Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 271:

  Your network contains an Active Directory Domain Services (AD DS) domain.

  The domain contains two servers named Server1 and Server2 and the users shown in the following table.

  

  Which users can establish a PowerShell remoting session from Server1 to Server2?

  A. User1 and User3 only
  B. User2 and User4 only
  C. User3 and User4 only
  D. User1, User3. and User4 only
  E. User1, User2, User3, and User4
  D. User1, User3. and User4 only

• Question 272:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a file server named Server1 and three users named User1, User2, and User3.

  Server1 contains a shared folder named Share1 that has the following configurations:

  

  The share permissions for Share1 are configured as shown in the Share Permissions exhibit.

  

  Share1 contains a file named File1.bxt. The advanced security settings for File1.txt are configured as shown in the File Permissions exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box1: no-has change but not full controll cannot take ownership

  Box2: yes

  Box 3:yes

• Question 273:

  DRAG DROP

  You create an Azure virtual machine named Server1 that runs Windows Server.

  Server1 has the disk configurations shown in the following exhibit.

  

  You need to create a new 100-GB volume on Server1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1: Create and attach a new data disk

  Add a data disk.

  1. Sign in to the Azure portal.

  2. Search for and select Virtual machines.

  3. Select a virtual machine from the list.

  4. On the Virtual machine pane, select Disks.

  5. On the Disks pane, select Create and attach a new disk.

  6. In the drop-downs for the new disk, make the selections you want, and name the disk.

  7. Select Save to create and attach the new data disk to the VM.

  Step 2: Initialize the disk Initialize a new data disk.

  1. Connect to the VM.

  2. Select the Windows Start menu inside the running VM and enter diskmgmt.msc in the search box. The Disk Management console opens.

  3. Disk Management recognizes that you have a new, uninitialized disk and the Initialize Disk window appears.

  4. Verify the new disk is selected and then select OK to initialize it.

  5. The new disk appears as unallocated. Right-click anywhere on the disk and select New simple volume. The New Simple Volume Wizard window opens.

  6. Etc.

  Step 3: Create a new simple volume

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/attach-managed-disk-portal

• Question 274:

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain.

  The domain contains a server named Server1 that runs Windows Server.

  You have an Azure subscription that is linked to a Microsoft Entra tenant.

  You need to add an Azure network adapter to Server1.

  Which type of credential should you provide for the adapter?

  A. FIDO2 key
  B. Active Directory user account
  C. Microsoft Entra user account
  D. certificate
  D. certificate

  ---

  Explanation

  Use Azure Network Adapter to connect a server to an Azure Virtual Network

  Add an Azure Network Adapter to a server

  To configure Azure Network Adapter, go to the Network extension for it in Windows Admin Center.

  1. In Wind6ows Admin Center:

  2. Navigate to the server hosting the VMs that you want to add to Azure Network Adapter.

  3. Under Tools, select Networks.

  4. Select Add Azure Network Adapter.

  5. On the Add Azure Network Adapter pane, enter the following required information, and then select

  Create:

  6. Subscription

  7. Location

  8. Virtual Network 9. Gateway Subnet (if doesn't exist)

  10. Gateway SKU (if doesn't exist) 11. Client Address Space *-> Authentication Certificate

  Azure uses certificates to authenticate clients connecting to a virtual network over a Point-to-Site VPN connection.

  The public key information of the root certificate is uploaded to Azure. The root certificate is then considered "trusted" by Azure for a Point-to-Site connection to the virtual network. Client certificates must be generated from the trusted root certificate and installed on the client server. The client certificate is used to authenticate the client when it initiates a connection to the virtual network.

  https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network-adapter

• Question 275:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains two domains named contoso.com and east.contoso.com.

  Contoso.com contains two users named CONTOSO \User1 and EAST\User2.

  You need to ensure that the users can perform the following tasks:

  1. User1 must deploy an additional domain controller to eastcontoso.com.

  2. User2 must deploy a new domain controller that will host a domain named west.contoso.com.

  The solution must follow the principle of least privilege.

  To which group should you add each user? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 276:

  You need to configure remote administration to meet the security requirements.

  What should you use?

  A. an Azure Bastion host
  B. Microsoft Entra Privileged Identity Management (PIM)
  C. the Remote Desktop extension for Azure Cloud Services
  D. just in time (JIT) VM access
  D. just in time (JIT) VM access

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage?tabs=jit-config-asc%2Cjit-request-asc

• Question 277:

  You have an Azure virtual machine named VM1 that runs Windows Server.

  You have an Azure subscription that has Microsoft Defender for Cloud enabled.

  You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.

  What should you do?

  A. Add the PowerShell Desired State Configuration (DSC) extension to VM1.
  B. Configure VM1 to use a user-assigned managed identity.
  C. Configure VM1 to use a system-assigned managed identity.
  D. Add the Custom Script Extension to VM1.
  C. Configure VM1 to use a system-assigned managed identity.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/guest-configuration

• Question 278:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a server named Server1 that has the DFS Namespaces role service installed. Server1 hosts a domain-based Distributed File System (DFS) Namespace named Files.

  The domain contains a file server named Server2. Server2 contains a shared folder named Share1. Share1 contains a subfolder named Folder1.

  In the Files namespace, you create a folder named Folder1 that has a target of \\Server2.contoso.com\Share1\Folder1.

  You need to configure a logon script that will map drive letter M to Folder1. The solution must use the path of the DFS Namespace.

  How should you configure the command to map the drive letter? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 279:

  SIMULATION

  You need to ensure that a DHCP scope named scope1 on SRV1 can service client requests.

  To complete this task, sign in the required computer or computers.

  A. See the explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See the explanation below.

  ---

  Explanation

  One possible solution to ensure that a DHCP scope named scope1 on SRV1 can service client requests is to activate the scope on the DHCP server. A scope must be activated before it can assign IP addresses to DHCP clients. To activate a DHCP scope on SRV1, perform the following steps:

  On SRV1, openDNS Managerfrom theAdministrative Toolsmenu or by typingdnsmgmt.mscin the Run box.

  In the left pane, expand your DHCP server and click onIPv4.

  In the right pane, right-click on the scope that you want to activate, such asscope1, and selectActivate.

  Wait for the scope to be activated. You can verify the activation status by checking the icon next to the scope name. A green arrow indicates that the scope is active, while a red arrow indicates that the scope is inactive.

  Now, the DHCP scope named scope1 on SRV1 can service client requests and lease IP addresses to DHCP clients. You can test the DHCP service by using theipconfig /renewcommand on a DHCP client computer that is connected to the same subnet as the scope.

• Question 280:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  You need to identify which server is the PDC emulator for the domain.

  Solution: From a command prompt, you run netdom.exe query fsmo.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  References:

  https://activedirectorypro.com/how-to-check-fsmo-roles/