Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 261:

  You have an Azure virtual machine named VM1 that has a private IP address only.

  You configure the Windows Admin Center extension on VM1.

  You have an on-premises computer that runs Windows 11. You use the computer for server management.

  You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1.

  What should you configure?

  A. an Azure Bastion host on the virtual network that contains VM1.
  B. a VPN connection to the virtual network that contains VM1.
  C. a private endpoint on the virtual network that contains VM1.
  D. a network security group (NSG) rule that allows inbound traffic on port 443.
  D. a network security group (NSG) rule that allows inbound traffic on port 443.

• Question 262:

  HOTSPOT

  Your network contains a Microsoft Entra Domain Services domain named sk230128outlook.onmicrosoft.com. The domain contains a server named Server1 that runs Windows Server.

  You have the users shown in the following table.

  

  The domain contains the Group Policy Objects (GPOs) shown in the following exhibit.

  

  The minimum password length for each GPO is configured as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 263:

  DRAG DROP

  Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. Contoso.com contains three child domains named amer.contoso.com, apac.contoso.com, and emea.contoso.com.

  Fabrikam.com contains a child domain named apac.fabrikam.com. A bidirectional forest trust exists between contoso.com and fabrikam.com.

  You need to provide users in the contoso.com forest with access to the resources in the fabrikam.com forest. The solution must meet the following requirements:

  1. Users in contoso.com must only be added directly to groups in the contoso.com forest.

  2. Permissions to access the resources in fabrikam.com must only be granted directly to groups in the fabrikam.com forest.

  3. The number of groups must be minimized.

  Which type of groups should you use to organize the users and to assign permissions? To answer, drag the appropriate group types to the correct requirements. Each group type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 264:

  You have servers that run Windows Server 2022 as shown in the following table.

  

  Server2 contains a .NET app named App1.

  You need to establish a WebSocket connection from App1 to the SQL Server instance on Server1. The solution must meet the following requirements:

  1. Minimize the number of network ports that must be open on the on-premises network firewall.

  2. Minimize administrative effort.

  What should you create first?

  A. an Azure Relay namespace
  B. an Azure VPN gateway
  C. a WFC relay connection
  D. a hybrid connection
  A. an Azure Relay namespace

  ---

  Explanation

  Hybrid Connections

  The Hybrid Connections feature in >>Azure Relay<< is a secure, and open-protocol evolution of the Relay features that existed earlier. You can use it on any platform and in any language. Hybrid Connections feature in Azure Relay is based on HTTP and WebSockets protocols. It allows you to send requests and receive responses over web sockets or HTTP(S). This feature is compatible with WebSocket API in common web browsers.

• Question 265:

  HOTSPOT

  You have a Windows Server 2022 container host named Host1 and a container registry that contains the container images shown in the following table.

  

  You need to run the containers on Host1.

  Which isolation mode can you use for each image? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Hyper-V isolation or process isolation Isolation Modes Windows Server host OS compatibility

  

  Box 2: Hyper-V isolation only

  Note: Windows containers offer two distinct modes of runtime isolation: process and Hyper-V isolation. Containers running under both isolation modes are created, managed, and function identically. They also produce and consume the same container images. The difference between the isolation modes is to what degree of isolation is created between the container, the host operating system, and all of the other containers running on that host.

  References:

  https://learn.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/version-compatibility

• Question 266:

  You need to meet the technical requirements for the site links.

  Which users can perform the required tasks?

  A. Admin1 only.
  B. Admin1 and Admin3 only.
  C. Admin1 and Admin2 only.
  D. Admin3 only.
  E. Admin1, Admin2 and Admin3.
  A. Admin1 only.

  ---

  Explanation

  Membership in the Enterprise Admins group or the Domain Admins group in the forest root domain is required.

• Question 267:

  You have a server named Server1 that runs Windows Server. The disks on Server1 are configured as shown in the following exhibit.

  

  You need to convert volume E to ReFS. The solution must meet the following requirements:

  1. The data on volume E needs to be retained.

  2. Minimize administrative effort.

  What should you do first?

  A. Back up the data on volume
  B. Take Disk 2 offline.
  C. Convert Disk 2 to a dynamic disk.
  D. Run convert.exe.
  A. Back up the data on volume

• Question 268:

  HOTSPOT

  You have a server named Server1 that runs Windows Server. Server1 has a just-a-bunch-of-disks (JBOD) enclosure attached.

  You plan to create a storage pool on Server1 and a virtual disk that will use a mirror layout.

  You are considering whether to use a two-way or a three-way mirror layout.

  What is the minimum number of disks required for each type of mirror layout? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 269:

  SIMULATION

  You need to create a Group Policy Object (GPO) named GPO1 that only applies to a group named MemberServers.

  To complete this task, sign in the required computer or computers.

  A. See the explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See the explanation below.

  ---

  Explanation

  

  

  

• Question 270:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are planning the deployment of DNS to a new network.

  You have three internal DNS servers as shown in the following table.

  

  The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.

  You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

  Solution: You configure Server2 and Server3 to forward DNS requests to 10.0.1.10.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes