Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 51:

  SIMULATION

  You need to make the shares named Marketing and Sales from SRV1 available on the network by using the following UNC paths:

  1. \\contoso.com\documents\marketing

  2. \\contoso.com\documents\sales

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  How to Set Up Windows Server for File Sharing Windows File Sharing Setup

  Step 1: Open the Computer Management window, which you can access by going to Server Manager > Tools > Computer Management. Open SRV1.

  Step 2: Select the directory that you want to share (or select a new directory).

  We select: \\contoso.com\documents\marketing

  Step 3: Right-click this directory (folder) and in the context menu, hit Properties.

  

  Step 4: Specify name of the Share as Marketing

  

  Step 5: Share

  References:

  https://www.nakivo.com/blog/create-file-share-windows-server/

• Question 52:

  You need to meet the technical requirements for User1. The solution must use the principle of least privilege.

  What should you do?

  A. Add Users1 to the Server Operators group in contoso.com.
  B. Create a delegation on contoso.com.
  C. Add Users1 to the Account Operators group in contoso.com.
  D. Create a delegation on OU3.
  D. Create a delegation on OU3.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/delegating-administration-of-account-ous-and-resource-ous

• Question 53:

  HOTSPOT

  Your network contains two Active Directory forests and a domain trust as shown in the following exhibit.

  

  The domain trust has the following configurations:

  1. Name: adatum.com

  2. Type: External

  3. Direction: One-way. outgoing

  4. Outgoing trust authentication level: Domain-wide authentication

  

  The forests contain the network shares shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  

  

• Question 54:

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the servers shown in the following table.

  

  On Server1, you create a DNS zone named Zone1.com as shown in the following exhibit.

  

  To which DNS servers is Zone1.

  com replicated?

  A. Server2 only
  B. Server2 and Server3 only
  C. Setver2 and Sen/er4 only
  D. Server2. Server3, and Server4 only
  E. Server2, Server3, Server4, and Server5
  D. Server2. Server3, and Server4 only

• Question 55:

  SIMULATION

  You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255.

  To complete this task, sign in the required computer or computers.

  A. See the explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See the explanation below.

  ---

  Explanation

  Phase 1: Creating a new site Step l: Navigate to Server Manager >Tools > Active Directory Sites and Services

  Step 2: In the Active Directory Sites and Service window, right-click Sites and select New Site

  

  Step 4: Select the DEFAULTIPSITELINK and click OK

  Step 5: Click OK to complete the site creation Phase 2: Create subnet Step 6: In the Active Directory Sites and Services MIMC, right-click Subnets and select New Subnet...

  

  Step 7:In the New Object - subnet window, type192.168.2.0/24

  Step 8: In the Select a site object for this prefix option select Site2 and click OK

  

  References:

  https://easycentercorp-practicemanager.com/setting-up-active-dlirectory-sites-subnets-site-links/

• Question 56:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.

  You open a new branch office that contains only client computers.

  You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.

  Solution: You create a new site named Site4 and associate Site4 to DEFAULTIPSITELINK Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  You create a new subnet object that is associated to Site1.

  By associating a site with one or more subnets, you assign a set of IP addresses to the site DNS uses the site name to locate a domain controller in that site (or in the next closest site to the client). DNS then provides the IP address of the domain controller to the client for the purpose of connecting to the domain controller. For this reason, it is important to ensure that the IP address that you assign to a domain controller maps to a subnet that is associated with the site of the respective server object

  Note: Assigning computers to sites Server objects are created in AD DS by applications or services, and they are placed into a site based on their IP address. When you add the Active Directory Domain Services server role to a server, a server object is created in the AD DS site that contains the subnet to which the server's IP address maps. If the domain controller's IP address does not map to any site in the forest, the domain controller's server object is created in the site of the domain controller that provides the replication source for AD DS.

  References:

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754697(v=ws.11)

• Question 57:

  HOTSPOT

  You need to meet the technical requirements for Server4.

  Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://4sysops.com/wiki/enable-powershell-remoting/

• Question 58:

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.

  You plan to store a DNS zone in a custom Active Directory partition.

  You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.

  What should you use?

  A. Active Directory Administrative Center
  B. Set-DnsServer
  C. New-ADObject
  D. ntdsutil.exe
  D. ntdsutil.exe

  ---

  Explanation

  You can create DNS application directory partition to host DNS zone containing user account entries with the use of NTDSUTIL.EXE and DNSMGMT.MSC tools.

  Note 1: You can also create a custom Active Directory partition by using the DnsCmd command.

  Note 2: Implementing DNS Application Directory Partition 1. Login to the forest root domain controller using your forest root domain admin account or enterprise administrator account

  2. Start the command prompt.

  3. Type NTDSUTIL and hit enter 4. Type PARTITION MANAGEMENT and hit enter

  5. Type CONNECTIONS and hit enter 6. Type CONNECT TO SERVER <forestRootDomainControllerFQDN> or <childDomainDomainControllerFQDN>

  ex. CONNECT TO SERVER DC01.AMRS.SYNERGIX.DS

  1. Type QUIT 2. Type LIST to view all known naming contexts

  3. Type CREATE NC DC=dnsADPUsers,DC=Local domainControllerFQDN ex. CONNECT TO SERVER DC01.AMRS.SYNERGIX.DS

  1. Type LIST to view all previously known naming context and the newly created DC=dnsADPUsers,DC=Local naming context 2. Do NOT add another replica for the naming context DC=dnsADPUsers,DC=Local

  This DNS Application Directory Partition is for a special purpose DNS zone and we wish to avoid Active Directory Replication delays. A backup of this DNS zone's content can be maintained in a secondary DNS zone on any DNS server.

  References:

  https://synergixdesk.zendesk.com/hc/en-us/articles/202927548-Create-DNS-application-directory-partition-to-host-DNS-zone-containing-user-account-entries

• Question 59:

  Your network contains an Active Directory domain named contoso.com. The domain contains the computers shown in the following table.

  

  On Server3, you create a Group Policy Object (GPO) named GPO1 and link GPO1 to contoso.com. GPO1 includes a shortcut preference named Shortcut1 that has item-level targeting configured as shown in the following exhibit.

  

  To which computer will Shortcut1 be applied?

  A. Server3 only
  B. Computer1 and Server3 only
  C. Server2 and Server3 only
  D. Server1, Server2, and Server3 only
  A. Server3 only

  ---

  Explanation

  You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group Policy object (GPO), you can include multiple preference items, each customized for selected users or computers and each targeted to apply settings only to the relevant users or computers.

  From the exhibit we see operating system targeting with Product being Windows Server 2022 Family. Only Server3 has the Windows Server 2022 Operating System.

  Operating System targeting

  An Operating System targeting item allows a preference item to be applied to computers or users only if the processing computer's operating system's product name, release, edition, or computer role matches those specified in the targeting item.

  References:

  https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789189(v=ws.11)

• Question 60:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the VPN servers shown in the following table.

  

  You have a server named NPS1 that has Network Policy Server (NPS) installed. NPS1 has the following RADIUS clients:

  

  VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  It is important to remember that the client computers that are connecting to the VPNs are not RADIUS clients. The VPN servers are the RADIUS clients. You configure the RADIUS clients on the RADIUS server (NPS1) server to allow the VPN servers to use NPS1 to authenticate the connections.

  Box 1: No

  NPSClient1 is not enabled.

  Box 2: Yes

  NPSClient2 is configured correctly. It is enabled and has the correct IP address of VPN2.

  Box 3: No

  NPSClient3 has an incorrect IP address configured for VPN3.