Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 71:

  DRAG DROP

  You have a server named Server 1 that runs Windows Server and has the Hyper-V server role installed.

  Server1 hosts a virtual machine named VM1. Server1 has an NV Me storage device that is assigned to VM1 by using Discrete Device Assignment.

  You need to make the device available to the host.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 72:

  What should you implement for the deployment of DC3?

  A. Azure Active Directory Domain Services (Microsoft Entra DS).
  B. Microsoft Entra Application Proxy.
  C. An Azure virtual machine.
  D. An Microsoft Entra administrative unit.
  C. An Azure virtual machine.

  ---

  Explanation

  Create a domain controller named dc3.corp.fabrikam.com in Vnet1.

  In a hybrid network, you can configure Azure virtual machines as domain controllers. The domain controllers in Azure communicate with the on-premises domain controllers in the same way that on-premises domain controllers communicate with each other.

• Question 73:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

  The network contains the servers shown in the following table.

  

  You plan to implement IP Address Management (IPAM).

  You need to use the Group Policy based provisioning method for managed servers. The solution must support server discovery.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 74:

  You have a server that runs Windows Server and has the DHCP Server role installed. The server has a scope named Scope1 that has the following configurations:

  1. Address range: 192.168.0.2 to

  192. 168.1.254

  2. Mask: 255.255.254.0

  3. Router: 192.168.0.1

  4. Lease duration: 3 days

  5. DNS server: 172.16.0.254

  You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range.

  You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from Scope1.

  What should you create?

  A. a scope
  B. a filter
  C. scope options
  D. a policy
  D. a policy

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn425040(v=ws.11)

• Question 75:

  SIMULATION

  You need to ensure that you can manage SRV1 remotely by using PowerShell.

  To complete this task, sign in to the required computer or computers.

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Explanation

  Configure remote Management in Server Manager

  To enable Server Manager remote management by using the Windows interface

  Step 1: On the computer that you want to manage remotely, open Server Manager, if it is not already open. On the Windows taskbar, click Server Manager. On the start screen, click the Server Manager tile.

  Step 2: In the Properties area of the Local Servers page, click the hyperlinked value for the remote management property.

  Step 3: Do one of the following, and then click OK.

  To let this computer be managed remotely by using Server Manager or Windows PowerShell, select Enable remote management of this server from other computers.

  (To prevent this computer from being managed remotely by using Server Manager (or Windows PowerShell if it is installed), clear the Enable remote management of this server from other computers check box.)

  References:

  https://learn.microsoft.com/en-us/windows-server/administration/server-manager/configure-remote-management-in-server-manager

• Question 76:

  You have an Azure virtual machine named Server1 that runs a network management application. Server1 has the following network configurations:

  1. Network interface: Nic1

  2. IP address: 10.1.1.1/24

  3. Connected to: Vnet1/Subnet1

  You need to connect Server1 to an additional subnet named Vnet1/Subnet2.

  What should you do?

  A. Modify the IP configurations of Nic1.
  B. Add an IP configuration to Nic1.
  C. Add a network interface to Server1.
  D. Create a private endpoint on Subnet2.
  C. Add a network interface to Server1.

  ---

  Explanation

  First add another network interface to Server1, then connect it to Subnet2.

  Virtual network and subnets.

  A subnet is a range of IP addresses in the virtual network. You can divide a virtual network into multiple subnets for organization and security. Each NIC in a VM is connected to one subnet in one virtual network. NICs connected to subnets (same or different) within a virtual network can communicate with each other without any extra configuration.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/network-overview

• Question 77:

  HOTSPOT

  You have a Group Policy Object (GPO) named GPO1 that contains user settings only.

  You plan to apply GPO1 to a global security group named Group1.

  You link GPO1 to the domain, and you remove all the permissions granted to the Authenticated Users group.

  You need to configure permissions for GPOI to meet the following requirements:

  1. GPO1 must apply only to the users in Group1.

  2. The solution must use the principle of least privilege.

  Which permissions should you grant to Group1 and the Domain Computers group? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 78:

  Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.

  You plan to store a DNS zone in a custom Active Directory partition.

  You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.

  What should you use?

  A. dnscmd.exe
  B. Active Directory Sites and Services
  C. Set-DnsServer
  D. DNS Manager
  A. dnscmd.exe

  ---

  Explanation

  How to create and apply a custom application directory partition on an Active Directory integrated DNS zone

  You can create a custom Active Directory partition by using the DnsCmd command.

  Create an application directory partition by using the DnsCmd command

  Use the DnsCmd command to create an application directory partition. To do this, use the following syntax:

  DnsCmd ServerName /CreateDirectoryPartition FQDN of partition

  To create an application directory partition that is named CustomDNSPartition on a domain controller that is named DC-1, follow these steps:

  1. Click Start, click Run, type cmd, and then click OK.

  2. Type the following command, and then press ENTER:

  dnscmd DC-1 /createdirectorypartition CustomDNSPartition.contoso.com

  When the application directory partition has been successfully created, the following information appears:

  DNS Server DC-1 created directory partition: CustomDNSPartition.contoso.com Command completed successfully.

  References:

  https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/create-apply-custom-application-directory-partition

• Question 79:

  You have an Azure Active Directory Domain Services (Microsoft Entra DS) domain named contoso.com.

  You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.

  To which group should you add the administrator?

  A. AAD DC Administrators
  B. Domain Admins
  C. Schema Admins
  D. Enterprise Admins
  E. Group Policy Creator Owners
  A. AAD DC Administrators

  ---

  Explanation

  Settings for user and computer objects in Azure Active Directory Domain Services (Microsoft Entra DS) are often managed using Group Policy Objects (GPOs).

  Microsoft Entra DS includes built-in GPOs for the AADDC Users and AADDC Computers containers. You can customize these built-in GPOs to configure Group Policy as needed for your environment.

  ANSWER (A): Members of the Microsoft Entra DC administrators group have "Group Policy administration privileges in the Microsoft Entra DS domain, and can also create custom GPOs and organizational units (OUs). "

  https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy

• Question 80:

  HOTSPOT

  Your network contains two Active Directory Domain Services (AD DS) forests as shown in the following exhibit.

  

  The forests contain the domain controllers shown in the following table.

  

  You perform the following actions on DC1:

  1. Create a user named User1.

  2. Extend the schema with a new attribute named Attribute1.

  To which domain controllers are User1 and Attribute1 replicated? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  User1:

  This is a domain-level object.

  Since DC1 and DC2 are in the same domain (adatum.com), User1 will be replicated to DC2.

  DC3 is in a different domain (west.adatum.com), but it is in the same forest. Since it's a Global Catalog (GC) server, it will receive a partial replica of the adatum.com domain, including the newly created User1.

  DC4 is in a completely different forest (contoso.com) and there is no direct trust relationship between contoso.com and west.adatum.com, so User1 will not be replicated to DC4.

  Attribute1:

  This is a schema-level object. The schema is a forest-wide object.

  The schema master for the adatum.com forest is DC1, so any changes to the schema (such as adding a new attribute) are initially made on DC1.

  These changes are then replicated to all other domain controllers in the adatum.com forest, which includes DC2 and DC3.

  However, DC4 is in a different forest, so it will not receive the schema changes made in the adatum.com forest.

  In summary, User1 and Attribute1 will be replicated to DC2 and DC3