Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 41:

  SIMULATION

  You need to deploy a new primary DNS zone named fabrikam.com to DC1. The zone must be signed.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Step 1: Create the zone

  Manage DNS zones using DNS server in Windows Server Create a primary zone Create an Active Directory integrated primary zone

  To create an Active Directory integrated primary zone, select the relevant method and follow the steps.

  Here's how to create a forward look up zone using DNS Manager.

  1. From the Windows desktop, open the Start menu, select Windows Administrative Tools > DNS.

  2. In the console tree, connect to the DNS server you wish to manage, expand the DNS server, right-click, then select New Zone.

  Connect to: DC1

  3. On the New Zone Wizard page, select Next.

  4. On the Zone Type page, select Primary zone and ensure Store the zone in Active Directory is checked. This option is available when the DNS server is also an AD DS domain controller.

  5. On the Active Directory Zone Replication Scope page, choose one of the following options:

  All DNS servers running on AD DS domain in the domain.

  All domain controllers in this domain (for Windows 2000 compatibility).

  All domain controllers enrolled in a specific directory partition.

  6. On the Forward or Reverse Lookup Zone page, select Forward lookup zone.

  7. On the zone name page, specify the name of the DNS zone. For example, north.contoso.com

  Type: fabrikam.com

  8. On the Dynamic Update page, choose one of the following options:

  Allow only secure dynamic updates (recommended for Active Directory).

  Allow both nonsecure and secure dynamic updates.

  Do not allow dynamic updates.

  9. Select Finish to complete the New Zone Wizard.

  Step 2: Sign the zone

  Zone Signing Wizard

  To start the Zone Signing Wizard in DNS Manager, right-click a forward or reverse DNS zone on a primary, authoritative DNS server, point to DNSSEC, and click Sign the Zone. See the following example.

  

  After you click Sign the Zone, the wizard displays an introductory page with a summary of DNSSEC (not shown). Click Next to view the Signing Options page.

  Signing options

  The Signing Options page requires you to choose a method for specifying DNSSEC parameter values. See the following example.

  

  Select: Use default settings to sign the zone.

  If you choose this option, the zone will be signed with default parameters. These parameters are the same as those that are displayed by default if you choose to customize zone signing parameters, provided the zone has not been previously signed with a different set of parameters. If you choose to sign the zone with default settings, the wizard will skip to the summary page.

  References:

  https://learn.microsoft.com/en-us/windows-server/networking/dns/manage-dns-zones

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593642(v=ws.11)

• Question 42:

  You have a server that runs Windows Server 2022 and has the network adapters shown in the following table.

  

  You need to configure NIC teaming for LAN2 and LAN3. The solution must support Dynamic Virtual Machine Multi-Queue (d.VMMQ).

  What should you use?

  A. LACP teaming mode
  B. Switch Embedded Teaming (SET)
  C. load balancing and failover (LBFO)
  D. Static teaming mode
  B. Switch Embedded Teaming (SET)

• Question 43:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com that has the domains shown in the following table.

  

  You are creating a disaster recovery plan for the forest.

  What is the minimum number of domain naming FSMO role holders and RID master FSMO role holders that should be online to maintain full functionality of the forest? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: 1

  Domain naming role holders

  In a multi-domain Active Directory forest, you should have at least one Domain Naming Master and one RID Master online for full functionality. The Domain Naming Master role is forest-wide, while the RID Master role is per-domain. Having at least one of each ensures that domain creation and object creation/ movement can continue without interruption.

  Box 2: 5

  RID master:

  Five RID masters, one for each domain.

  References:

  https://theitbros.com/fsmo-roles/

• Question 44:

  You have a Hyper-V host. You are evaluating the available schedulers.

  Which type of scheduler maximizes isolation between guests and the host?

  A. classic
  B. root
  C. core
  D. classic with Simultaneous Multithreading (SMT) disabled
  C. core

  ---

  Explanation

  The core scheduler offers a strong security boundary for guest workload isolation. It also reduces performance variability for workloads inside VMs that run on an SMT-enabled virtualization host.

  Note:

  Hypervisor scheduler types

  The Hyper-V hypervisor supports several modes of scheduler logic, which determine how the hypervisor schedules virtual processors on the underlying logical processors. These scheduler types are:

  The classic scheduler

  The core scheduler

  The root scheduler References:

  https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/manage-hyper-v-scheduler-types

• Question 45:

  DRAG DROP

  You have an on-premises server that runs Windows Server and contains a file share named Share1.

  You have an Azure subscription that contains an Azure Files share named azshare1 and an Azure File

  Sync instance named Sync1. Sync1 syncs Share1 with azshare1.

  You need to delete Sync1.

  Which four resources should you delete in sequence? To answer, move the appropriate resources from the list of resources to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  To remove an Azure File Sync instance and its associated resources, you need to delete them in a specific order: server endpoints, cloud endpoints, and then the sync group. After that, you can remove the onpremises file share and the Azure file share if they are no longer needed.

  Step 1: the server endpoint

  1. Delete Server Endpoints

  Deleting a server endpoint removes the link between the on-premises server and the Azure File Sync service.

  Step 2: the cloud endpoint

  2. Delete Cloud Endpoint:

  After all server endpoints are removed, delete the cloud endpoint within the same sync group.

  The cloud endpoint represents the Azure file share in the sync group.

  Step 3: the sync group

  3. Delete Sync Group:

  Once the cloud endpoint is removed, you can delete the sync group.

  The sync group is a logical container for your cloud and server endpoints.

  Step 4: Sync1

  4. Remove On-Premises File Share (Optional):

  If you no longer need the on-premises file share, you can remove it by deleting the folder or share on your Windows Server.

  5. Remove Azure File Share (Optional):

  If you no longer need the Azure file share, you can delete it from your storage account.

  References:

  https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-server-endpoint-delete

• Question 46:

  Your on-premises network has an IP address range of 10.0.0.0/23.

  You have an Azure virtual network named VNet1 that contains a virtual machine named VM1.

  VNet1 has an IP address range of 10.0.1.0/24.

  You need to deploy a Site-to-Site (S2S) VPN to connect the on-premises network to VNet1.

  What should you do first?

  A. Deploy Azure Bastion to VNet1.
  B. Deploy Azure Extended Network.
  C. Configure VNet1 to use the IP address range of 10.0.2.0/24.
  D. Configure VNet1 to use an IP address range of 10.0.1.128/25.
  C. Configure VNet1 to use the IP address range of 10.0.2.0/24.

• Question 47:

  HOTSPOT

  You have a Windows server named Server1.

  You add two 4-TB hard drives named Disk1 and Disk2 to Server1.

  You need to format the drives. The solution must meet the following requirements:

  1. Disk1 must support disk level quotas.

  2. Disk2 must support Data Deduplication.

  Which type of file system should you use for each drive? To answer, select the appropriate options in the answer area.

  NOTE; Each correct selection is worth one point.

  

  

• Question 48:

  You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant.

  You have several Windows 10 devices that are Microsoft Entra hybrid-joined.

  You need to ensure that when users sign in to the devices, they can use Windows Hello for Business.

  Which optional feature should you select in Microsoft Entra Connect?

  A. Device writeback
  B. Group writebeack
  C. Microsoft Entra app and attribute filtering
  D. Password writeback
  E. Directory extension attribute sync
  A. Device writeback

  ---

  Explanation

  Device writeback is an optional feature in Microsoft Entra Connect that allows the on-premises AD DS domain to receive information about the Microsoft Entra joined devices, including the device registration state. By enabling this feature, you can ensure that the on-premises AD DS domain has information about the Microsoft Entra joined devices, which is required for Windows Hello for Business to function correctly. Once this information is available in the on-premises AD DS domain, you can set the appropriate policies and configure the required infrastructure to support Windows Hello for Business.

• Question 49:

  You need to implement the planned changes for Microsoft Entra users to sign in to Server1.

  Which PowerShell cmdlet should you run?

  A. New-ADComputer
  B. Set-AzVM
  C. Set-AzVMExtension
  D. Add-ADComputerServiceAccount
  C. Set-AzVMExtension

  ---

  Explanation

  Enable Microsoft Entra users to sign in to Server1.

  Sever1 is a Windows Server 2022 Datacenter. Azure Edition server with Trusted launch running in a Virtual machine.

  Set-AzVMExtension

  Updates extension properties or adds an extension to a virtual machine.

  Description

  The Set-AzVMExtension cmdlet updates properties for existing Virtual Machine Extensions or adds an extension to a virtual machine.

  Note: Enable Microsoft Entra login for a Windows VM in Azure To use Microsoft Entra login for a Windows VM in Azure, you must:

  Enable the Microsoft Entra login option for the VM.

  Configure Azure role assignments for users who are authorized to log in to the VM.

  There are two ways to enable Microsoft Entra login for your

  Windows VM:

  The Azure portal, when you're creating a Windows VM.

  Azure Cloud Shell, when you're creating a Windows VM or using an existing Windows VM.

  Install the Microsoft Entra login VM extension to enable Microsoft Entra login for Windows VMs. VM extensions are small applications that provide post-deployment configuration and automation tasks on Azure virtual machines. Use az vm extension set to install the AADLoginForWindows extension on the VM named myVM in the myResourceGroup resource group.

  The following example uses the Azure CLI to install the extension:

  AzureCLI

  az vm extension set \

  --publisher Microsoft.Azure.ActiveDirectory \

  --name AADLoginForWindows \

  --resource-group myResourceGroup \

  --vm-name myVM References:

  https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

  https://learn.microsoft.com/en-us/powershell/module/az.compute/set-azvmextension

• Question 50:

  HOTSPOT

  Your network contains the segments shown in the following table.

  

  You have servers that run Windows Server and are configured as shown in the following table.

  

  You deploy a server named Server4 that runs Windows Server and has a static IP address of 172.16.1.1. You connect Server4 to Segment1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point,