Microsoft Microsoft Certified: Windows Server Hybrid Administrator Associate AZ-800 Questions & Answers

• Question 21:

  HOTSPOT

  Configure network communication between the Seattle and New York offices to meet the networking requirements.

  Which action should you take to configure this? Select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 22:

  HOTSPOT

  You need to configure Azure File Sync to meet the file sharing requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-planning

• Question 23:

  HOTSPOT

  You have an Azure subscription named sub1 and 500 on-premises virtual machines that run Windows Server.

  You plan to onboard the on-premises virtual machines to Azure Arc by running the Azure Arc deployment script.

  You need to create an identity that will be used by the script to authenticate access to sub1. The solution must use the principle of least privilege.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal

• Question 24:

  HOTSPOT

  You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-expressroute-portal

• Question 25:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a server named Server1 that has the DFS Namespaces role service installed. Server1 hosts a domain-based Distributed

  File System (DFS) Namespace named Files.

  The domain contains a file server named Server2. Server2 contains a shared folder named Share1. Share1 contains a subfolder named Folder1.

  In the Files namespace, you create a folder named Folder1 that has a target of \\Server2.contoso.com\Share1\Folder1.

  You need to configure a logon script that will map drive letter M to Folder1. The solution must use the path of the DFS Namespace.

  How should you configure the command to map the drive letter? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 26:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table.

  

  You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients:

  

  VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  It is important to remember that the client computers that are connecting to the VPNs are not RADIUS clients. The VPN servers are the RADIUS clients. You configure the RADIUS clients on the RADIUS server (NPS1) server to allow the

  VPN servers to use NPS1 to authenticate the connections.

  Box 1: No

  NPSClient1 is not enabled.

  Box 2: Yes

  NPSClient2 is configured correctly. It is enabled and has the correct IP address of VPN2.

  Box 3: No

  NPSClient3 has an incorrect IP address configured for VPN3.

• Question 27:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using

  DEFAULTIPSITELINK.

  You open a new branch office that contains only client computers.

  You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

  Solution: You create a new site named Site4 and associate Site4 to DEFAULTSITELINK.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 28:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using

  DEFAULTIPSITELINK.

  You open a new branch office that contains only client computers.

  You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

  Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 29:

  You have a server named Server1 that runs Windows Server. Server1 has the storage pools shown in the following table.

  

  You plan to create a virtual disk named VDisk1 that will use storage tiers. Which pools can you use to create VDisk1?

  A. Pool2 only

  B. Pool1 only

  C. Pool1, Pool2, and Pool3

  D. Pool1 and Pool2 only

  E. Pool3 only

  F. Pool2 and Pool3 only

  G. Pool1 and Pool3 only

  Correct Answer: F

  Storage tiering requires both standard HDDs and SSDs. We cannot use Pool1 because it does not have any SSDs.

• Question 30:

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.

  

  You need to ensure that names from fabrikam.com can be resolved from the on-premises network. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Create a stub zone for fabrikam.com on DC1.

  B. Create a conditional forwarder for fabrikam.com on DC1.

  C. Create a secondary zone for fabrikam.com on DC1.

  D. Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.

  E. Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine as a DNS forwarder.

  Correct Answer: BE

  Reference: https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder