Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 251:

  You have an on-premises server named DNS1 that runs Windows Server and has the DNS Server role.

  You have an Azure subscription that contains an Azure Private DNS zone named contoso.com.

  You implement an Azure DNS Private Resolver named Resolver1.

  You need to ensure that DNS1 can resolve names from contoso.com by using Resolver1.

  The solution must minimize administrative effort.

  What should you configure?

  A. DNS policy
  B. a Site-to-Site (S2S) VPN connection
  C. root hints
  D. a secondary DNS zone
  D. a secondary DNS zone

  ---

  Explanation

  Resolve Azure and on-premises domains

  Azure DNS Private Resolver

  The Azure DNS Private Resolver is a service that can resolve on-premises DNS queries for Azure DNS private zones. Previously, it was necessary to deploy a VM-based custom DNS resolver, or use non-Microsoft DNS, DHCP, and IPAM (DDI) solutions to perform this function.

  Configure on-premises DNS conditional forwarders

  The procedure to configure on-premises DNS depends on the type of DNS server you're using. In the following example, a Windows DNS server at 10.100.0.2 is configured with a conditional forwarder for the private DNS zone azure.contoso.com. The conditional forwarder is set to forward queries to 10.10.0.4, which is the inbound endpoint IP address for your Azure DNS Private Resolver.

  There's another IP address also configured here to enable DNS failover

  

  References:

  https://learn.microsoft.com/en-us/azure/dns/private-resolver-hybrid-dns

• Question 252:

  HOTSPOT

  You have a Windows Server container host named Server1 and an Azure subscription.

  You deploy an Azure container registry named Registry1 to the subscription.

  On Server1, you create a container image named image1.

  You need to store image1 in Registry1.

  Which command should you run on Server1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure-cli#push-the-image-to-your-registry

• Question 253:

  SIMULATION

  You need to run a container that uses the mcr.microsoft.com/windows/servercore/iis image on SRV1. Port 80 on the container must be published to port 5001 on SRV1 and the container must run in the background.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Pull a container base image

  All containers are created from container images. Microsoft offers several starter images, called base images, to choose from. This procedure pulls (downloads and installs) the lightweight Nano Server base image.

  Step 1:

  Run a Windows container using Windows Admin Center

  You can use Windows Admin Center to run your containers locally. Specifically, you use the Containers extension of your Windows Admin Center instance to run the containers. First, open the container host you want to manage, and in the Tools pane, select the Containers extension. Then, select the Images tab inside the Container extension under Container Host.

  

  Step 2:

  If your host doesn't have a base container image, select the Pull option to open the Pull Container Image settings:

  

  Step 3:

  In the Pull Container Image settings, provide the image URL and the tag. If you aren't certain which image to pull, Windows Admin Center provides a list of common images from Microsoft. You can also provide the credentials to pull an image from a private repository. Once you fill out the necessary information, click Pull. Windows Admin Center will start the pull process on the container host. After the download is complete, you should see the new image on the Images tab.

  

  On the Run menu, set up the configuration for the container, such as the container name, the isolation type, which ports to publish, and memory and CPU allocation.

  Step 4: In Publish port(s) enter: 80:5001 We need to specify the port.

  Note: Publish or expose port (-p, --expose) docker run -p 127.0.0.1:80:8080/tcp ubuntu bash

  This binds port 8080 of the container to TCP port 80 on 127.0.0.1 of the host machine.

  Step 5: Click 'Add' to add additional options.

  Step 6:

  Type: -d

  Note: Run in detached mode.

  This is great so far, but your sample application is a web server and you shouldn't have to have your terminal connected to the container. Docker can run your container in detached mode in the background. To do this, you can use the -- detach or -d for short. Docker will start your container the same as before but this time will detach from the container and return you to the terminal prompt.

  docker run -d -p 8080:8080 docker-gs-ping d75e61fcad1e0c0eca69a3f767be6ba28a66625ce4dc42201a8a323e8313c14e Docker started your container in the background and printed the container ID on the terminal.

  Step 7: Click Run

  Once you have finished the configuration for the container, click Run. You can see the status of the running containers on the Containers tab:

  

  References:

  https://learn.microsoft.com/en-us/virtualization/windowscontainers/quick-start/run-your-first-container

  https://docs.docker.com/engine/reference/commandline/run/

• Question 254:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  You need to identify which server is the PDC emulator for the domain.

  Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 255:

  HOTSPOT

  Your network contains two VLANs for client computers and one VLAN for a datacenter. Each VLAN is assigned an IPv4 subnet. Currently, all the client computers use static IP addresses.

  You plan to deploy a DHCP server to the VLAN in the datacenter.

  You need to use the DHCP server to provide IP configurations to all the client computers.

  What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate option the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: 3

  You need a DHCP scope for each of the three subnets.

  Box 2: 2

  The two client VLANs need a DHCP Relay Agent to forward DHCP requests to the DHCP server. The datacenter VLAN that contains the DHCP server does not require a DHCP Relay Agent.

• Question 256:

  You need to meet the technical requirements for VM3.

  On which volumes can you enable Data Deduplication?

  A. C and D only
  B. D only
  C. C, D, E, and F
  D. D and E only
  E. D, E, and F only
  D. D and E only

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/storage/data-deduplication/understand

• Question 257:

  You plan to deploy a containerized application that requires .NET Core.

  You need to create a container image for the application. The image must be as small as possible.

  Which base image should you use?

  A. Windows Server
  B. Nano Server
  C. Windows
  D. Server Core
  B. Nano Server

  ---

  Explanation

  References:

  https://techcommunity.microsoft.com/t5/containers/nano-server-x-server-core-x-server-which-base-image-is-the-right/ba-p/2835785

• Question 258:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

  

  The domain contains the users shown in the following table.

  

  On Server2, you run the Enable-PSRemoting cmdlet

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 259:

  SIMULATION

  You need to ensure that all the computers in the domain use DNSSEC to resolve names in the adatum.com zone.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  To sign a zone in DNS Manager

  Step 1: Open DNS Manager on a primary, authoritative DNS server, or connect to a primary, authoritative DNS server with DNS Manager.

  Step 2: Right-click an unsigned zone (here adatum.com), point to DNSSEC, and then click Sign the Zone.

  Step 3: The Zone signing Wizard is displayed, click next

  We will use the default settings.

  Step 4: Choose the default settings, click next, next again, then finish.

  (From the DNS manager press F5. A lock is displayed on our zone telling us that our zone has been signed.)

  References:

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593644(v=ws.11)

  https://www.serveracademy.com/courses/installing-and-configuring-domain-name-system-dns/installing-dnssec-on-windows-2016-server/

• Question 260:

  You need to use the principle of least privilege.

  Choose a solution to meet the technical requirements for User1.

  A. Create a delegation on contoso.com.
  B. Create a delegation on OU3.
  C. Add Users1 to the Server Operators group in contoso.com.
  D. Add Users1 to the Account Operators group in contoso.com.
  B. Create a delegation on OU3.