Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 211:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table.

  

  Server1 contains a folder named D:\Folder1. The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)

  

  Folder1 is shared by using the following configurations:

  

  The share permissions for Share1 are shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  User1 -> Group1

  User2 > Group2

  User3 > Group3 Permission on share:

  Group1 - Allow - Change

  Group3 - Allow - Full Control

  But on folder permissions Group1 Read Group2 Write

  User1 has access share and permissions.

  User2 has only access on file.

  User3 has access to to share but not permission on folder.

• Question 212:

  Your on-premises network contains an Active Directory domain named contoso.com. You have an Microsoft Entra tenant.

  You plan to sync contoso.com with the Microsoft Entra tenant by using Microsoft Entra Connect cloud sync.

  You need to create an account that will be used by Microsoft Entra Connect cloud sync.

  Which type of account should you create?

  A. system-assigned managed identity
  B. group managed service account (gMSA)
  C. user
  D. InetOrgPerson
  B. group managed service account (gMSA)

  ---

  Explanation

  Migrate to Microsoft Entra Connect cloud sync for an existing synced AD forest

  Install the Microsoft Entra Connect provisioning agent 1. In the Azure portal, select Azure Active Directory.

  2. On the left, select Microsoft Entra Connect.

  3. On the left, select Cloud sync.

  * Details omitted* 11. On the Configure Service Account screen, select a group Managed Service Account (gMSA). This account is used to run the agent service. If a managed service account is already configured in your domain, you might skip this screen. If prompted, choose either:

  Create gMSA which lets the agent create the provAgentgMSA$ managed service account for you. The group managed service account (for example, CONTOSO\provAgentgMSA$) will be created in the same Active Directory domain where the host server has joined. To use this option, enter the Active Directory domain administrator credentials.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/hybrid/cloud-sync/tutorial-pilot-aadc-aadccp

• Question 213:

  SIMULATION

  You need to ensure that SRV1 only leases IP addresses from the range of 192.168.1.190 to 192.168.1.200 to computers that have a MAC address that starts with aabb.

  To complete this task, sign in the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Create policies

  The DHCP Policy Configuration Wizard will be used to create a unique policy for SRV1. A policy configured for an individual computer is not typical and is only configured for demonstration purposes. On a corporate network, you can use wildcards and other conditions to match multiple DHCP client devices.

  Step 1: In the DHCP console, under Scope, right-click Policies and then click New Policy.

  Step 2: Next to Policy Name, type Client1 Policy, and then click Next.

  Step 3: On the Configure Conditions for the policy page, click Add.

  Step 4: In the Add/Edit Condition dialog box, choose MAC Address next to Criteria, type the MAC address for Client1 next to Value (aabb* ), and then click Add, then click OK.

  In our case use: aabb*

  

  Step 5: Click Next, and then in Configure settings for the policy, type 192.168.1.190 next to Start IP address and type 192.168.1.200 next to End IP address.

  

  Step 6: Finish the wizard.

  References:

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831538

• Question 214:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IP addresses.

  You plan to use DHCP to assign IP addresses to the servers.

  You need to ensure that each server always receives the same IP address.

  Which type of identifier should you use to create a DHCP reservation for each server?

  A. universally unique identifier (UUID)
  B. fully qualified domain name (FQDN)
  C. NetBIOS name
  D. MAC address
  D. MAC address

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/powershell/module/dhcpserver/add-dhcpserverv4reservation?view=windowsserver2022-ps

• Question 215:

  HOTSPOT

  You have an Azure Active Directory Domain Services (Microsoft Entra DS) domain.

  You create a new user named Admin1.

  You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy

• Question 216:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the resources shown in the following table.

  

  You plan to replicate a volume from Server1 to Server2 by using Storage Replica.

  You need to configure Storage Replica.

  Where should you install Windows Admin Center?

  A. Server1
  B. CLIENT1
  C. DC1
  D. Server2
  B. CLIENT1

  ---

  Explanation

  Note: Storage Replica is Windows Server technology that enables replication of volumes between servers or clusters for disaster recovery. It also enables you to create stretch failover clusters that span two sites, with all nodes staying in sync.

  References:

  https://learn.microsoft.com/en-us/windows-server/storage/storage-replica/server-to-server-storage-replication

• Question 217:

  You have an on-premises server named Server1 that runs Windows Server.

  You have an Azure subscription that contains a virtual network named VNet1.

  You need to connect Server1 to VNet1 by using Azure Network Adapter.

  What should you use?

  A. the Azure portal
  B. Microsoft Entra Connect
  C. Device Manager
  D. Windows Admin Center
  D. Windows Admin Center

  ---

  Explanation

  Connect standalone servers by using Azure Network Adapter.

  You can connect an on-premises standalone server to Microsoft Azure virtual networks by using the Azure Network Adapter that you deploy through the Windows Admin Center (WAC).

  Use a Windows Server with Windows Admin Center installed to deploy the Azure Network Adapter.

  References:

  https://learn.microsoft.com/en-us/azure/architecture/hybrid/azure-network-adapter

• Question 218:

  HOTSPOT

  You have a Windows Server 2022 container host named Host1 that has the Subsystem for Linux installed and the container images shown in the following table.

  

  You need to deploy the images to Host1. The solution must maximize the isolation of the containers.

  Which images can you run by using process isolation, and which images can you run by using Hyper-V isolation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 219:

  DRAG DROP

  You have two on-premises servers named Server1 and Server2 that run Windows Server.

  You have an Azure Storage account named storage1 that contains a file share named share1. Server1 syncs with share1 by using Azure File Sync.

  You need to configure Server2 to sync with share1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-server-registration

  https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-server-endpoint-create?tabs=azure-portal

• Question 220:

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 10 servers that run Windows Server. The servers have static IPv4 addresses.

  You plan to use DHCP to assign IPv4 addresses to the servers.

  You need to ensure that each server always receives the same IPv4 address.

  Which type of identifier should you use to create a DHCP reservation for each server?

  A. fully qualified domain name (FQDN)
  B. universally unique identifier (UUID)
  C. NetBIOS name
  D. MAC address
  D. MAC address

  ---

  Explanation

  How to Reserve IP Address on Windows Server DHCP?

  DHCP reservation is the creation of a special entry on the DHCP server. Thanks to this, the same IP address from the DHCP scope address pool will be issued for a specific device (MAC address).

  To create a new reservation, right-click the Reservations section in the DHCP console and select New Reservation.

  Fill in the following fields in the New reservation window:

  Reservation name: specify the network name of the device; IP address: specify the IP address from your DHCP scope that you want to assign to the device;

  MAC address: use the physical device address obtained earlier; Descriptions: provide a description of the device (optional).

  References:

  https://theitbros.com/reserve-ip-address-dhcp/