Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 231:

  HOTSPOT

  You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.

  You have an Azure subscription.

  You need to monitor Server1 by using Azure Monitor.

  Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/agents/gateway

  https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-monitor

• Question 232:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the servers shown in the following table.

  

  You need to create a Distributed File System (DFS) namespace that will contain the following:

  1. A domain-based namespace named \\contoso.com\Public

  2. A folder named Finance

  Which servers can you configure as folder targets for the Finance folder?

  A. Server3 only
  B. Server2 and Server3 only
  C. Server1 and Server3 only
  D. Server1, Server2, and Server3 only
  E. Server1, Server2, Server3, and Server4
  E. Server1, Server2, Server3, and Server4

• Question 233:

  SIMULATION

  You need to create a group-managed service account (gMSA) named gMSA1 and make gMSA1 available on SRV1.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  To create a gMSA using the New-ADServiceAccount cmdlet.

  Step 1: On the Windows Server 2012 domain controller (here SRV1), run Windows PowerShell from the Taskbar.

  Step 2: At the command prompt for the Windows PowerShell, type the following commands, and then press ENTER. (The Active Directory module will load automatically.)

  New-ADServiceAccount gMSA1

  Enter the command on a single line.

  Step 3: Install the gMSA on the host

  The Install-ADServiceAccount cmdlet installs an existing gMSA on the server on which the cmdlet is run. Use the cmdlet with the following syntax:

  Install-ADServiceAccount `

  -Identity <ADServiceAccount>

  Run the following PowerShell commands as administrator.

  Install-ADServiceAccount gMSA1 Note: Managed Service Accounts container

  To work effectively, gMSAs must be in the Managed Service Accounts container.

  

  References:

  https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts

  https://learn.microsoft.com/en-us/entra/architecture/service-accounts-group-managed

• Question 234:

  You have an Azure subscription that contains the virtual networks shown in the following table.

  

  You deploy a virtual machine named VM1 that runs Windows Server. VM1 is connected to Subnet11.

  You plan to add an additional network interface named NIC1 to VM1.

  To which subnets can NIC1 be attached?

  A. Subnet11 only
  B. Subnet12 only
  C. Subnet11 and Subnetl2 only
  D. Submet12 and Subnet21 only
  E. Subnet11, Subnet12, Subnet21, and Subnet31
  C. Subnet11 and Subnetl2 only

  ---

  Explanation

  C: is correct, it is possible to attach many NICs to the same subnet so additional NIC to subnet11 is also possible.

• Question 235:

  HOTSPOT

  Your network contains the domains shown in the following exhibit.

  

  You need to establish trust relationships as shown in the following exhibit.

  

  Which type of trust can you use for Trust1 and Trust2? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 236:

  You have a server named Server1 that hosts Windows containers.

  You plan to deploy an application that will have multiple containers. Each container will be on the same subnet. Each container requires a separate MAC address and IP address. Each container must be able to communicate by using its IP address.

  You need to create a Docker network that supports the deployment of the application.

  Which type of network should you create?

  A. NAT
  B. transparent
  C. I2bridge
  D. I2tunnel
  B. transparent

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/network-drivers-topologies

• Question 237:

  You have an Azure subscription that contains a virtual machine named VM1 as shown in the following exhibit.

  

  The subscription has the disks shown in the following table.

  

  Which disks can you attach as data disks to VM1?

  A. Disk2 only
  B. Disk4 only
  C. Disk1 and Disk2 only
  D. Disk2 and Disk4 only
  E. Disk1, Disk3, and Disk4 only
  F. Disk1, Disk2, Disk3. and Disk4
  C. Disk1 and Disk2 only

  ---

  Explanation

  Can I attach a disk to a VM in another region?

  No. All managed disks, even shared disks, must be in the same region as the VM they are attaching to.

  VM1 is in East US, Zone 1, resource group RG1.

  Disk1 is in East US. OK.

  Disk2 is in East US. OK.

  Disk3 is in West US. Not OK.

  Disk2 is in West US. Not OK.

  References:

  https://learn.microsoft.com/en-us/azure/virtual-machines/faq-for-disks

• Question 238:

  HOTSPOT

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

  

  The domain controllers do NOT have internet connectivity.

  You plan to implement Microsoft Entra Password Protection for the domain.

  You need to deploy Microsoft Entra Password Protection agents. The solution must meet the following requirements:

  1. All Microsoft Entra Password Protection policies must be enforced.

  2. Agent updates must be applied automatically.

  3. Administrative effort must be minimized.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: DC1 and DC2 only Install the Microsoft Entra Password Protection agent on Incorrect:

  * RODC1

  Read-only domain controller considerations

  Password change or set events aren't processed and persisted on read-only domain controllers (RODCs). Instead, they're forwarded to writable domain controllers. You don't have to install the Microsoft Entra Password Protection DC agent software on RODCs.

  Box 2: Server2

  Install the Microsoft Entra Password Protection Proxy on Microsoft Entra Password Protection proxy service

  The following requirements apply to the Microsoft Entra Password Protection proxy service:

  * Network access must be enabled for the set of ports and URLs specified in the Application Proxy environment setup procedures.

  * Etc.

  Note: Deployment strategy

  The following diagram shows how the basic components of Microsoft Entra Password Protection work together in an on-premises Active Directory environment:

  

  References:

  https://learn.microsoft.com/en-us/entra/identity/authentication/howto-password-ban-bad-on-premises-deploy

• Question 239:

  DRAG DROP

  You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.

  You deploy five servers to the domain. You add the servers to a group named ITFarmHosts.

  You plan to configure a Network Load Balancing (NLB) cluster named NLBCluster.contoso.com that will contain the five servers.

  You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate.

  Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/create-the-key-distribution-services-kds-root-key

  https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts

• Question 240:

  You have a server named Server1 that runs Windows Server and has the DHCP Server role installed. Server1 contains the following single scope:

  1. Scope: 192.168.16.0

  2. Address pool: 192.168.16.1-192.168.16.254

  3. Subnet mask: 255.255.255.0

  4. Lease duration: 8 days

  You have four testing devices that are configured with static IP addresses as shown in the following table.

  

  The test devices are turned on once a month.

  You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other devices when the test devices are offline. The solution must minimize administrative effort.

  What should you do?

  A. Create a policy.
  B. Create reservations.
  C. Configure the Scope options.
  D. Create an exclusion range.
  D. Create an exclusion range.

  ---

  Explanation

  HOW TO RESERVE IP ADDRESS ON WINDOWS SERVER DHCP?

  DHCP reservation is the creation of a special entry on the DHCP server. Thanks to this, the same IP address from the DHCP scope address pool will be issued for a specific device (MAC address).

  Note: If some network devices (printers, scanners, workstations) require a permanent IP address (instead of manually setting a static IP address in the device settings), you can reserve an IP address on a DHCP server. In the DHCP server on Windows Server 2019, you can create a reservation from any leased IP address, or manually create a new entry.

  Open the DHCP Management Console (System Manager > Tools > DHCP) or simply run the dhcpmgmt.msc command. Expand your DHCP server, select IPv4, then select the scope where you want to manage reservations.

  If the DHCP server client already received a dynamic IP address from your DHCP server, you can reserve this address. Go to the Address Leases section, find the DHCP client you need in the list (the fact that this IP address is dynamic is indicated by the presence of a date in the Lease Expiration field), right-click on it, and select Add to Reservation.

  References:

  https://theitbros.com/reserve-ip-address-dhcp/