Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 31:

  SIMULATION

  You need to collect the recommended Windows Performance Counters from SRV1 in a Log Analytics workspace.

  The required files are stored in a shared folder named \\dc1\install.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Microsoft Azure - Enable Windows Performance Counters in Azure for Monitoring Collect windows performance counters from Log Analytics agents at custom intervals to gain insight into the performance of hardware components, operating systems, and applications.

  Implementation:

  Step 1: Log in to Azure Portal.

  Step 2: Access the Log Analytics Workspace >> Select your Log Analytics.

  Step 3: After selecting the select Log Analytics Workspace, Navigate to Settings >> Agents Configuration

  

  Step 4: Select Windows Performance Counters >>You can start with the recommended performance counters by clicking on Add recommended counters or using the add button to add a new performance counter.

  

  Step 5: Click on + Add Performance Counter >> Select the Performance Counter name

  

  Step 6: After adding the required Performance Counter name, click on Apply to make the changes.

  That's it. You are done. At this point, we have successfully enabled Windows Performance Counters in Azure for Monitoring.

  References:

  https://www.geeksforgeeks.org/microsoft-azure-enable-windows-performance-counters-in-azure-for-monitoring/

• Question 32:

  Your network contains an Active Directory forest. The forest contains two domains named contoso.com and east.contoso.com and the servers shown in the following table.

  

  Contoso.com contains a user named User1.

  You add User1 to the built-in Backup Operators group in contoso.com.

  Which servers can User1 back up?

  A. DC1 only
  B. Server1 only
  C. DC1 and DC2 only
  D. DC1 and Server1 only
  E. DC1, DC2, Server1, and Server2
  A. DC1 only

  ---

  Explanation

  A member of the Backup Operators group can perform backup operations for all domain controllers in the domain.

  Note: Members of the Backup Operators group can back up and restore all files on a computer, regardless of the permissions that protect those files. Backup Operators also can log on to and shut down the computer. This group can't be renamed, deleted, or removed. By default, this built-in group has no members, and it can perform backup and restore operations on domain controllers.

  References:

  https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups

• Question 33:

  HOTSPOT

  You have a Windows Server container host named Server1 that has a single disk.

  On Server1, you plan to start the containers shown in the following table.

  

  Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container

• Question 34:

  You have three on-premises servers named SVR1, SVR2, and SVR3 that run Windows Server. SRV1 has a direct-attached storage (DAS) array.

  You plan to deploy a failover cluster named Cluster1 by using SVR2 and SVR3.

  You need to ensure that the DAS array on SRV1 can be used as shared storage for Cluster1.

  The solution must ensure that Cluster1 has block-level access to the storage.

  What should you do first on SRV1?

  A. Run the start-service -name msiscsi cmdlet.
  B. Install the iSCSI Target Server role service.
  C. Install the File Server role service.
  D. Run the Enable-ClusterStorageSpacesDirect cmdlet.
  D. Run the Enable-ClusterStorageSpacesDirect cmdlet.

  ---

  Explanation

  To utilize a DAS array as shared storage for a Windows failover cluster with block-level access, you can leverage Storage Spaces Direct (S2D) or configure the DAS as a Cluster Shared Volume (CSV). S2D creates a software-defined storage pool from the DAS drives, enabling highly available virtual disks.

  Alternatively, you can add the DAS as a CSV, making it accessible by all cluster nodes.

  Note:

  Enable Storage Spaces Direct

  After creating the cluster, use the Enable-ClusterStorageSpacesDirect PowerShell cmdlet, which will put the storage system into the Storage Spaces Direct mode

  Note 2:

  Using Storage Spaces Direct (S2D):

  1. Install Failover Clustering and Storage Spaces Direct: Ensure both features are installed on all cluster nodes via Server Manager or PowerShell.

  2. Configure Storage Spaces Direct: In Server Manager, navigate to File and Storage Services > Storage Pools. Create a storage pool using the DAS drives, enabling mirroring or parity for redundancy.

  3. Create Virtual Disks Within the storage pool, create virtual disks that will be used as shared storage for the cluster.

  4. Create Cluster Shared Volumes (CSV): In Failover Cluster Manager, add the virtual disks as Cluster Shared Volumes. This makes the storage accessible by all cluster nodes as a single volume

  References:

  https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/deploy-storage-spaces-direct

• Question 35:

  You have a server named Host1 that has the Hyper-V server role installed. Host1 hosts a virtual machine named VM1.

  You have a management server named Server1 that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager.

  You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From the Hyper-V Settings of Host1, select Allow enhanced session mode.
  B. From Virtual Machine Connection, select Show Options, and then select the USB hard drive.
  C. From Virtual Machine Connection, switch to a basic session.
  D. From Disk Management on Host1, select Rescan Disks.
  E. From Disk Management on Host1, attach a virtual hard disk.
  A. From the Hyper-V Settings of Host1, select Allow enhanced session mode.
  B. From Virtual Machine Connection, select Show Options, and then select the USB hard drive.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hyper-v-virtual-machine-with-vmconnect

• Question 36:

  HOTSPOT

  You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.

  You need to limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely.

  You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files.

  How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/session-configurations?view=powershell-7.2

  https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/new-pssessionconfigurationfile?view=powershell-7.2

• Question 37:

  DRAG DROP

  You need to implement the planned change for Data1.

  Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Step 1: Deploy the Azure Storage Sync Service A. Datum plans to implement the following changes: Sync Data1 to share 1.

  The subscription contains a storage account named storage1 that has a file share named share 1.

  Deploy Azure File Sync

  Deploy the Storage Sync Service

  The deployment of Azure File Sync starts with placing a Storage Sync Service resource into a resource group of your selected subscription.

  Step 2: Install and register the Azure File Sync agent.

  Install the Azure File Sync agent

  The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share.

  Register Windows Server with Storage Sync Service Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service. A server can only be registered to one Storage Sync Service and can sync with other servers and Azure file shares associated with the same Storage Sync Service.

  Step 3: Create a sync group Create a sync group and a cloud endpoint

  A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints.

  A server endpoint represents a path on a registered server. A server can have server endpoints in multiple sync groups. You can create as many sync groups as you need to appropriately describe your desired sync topology.

  Step 4: Add a server endpoint Create a server endpoint

  A server endpoint represents a specific location on a registered server, such as a folder on a server volume.

  To add a server endpoint, go to the newly created sync group. Under Server endpoints, select +Add server endpoint. The Add server endpoint blade opens. Etc.

  References:

  https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide

• Question 38:

  You have servers that have the DNS Server role installed. The servers are configured as shown in the following table.

  

  All the client computers in the New York office use Server2 as the DNS server.

  You need to configure name resolution in the New York office to meet the following requirements:

  1. Ensure that the client computers in New York can resolve names from contoso.com.

  2. Ensure that Server2 forwards all DNS queries for internet hosts to

  131. 107.100.200.

  The solution must NOT require modifications to Server1.

  Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a forwarder
  B. a conditional forwarder
  C. a delegation
  D. a secondary zone
  E. a reverse lookup zone
  A. a forwarder
  B. a conditional forwarder

  ---

  Explanation

  A conditional forwarder is required for contoso.com.

  A forwarder is required for all other domains.

  When you have a conditional forwarder and a forwarder configured, the conditional forwarder will be used for the specified domain.

  You could use a secondary zone for contoso.com but that would require a configuration change on Server1.

• Question 39:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.

  You open a new branch office that contains only client computers.

  You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

  Solution: You create a new subnet object that is associated to Site1.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  Yes, creating a new subnet object that is associated with Site1 would meet the goal of ensuring that client computers in the new office are primarily authenticated by the domain controllers in Site1. When a client computer requests authentication, Active Directory will use the subnet-to-site association to determine which site the client computer is in, and will then direct the authentication request to a domain controller in that site. By associating the new subnet with Site1, client computers in the new office will be directed to authenticate with domain controllers in Site1.

• Question 40:

  HOTSPOT

  Your on-premises network contains an Active Directory Domain Services (AD DS) domain.

  You plan to sync the domain with an Microsoft Entra tenant by using Microsoft Entra Connect cloud sync.

  You need to meet the following requirements:

  1. Install the software required to sync the domain and Azure AD.

  2. Enable password hash synchronization.

  What should you install, and what should you use to enable password hash synchronization? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Microsoft Entra Connect

  Implement password hash synchronization with Microsoft Entra Connect sync

  When you install Microsoft Entra Connect by using the Express Settings option, password hash synchronization is automatically enabled.

  Box 2: Azure Portal

  Express installation of Microsoft Entra Connect 1. Sign in as Local Administrator on the server you want to install Microsoft Entra Connect on.

  The server you sign in on will be the sync server.

  2. Go to AzureADConnect.msi and double-click to open the installation file.

  3. In Welcome, select the checkbox to agree to the licensing terms, and then select Continue.

  4. In Express settings, select Use express settings

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-password-hash-synchronization

  https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/how-to-connect-install-express