Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 281:

  You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.

  What should you implement?

  A. Active Directory Federation Services (AD FS)
  B. Microsoft Entra Connect in staging mode
  C. Microsoft Entra Connect cloud sync
  D. Microsoft Entra Connect in active mode
  C. Microsoft Entra Connect cloud sync

  ---

  Explanation

  Microsoft Entra Connect cloud sync is a new offering from Microsoft designed to meet and accomplish your hybrid identity goals for synchronization of users, groups, and contacts to Azure AD. It accomplishes this by using the Microsoft Entra cloud provisioning agent instead of the Microsoft Entra Connect application. However, it can be used alongside Microsoft Entra Connect sync and it provides the following benefits:

  * Support for synchronizing to an Microsoft Entra tenant from a multi-forest disconnected Active Directory forest environment: The common scenarios include merger & acquisition (where the acquired company's AD forests are isolated from the parent company's AD forests), and companies that have historically had multiple AD forests.

  * Etc.

  

  How is Microsoft Entra Connect cloud sync different from Microsoft Entra Connect sync?

  With Microsoft Entra Connect cloud sync, provisioning from AD to Microsoft Entra is orchestrated in Microsoft Online Services. An organization only needs to deploy, in their on-premises or IaaS-hosted environment, a light-weight agent that acts as a bridge between Microsoft Entra and AD. The provisioning configuration is stored in Microsoft Entra and managed as part of the service.

  Comparison between Microsoft Entra Connect and cloud sync

  The following table provides a comparison between Microsoft Entra Connect and Microsoft Entra Connect cloud sync:

  

  Scenario:

  The users in the Marketing OU must have access to storage 1.

  The subscription contains a storage account named storage1 that has a file share named share 1.

  The fabrikam.com domain contains an organizational unit (OU) named Marketing.

  The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com.

  The on-premises network of A. Datum contains an Active Directory Domain Services (AD DS) forest named adatum.com.

  Incorrect:

  * Microsoft Entra Connect in staging mode

  With a server in staging mode, you can make changes to the configuration and preview the changes before you make the server active.

  Staging mode

  Staging mode can be used for several scenarios, including:

  High availability.

  Test and deploy new configuration changes.

  Introduce a new server and decommission the old.

  During installation, you can select the server to be in staging mode. This action makes the server active for import and synchronization, but it does not run any exports. A server in staging mode is not running password sync or password writeback, even if you selected these features during installation.

• Question 282:

  HOTSPOT

  You need to configure Azure File Sync to meet the file sharing requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-planning

• Question 283:

  DRAG DROP

  You have a server named Server1 that runs Windows Server and has the Active Directory Federation Services role installed.

  You plan to deploy Web Application Proxy to a server named Server2.

  You export the Active Directory Federation Services (AD FS) certificate from Server1.

  Which actions should you perform on Server2 in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 284:

  Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the servers shown in the following exhibit table.

  

  You plan to install a line-of-business (LOB) application on Server1. The application will install a custom Windows service.

  A new corporate security policy states that all custom Windows services must run under the context of a group managed service account (gMSA). You deploy a root key.

  You need to create, configure, and install the gMSA that will be used by the new application.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point

  A. On Server1, run the setspn command.
  B. On DC1, run the New-ADServiceAccount cmdlet.
  C. On Server1, run the Install-ADServiceAccount cmdlet.
  D. On Server1, run the Get-ADServiceAccount cmdlet.
  E. On DC1, run the Set-ADComputer cmdlet.
  F. On DC1, run the Install-ADServiceAccount cmdlet.
  B. On DC1, run the New-ADServiceAccount cmdlet.
  C. On Server1, run the Install-ADServiceAccount cmdlet.

• Question 285:

  HOTSPOT

  You have a server named Server1 that runs Windows Server, has the File Server Resource Manager role service installed, and hosts a file share named Share02.

  You need to configure Server1 to meet the following requirements:

  1. Notify administrators when a user uses more than 50 GB of space on Share02.

  2. Send administrators a weekly email that lists duplicate files on Server1.

  The solution must minimize administrative effort.

  What should you create for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: A soft quota for Share2

  Notify administrators when a user uses more than 50 GB of space on Share02.

  A soft quota does not enforce the quota limit, but it generates all configured notifications

  Incorrect:

  * A hard quota for Share2

  A hard quota prevents users from saving files after the space limit is reached and generates notifications when the volume of data reaches each configured threshold

  Box 2: A report task Send administrators a weekly email that lists duplicate files on Server1.

  Set maximum values for storage reports

  On the Storage Reports tab when you configure File Server Resource Manager options, you can now specify the maximum number of files per report. When you configure default parameters for a report, you can also configure the following maximum values:

  * For the *Duplicate Files report*, you can specify the maximum number of files in a duplicate group per report, and the maximum number of groups of duplicate files per report.

  * Etc.

  Incorrect:

  * A classification rule

  * A custom file management task

  File management tasks automate the process of finding subsets of files on a server and applying simple commands. These tasks can be scheduled to occur periodically to reduce repetitive costs. Files that will be processed by a file management task can be defined through any of the following properties: Location Classification properties Creation time Modification time Last accessed time File management tasks can also be configured to notify file owners of any impending policy that will be applied to their files.

  * A file screen

  On the File Screening Management node of the File Server Resource Manager MMC snap-in, you can perform the following tasks: Create file screens to control the types of files that users can save, and generate notifications when users attempt to save unauthorized files.

  Define file screening templates that can be applied to new volumes or folders and that can be used across an organization.

  References:

  https://learn.microsoft.com/en-us/iis/web-hosting/configuring-servers-in-the-windows-web-platform/enabling-directory-quotas

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn383587(v=ws.11)

• Question 286:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two servers named Server1 and Server2.

  Server1 contains a disk named Disk2. Disk2 contains a folder named UserData. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup.

  Server1 fails.

  You connect Disk2 to Server2.

  You need to ensure that you can access all the files on Disk2 as quickly as possible.

  What should you do?

  A. Create a storage pool.
  B. Restore files from Azure Backup.
  C. Install the File Server Resource Manager server role.
  D. Install the Data Deduplication server role.
  D. Install the Data Deduplication server role.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/storage/data-deduplication/overview

• Question 287:

  You need to ensure that Automanage meets the technical requirements.

  On which Azure virtual machines should you enable Automanage?

  A. Server1 only
  B. Server2 only
  C. Server1 and Server2 only
  D. Server2 and Server3 only
  E. Server1 and Server4 only
  D. Server2 and Server3 only

  ---

  Explanation

  Azure Automanage must be used on all supported Azure virtual machines.

  Automanage does not support Trusted Launch VMs. This excludes Server1 and Server4.

  Note: What are all of the prerequisites required to enable Azure Automanage?

  The following are prerequisites for enabling

  Azure Automanage:

  Supported Windows Server versions and Linux distros VMs must be in a supported region User must have correct permissions Non-scale set VMs only Automanage does not support Sandbox subscriptions at this time

  *-> Automanage does not support Trusted Launch VMs at this time

  References:

  https://learn.microsoft.com/en-us/azure/automanage/faq

• Question 288:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest. 1 he forest contains the groups shown in the following table.

  

  You need to implement a group nesting strategy.

  Which groups can be added as members of Group12, and which groups can be added as members of Group21? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 289:

  SIMULATION

  You need to ensure that the Azure file share named share1 can sync to on-premises servers.

  The required source files are located in a folder named \\dc1.contoso.com\install.

  You do NOT need to specify the on-premises servers at this time.

  To complete this task, sign in the required computer or computers.

  A. See the explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See the explanation below.

  ---

  Explanation

  Deploy Azure File Sync

  Use Azure File Sync to centralize your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms Windows Server into a quick cache of your Azure file share. You can use any protocol that's available on Windows Server to access your data locally, including SMB, NFS, and FTPS. You can have as many caches as you need across the world.

  Phase 1: Prepare Windows Server to use with Azure File Sync [Maybe it can be skipped]

  Phase 2: Deploy the Storage Sync Service

  Phase 3: Install the Azure File Sync agent

  Phase 1: Prepare Windows Server to use with Azure File Sync [Maybe it can be skipped]

  For each server that you intend to use with Azure File Sync, including each server node in a Failover Cluster, disable Internet Explorer Enhanced Security Configuration. This is required only for initial server registration. You can re-enable it after the server has been registered.

  Note: You can skip this step if you're deploying Azure File Sync on Windows Server Core.

  

  Step 4: In the Internet Explorer Enhanced Security Configuration dialog box, select

  Off for Administrators and Users:

  

  Phase 2: Deploy the Storage Sync Service

  The deployment of Azure File Sync starts with placing a Storage Sync Service resource into a resource group of your selected subscription.

  Step 1: To deploy a Storage Sync Service, go to the Azure portal, click Create a resource and then search for Azure File Sync.

  In the search results, select Azure File Sync, and then select Create to open the Deploy Storage Sync tab.

  Step 2: On the pane that opens, enter the following information:

  Name: A unique name (per region) for the Storage Sync Service.

  Subscription: The subscription in which you want to create the Storage Sync Service.

  Resource group: A resource group is a logical group of Azure resources, such as a storage account or a Storage Sync Service.

  You can create a new resource group or use an existing resource group for Azure File Sync.

  Location: The region in which you want to deploy Azure File Sync. Only supported regions are available in this list.

  Step 3: When you are finished, select Create to deploy the Storage Sync Service.

  Phase 3: Install the Azure File Sync agent

  The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share

  Step 1: You can download the agent from the Microsoft Download Center. When the download is finished, double-click the MSI package to start the Azure File Sync agent installation.

  [Here: The required source files are located in a folder named Idc1.contoso.comlinstal]

  Step 2: Complete the Wizard.

  References:

  https//earn.microsoft.com/en-us/azure/storage/file-sync/fle-sync-deployment-guide