiency is 33.3 percent - to write 1 TB of data, you need at least 3 TB of physical storage capacity. Likewise, you need at least three hardware fault domains - with Storage Spaces Direct, that means three servers.

  Three-way mirroring can safely tolerate at least two hardware problems (drive or server) at a time. For example, if you're rebooting one server when suddenly another drive or server fails, all data remains safe and continuously accessible

  

  Box 2: 2

  Disk2, 12 physical disks, Parity

  With parity, it depends if one if we use Single parity or Dual parity.

  Single parity allows only one failure.

  Dual parity allows two failures.

  Dual parity is the better recommended option.

  Note: Parity

  Parity encoding, often called "erasure coding," provides fault tolerance using bitwise arithmetic, which can get remarkably complicated.

  Storage Spaces offers two flavors of parity - "single" parity and "dual" parity, the latter employing an advanced technique called "local reconstruction codes" at larger scales.

  Single parity

  Single parity keeps only one bitwise parity symbol, which provides fault tolerance against only one failure at a time. It most closely resembles RAID-5. To use single parity, you need at least three hardware fault domains - with Storage Spaces Direct, that means three servers. Because three-way mirroring provides more fault tolerance at the same scale, we discourage using single parity. But, it's there if you insist on using it, and it is fully supported.

  Dual parity

  Dual parity implements Reed-Solomon error-correcting codes to keep two bitwise parity symbols, thereby providing the same fault tolerance as three-way mirroring (i.e. up to two failures at once), but with better storage efficiency. It most closely resembles RAID-6. To use dual parity, you need at least four hardware fault domains - with Storage Spaces Direct, that means four servers. At that scale, the storage efficiency is 50% - to store 2 TB of data, you need 4 TB of physical storage capacity.

  

  References:

  https://learn.microsoft.com/en-us/azure-stack/hci/concepts/fault-tolerance

• Question 205:

  SIMULATION

  You need to ensure that the minimum password length for members of the BranchAdmins group is 12 characters. The solution must affect only the BranchAdmins group.

  To complete this task, sign in the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Create a new fine-grained password policy.

  In the following procedure you will create a new fine-grained password policy using the UI in ADAC.

  To create a new fine grained password policy.

  Step 1: Right click the Windows PowerShell icon, click Run as Administrator and type dsac.exe to open ADAC.

  Step 2: Click Manage, click Add Navigation Nodes and select the appropriate target domain in the Add Navigation Nodes dialog box and then click OK.

  Step 3: Click Manage, click Add Navigation Nodes and select the appropriate target domain in the Add Navigation Nodes dialog box and then click OK.

  Step 4: In the Tasks pane, click New, and then click Password Settings.

  Fill in or edit fields inside the property page to create a new Password Settings object. The Name and Precedence fields are required.

  In our case:

  Minimum password length: 12

  

  Step 5: Under Directly Applies To, click Add, type BranchAdmin, and then click OK.

  References:

  https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/adac/introduction-to-active-directory-administrative-center-enhancements--level-100-#bkmk2_test_fgpp1

• Question 206:

  You have a Windows Server container host named Server1 and a container image named image1.

  You need to start a container from image1. The solution must run the container on a Hyper-V virtual machine.

  Which parameter should you specify when you run the docker run command?

  A. --expose
  B. --privileged
  C. --runtime
  D. --entrypoint
  E. --isolation
  E. --isolation

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

• Question 207:

  You should fulfill the security requirements.

  How do you configure the remote administration?

  A. Use the Azure Bastion host
  B. Use Microsoft Entra Privileged Identity Management (PIM)
  C. Just in time (JIT) VM access
  D. Use the Remote Desktop extension for Azure Cloud Services
  C. Just in time (JIT) VM access

• Question 208:

  HOTSPOT

  Your company has a main office and 10 branch offices that are connected by using WAN links. The network contains an Active Directory domain.

  All users have laptops and regularly travel between offices.

  You plan to implement BranchCache in the branch offices.

  In each branch office, you install a server that runs Windows Server and the BranchCache feature. You register the servers in Active Directory.

  You need to configure the laptops to use the local BranchCache server automatically. The solution must minimize administrative effort.

  Which two Group Policy settings should you configure? To answer, select the settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Turn on BranchCache

  To create a Group Policy Object and configure BranchCache modes (see steps 5 and 7 below).

  On a computer upon which the Active Directory Domain Services server role is installed, in Server Manager, click Tools, and then click Group Policy Management. The Group Policy Management console opens.

  In the Group Policy Management console, expand the following path:

  Forest: example.com, Domains, example.com, Group Policy Objects, where example.com is the name of the domain where the BranchCache client computer accounts that you want to configure are located.

  Right-click Group Policy Objects, and then click New. The New GPO dialog box opens. In Name, type a name for the new Group Policy Object (GPO). For example, if you want to name the object BranchCache Client Computers, type BranchCache Client Computers. Click OK.

  In the Group Policy Management console, ensure that Group Policy Objects is selected, and in the details pane right-click the GPO that you just created. For example, if you named your GPO BranchCache Client Computers, right-click BranchCache Client Computers. Click Edit. The Group Policy Management Editor console opens.

  In the Group Policy Management Editor console, expand the following path: Computer Configuration, Policies, Administrative Templates: Policy definitions (ADMX files) retrieved from the local computer, Network, BranchCache.

  Click BranchCache, and then in the details pane, double-click Turn on BranchCache. The policy setting dialog box opens.

  In the Turn on BranchCache dialog box, click Enabled, and then click OK.

  To enable BranchCache distributed cache mode, in the details pane, double-click Set BranchCache Distributed Cache mode. The policy setting dialog box opens.

  In the Set BranchCache Distributed Cache mode dialog box, click Enabled, and then click OK.

  If you have one or more branch offices where you are deploying BranchCache in hosted cache mode, and you have deployed hosted cache servers in those offices, double-click Enable Automatic Hosted Cache Discovery by Service Connection Point. The policy setting dialog box opens.

  In the Enable Automatic Hosted Cache Discovery by Service Connection Point dialog box, click Enabled, and then click OK.

  Box 2: Set BranchCache Distributed Cache mode

  BranchCache modes

  BranchCache has two modes of operation: distributed cache mode and hosted cache mode.

  When you deploy BranchCache in distributed cache mode, the content cache at a branch office is distributed among client computers.

  When you deploy BranchCache in hosted cache mode, the content cache at a branch office is hosted on one or more server computers, which are called hosted cache servers.

  References:

  https://learn.microsoft.com/en-us/windows-server/networking/branchcache/deploy/use-group-policy-to-configure-domain-member-client-computers

• Question 209:

  DRAG DROP

  You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

  You rename Default-First-Site-Name as Site1.

  You plan to ship DC1, DC2, and DC3 to datacenters in different locations.

  You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:

  1. Each domain controller must reside in its own Active Directory site.

  2. The replication schedule between each site must be controlled independently.

  3. Interruptions to replication must be minimized.

  Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 210:

  Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic.

  The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only.

  You plan to manage the servers in the branch office by using a Windows Admin Center gateway.

  On a server in the branch office, you install the Windows Admin Center gateway by using the defaults settings.

  You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway.

  Which inbound TCP port should you allow?

  A. 443
  B. 3389
  C. 5985
  D. 6516
  A. 443