Microsoft AZ-800 Online Practice Questions and Exam Preparation

Microsoft AZ-800 Online Questions & Answers

• Question 81:

  DRAG DROP

  DC1 fails.

  You need to meet the technical requirements for the schema master.

  You run ntdsutil.exe.

  Which five commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order?

  Select and Place:

  

  

  ---

  Step 1: roles A. Datum identifies the following technical requirements: DC2 must become the schema master if DC1 fails.

  To seize or transfer the Operation Master roles by using the Ntdsutil utility, follow these steps:

  1. Sign in to a member computer that has the AD RSAT tools installed, or a DC that is located in the forest where Operation Master roles are being transferred.

  2. Select Start > Run, type ntdsutil in the Open box, and then select OK.

  3. Type roles, and then press Enter.

  Step 2: connect

  4. Type connections, and then press Enter.

  Step 3: connect to server dc2.adatumcom 5. Type connect to server <servername>, and then press Enter.

  Note: In this command, <servername> is the name of the DC that you want to assign the Operation Master role to.

  Step 4: quit

  6. At the server connections prompt, type q, and then press Enter.

  Step 5: seize schema master

  7. Do one of the following actions:

  To transfer the role: Type transfer <role>, and then press Enter.

  Note

  In this command, <role> is the role that you want to transfer.

  To seize the role: Type seize <role>, and then press Enter.

  Note

  In this command, <role> is the role that you want to seize.

  8. At the fsmo maintenance prompt, type q, and then press Enter to gain access to the ntdsutil prompt. Type q, and then press Enter to quit the Ntdsutil utility.

  References:

  https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/transfer-or-seize-operation-master-roles-in-ad-ds

• Question 82:

  You have a server named Server1 that runs Windows Server and contains a file share named Share1.

  You need to prevent users from storing MP4 files in Share1. The solution must ensure that the users can store other types of files in the share.

  What should you configure on Server1?

  A. File Management Tasks
  B. NTFS Quotas
  C. NTFS permissions
  D. file screens
  D. file screens

  ---

  Explanation

  File Screening Management

  On the File Screening Management node of the File Server Resource Manager MMC snap-in, you can perform the following tasks:

  Create file screens to control the types of files that users can save, and generate notifications when users attempt to save unauthorized files.

  Define file screening templates that can be applied to new volumes or folders and that can be used across an organization.

  Create file screening exceptions that extend the flexibility of the file screening rules.

  References:

  https://learn.microsoft.com/en-us/windows-server/storage/fsrm/file-screening-management

• Question 83:

  You have a Windows Server container host named Server1.

  You create a Dockerfile named df1.

  You need to generate a container image by using dt1.

  Which command should you run?

  A. docker build
  B. docker exec
  C. docker create
  D. docker images
  A. docker build

• Question 84:

  HOTSPOT

  You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed. Server1 contains a virtual machine named VM1 that runs Windows Server.

  You need to install the Hyper-V server role on VM1.

  Which PowerShell command should you run first? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://learn.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/enable-nested-virtualization

• Question 85:

  SIMULATION

  You need to configure SRV1 as a DNS server. SRV1 must be able resolve names from the contoso.com domain by using DC1.

  All other names must be resolved by using the root hint servers.

  To complete this task, sign in the required computer or computers.

  A. See the explanation below.
  B. Placeholder
  C. Placeholder
  D. Placeholder
  A. See the explanation below.

  ---

  Explanation

  One possible solution to configure SRV1 as a DNS server that can resolve names from the contoso.com domain by using DC1 and all other names by using the root hint servers is to use conditional forwarding. Conditional forwarding allows a DNS server to forward queries for a specific domain name to another DNS server, while using the normal forwarding or root hint servers for other queries. Here are the steps to configure conditional forwarding on SRV1:

  On SRV1, open DNS Manager from the Administrative Tools menu or by typing dnsmgmt.msc in the Run box.

  In the left pane, right-click on Conditional Forwarders and select New Conditional Forwarder.

  In the New Conditional Forwarder dialog box, enter contoso.com as the DNS Domain name.

  In the IP addresses of the master servers box, enter the IP address of DC1, which is the DNS server for the contoso.com domain. You can also click on Resolve to verify the name resolution of DC1.

  Optionally, you can check the box Store this conditional forwarder in Active Directory, and replicate it as follows if you want to store and replicate the conditional forwarder in AD DS. You can also select the replication scope from the drop-down list.

  Click OK to create the conditional forwarder.

  Now, SRV1 will forward any queries for the contoso.com domain to DC1, and use the root hint servers for any other queries. You can test the name resolution by using the nslookup command on SRV1 or another computer that uses SRV1 as its DNS server. For example, you can run the following commands:

  nslookup www.contoso.com

  nslookup www.microsoft.com

  The first command should return the IP address of www.contoso.com from DC1, and the second command should return the IP address of www.microsoft.com from a root hint server.

• Question 86:

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.

  You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace.

  What should you do?

  A. On Server1, run the Add-DnsServerTrustAnchor cmdlet.
  B. On each member server, run the Add-DnsServerTrustAnchor cmdlet.
  C. From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT).
  D. From a Group Policy Object (GPO), modify the Network List Manager policies.
  C. From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT).

  ---

  Explanation

  NRPT

  The Name Resolution Policy Table (NRPT) is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. The NRPT can be configured using Group Policy or by using the Windows Registry.

  When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally. You can use the NRPT to require that the DNS Client service perform DNSSEC validation of DNS responses for the namespaces that you specify.

• Question 87:

  HOTSPOT

  You have a Hyper-V host named Server1 that is connected to a managed switch. The switch is connected to multiple VLANs.

  On Server1, you configure a new virtual machine named VM1.

  You need to configure VM1 to communicate with all the VLANs. Any network traffic that is not tagged must be directed to VLAN 20.

  How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Set-VMNetworkAdapterVlan

  The Set-VMNetworkAdapterVlan cmdlet configures virtual LAN settings for the traffic through a virtual network adapter. Access, Trunk, Private VLAN (isolated, community, or promiscuous), and untagged are mutually exclusive.

  Incorrect:

  * Set-VMNetworkAdapter

  The Set-VMNetworkAdapter cmdlet configures features of the virtual network adapter in a virtual machine or the management operating system.

  This command does not use the -Access, -Trunk or -Untagged parameters.

  * Set-VMNetworkAdapterTeamMapping

  This command does not use the -Access, -Trunk or -Untagged parameters.

  Box 2: -Trunk -NativeVlanID 20

  -Trunk

  Specifies Trunk mode for the virtual machine network adapter. This parameter configures a tagged virtual port that passes all allowed VLANId tags to the VM adapter. Traffic with the NativeVLANId is passed untagged to the VM adapter. This parameter must be used in conjunction with parameters AllowedVlanIdList and NativeVlanId.

  - NativeVlanId

  Specifies the native virtual LAN identifier for a virtual machine network adapter. This parameter must be specified in conjunction with the switch parameter Trunk.

  Incorrect:

  * -Access -VlanID 20 Example:

  PS C:\> Set-VMNetworkAdapterVlan -VMName Redmond -Access -VlanId 121

  Sets the virtual network adapter(s) in virtual machine Redmond to the Access mode. Traffic sent by this virtual machine is tagged with VLAN ID 121.

  * -Untagged

  Specifies Untagged mode for the virtual machine network adapter.

  * VmqWeight 20

  VmqWeight is not used by Set-VMNetworkAdapterVlan.

  Example PS C:\> Get-VMNetworkAdapter -All | Set-VMNetworkAdapter -VmqWeight 100

  This example enables VMQ and sets a weight of 100 on every virtual network adapter on the local host.

  References:

  https://learn.microsoft.com/en-us/powershell/module/hyper-v/set-vmnetworkadaptervlan

• Question 88:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are planning the deployment of DNS to a new network.

  You have three internal DNS servers as shown in the following table.

  

  The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.

  You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

  Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 89:

  You have a server that runs Windows Server and contains a shared folder named UserData.

  You need to limit the amount of storage space that each user can consume in UserData.

  What should you use?

  A. Storage Spaces
  B. Work Folders
  C. Distributed File System (DFS) Namespaces
  D. File Server Resource Manager (FSRM)
  D. File Server Resource Manager (FSRM)

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/windows-server/storage/fsrm/fsrm-overview

• Question 90:

  HOTSPOT

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.

  You create the resources shown in the following table.

  

  You create the Group Policy Objects (GPOs) shown in the following table.

  

  You configure the Group Policy Preferences shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.