Free Sales Ending Soon – 100% Valid AZ-800 Exam Dumps with 95 Questions [Q41-Q56]

Rate this post

Free Sales Ending Soon – 100% Valid AZ-800 Exam Dumps with 95 Questions

Verified AZ-800 dumps Q&As on your Windows Server Exam Questions Certain Success!

Microsoft AZ-800 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage authentication in on-premises and hybrid environments Implement and configure Distributed File System (DFS)
Topic 2	Manage Windows Servers in a hybrid environment Integrate Windows Servers with Azure Security Center
Topic 3	Manage VM using PowerShell Remoting, PowerShell Direct, and HVC.exe Deploy Azure services using Azure Virtual Machine extensions on non-Azure machines
Topic 4	Implement and manage an on-premises and hybrid networking infrastructure Implement on-premises and hybrid network connectivity
Topic 5	Manage users and groups in multi-domain and multi-forest scenarios Manage Windows Servers and workloads in a hybrid environment
Topic 6	Manage IaaS virtual machines (VMs) in Azure that run Windows Server Manage Windows Server by using domain-based Group Policies
Topic 7	Configure and manage multi-site, multi-domain, and multi-forest environments Troubleshoot flexible single master operations (FSMO) roles
Topic 8	Configure File Server Resource Manager (FSRM) quotas Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
Topic 9	Create and manage AD DS security principals Configure CredSSP or Kerberos delegation for second hop remoting
Topic 10	Implement site-to-site virtual private network (VPN) Integrate Windows Server DNS with Azure DNS private zones

NO.41 You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

security filtering for the link of GP04

security filtering for the link of GPOl

loopback processing in 0PO4

the Enforced property for the link of GP01

loopback processing in GPOl

the Enforced property for the link of GP04

NO.42 You have 10 on-premises servers that run Windows Server.
You plan to use Azure Network Adapter to connect the servers to the resources in Azure.
Which prerequisites do you require on-premises and in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network-adapter

NO.43 Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.
in the contoso.com domain, you create two users named Admin1 and Admin2.
You need to ensure that the users can perform the following tasks:
* Admin1 can create and manage Active Directory sites.
* Admin2 can deploy domain controller to the easl.conloso.com domain.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/ras/multisite/configure/step-2-configure-the-multisite-infrastructure

NO.44 You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:
Size: D2s_v4
Operating system disk: 127-GiB standard SSD
Data disk 128-GiB standard SSD
Virtual machine generation: Gen 2
You plan to perform the following changes to VM1:
Change the virtual machine size to D4s_v4.
Detach the data disk.
Add a new standard SSD.
Which changes require downtime for VM1?

Detaching the data disk only and adding a new standard SSD.

Detaching the data disk only.

Changing the virtual machine size only.

Adding a new standard SSD only.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/convert-disk-storage

NO.45 What should you implement for the deployment of DC3?

Azure Active Directory Domain Services (Azure AD DS}

Azure AD Application Proxy

an Azure virtual machine

an Azure AD administrative unit

NO.46 You have servers that have the DNS Server role installed. The servers are configured as shown in the following table.

All the client computers in the New York office use Server2 as the DNS server.
You need to configure name resolution in the New York office to meet the following requirements:
Ensure that the client computers in New York can resolve names from contoso.com.
Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200.
The solution must NOT require modifications to Server1.
Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

a forwarder

a conditional forwarder

a delegation

a secondary zone

a reverse lookup zone

NO.47 You have an Azure Active Directory Domain Services (Azure AD DS) domain.
You create a new user named Admin1.
You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point

Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy

NO.48 What should you implement for the deployment of DC3?

Azure Active Directory Domain Services (Azure AD DS}

Azure AD Application Proxy

an Azure virtual machine

an Azure AD administrative unit

Create a domain controller named dc3.corp.fabrikam.com in Vnet1.
In a hybrid network, you can configure Azure virtual machines as domain controllers. The domain controllers in Azure communicate with the on-premises domain controllers in the same way that on-premises domain controllers communicate with each other.

NO.49 You need to sync files from an on premises server named Server1 to Azure by using Azure File Sync.
You have a cloud tiering policy that is configured for 30 percent free space and 70 days.
Volume E on Server1 is 500 GB.
A year ago, you configured E:Data on Server1 to sync by using Azure File Sync. The files that are visible in E:Data are shown in the following table.

Volume E does NOT contain any other files.
Where are File1 and File3 located? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-file-sync
https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-overview

NO.50 Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains three servers that run Windows Server and have the Hyper-V server rote installed. Each server has a Switch Embedded Teaming (SET) team
You need to verity that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server.
What should you use?

Server Manager

the validate-DCB cmdtet

the Get-NetAdaptor cmdlet

Failover Cluster Manager

Reference:
https://github.com/Microsoft/Validate-DCB

NO.51 You have an Azure virtual machine named VM1 that has a private IP address only.
You configure the Windows Admin Center extension on VM1.
You have an on-premises computer that runs Windows 11. You use the computer for server management.
You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1.
What should you configure?

an Azure Bastion host on the virtual network that contains VM1.

a VPN connection to the virtual network that contains VM1.

a network security group 1NSG) rule that allows inbound traffic on port 443.

a private endpoint on the virtual network that contains VM1.

Reference:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-vm

NO.52 You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2.
A user named Admin1 is a member of the local Administrators group on Server1 and Server2.
You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1.
You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.
What should you do first?

From the Azure portal, generate a new onboarding script.

Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

Hybrid Azure AD join Server1 and Server2.

Create an Azure cloud-only account for Admin1.

Reference:
https://docs.microsoft.com/en-us/azure/azure-arc/servers/onboard-service-principal

NO.53 Vou have an on-premises Active Directory Domain Services (AD DS} domain that syncs with an Azure Active Directory (Azure AD) tenant You have an on-premises web app named WebApp1 that only supports Kerberos authentication.
You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.54 You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.

You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network Which two actions should you perform? Each correct answer presents part of the solution, NOTE: Each correct selection Is worth one point

Create a conditional forwarder for fabrikam.com on DC1.

Create a stub zone for fabrikam.comonDC1.

Create a secondary zone for fabnlcam.com on DO.

Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.

Deploy an Azure virtual machine the runs Windows Server. Configure the virtual machine &s a DNS forwarder.

NO.55 You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.
You deploy five servers to the domain. You add the servers to a group named iTFarmHosts.
You plan to configure a Network Load Balancing (NIB) cluster named NLBCluster.contoso.com that will contain the five servers.
You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdiets from the list of cmdlets to the answer area and arrange them in the correct order.

1 – New-ADServiceAccount
2 – Install-ADServiceAccount
3 – Add-ADComputerServiceAccount

NO.56 Vou have an on-premises Active Directory Domain Services (AD DS} domain that syncs with an Azure Active Directory (Azure AD) tenant You have an on-premises web app named WebApp1 that only supports Kerberos authentication.
You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.