AZ-800 100% Pass Guaranteed Download Windows Server Exam PDF Q&A [Q25-Q46]

Rate this post

AZ-800 100% Pass Guaranteed Download Windows Server Exam PDF Q&A

AZ-800 Practice Test Dumps with 100% Passing Guarantee

Microsoft AZ-800 exam is intended for IT professionals who have experience with Windows Server and Azure technologies and want to demonstrate their expertise in administering hybrid infrastructure solutions. Candidates for AZ-800 exam should have a strong understanding of networking, security, and virtualization technologies, as well as experience with PowerShell scripting and automation. AZ-800 exam is ideal for IT professionals who want to advance their careers in hybrid infrastructure administration or pursue roles such as server administrator, systems engineer, or cloud administrator.

Passing the Microsoft AZ-800 exam is an essential step for IT professionals who want to demonstrate their skills in administering Windows Server hybrid core infrastructure. Administering Windows Server Hybrid Core Infrastructure certification validates that the candidate has the knowledge and expertise necessary to manage and deploy Windows Server workloads on-premise and in the cloud, making them highly valuable in today’s IT job market.

The reality is that developing skills is a must, and earning a certification from a worldly-renowned vendor is one of the variants. If your aim is to get a position as a Windows Server Hybrid Administrator, then passing the AZ-800 exam is what you need to do first of all. The second exam that you will need to sit for is AZ-801. Still, let’s have a closer look at the AZ-800 test also known as Administering Windows Server Hybrid Core Infrastructure.

NO.25 Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a file server named Server1 and three users named User1, User2, and User3.
Server1 contains a shared folder named Share1 that has the following configurations:

The share permissions for Share1 are configured as shown in the Share Permissions exhibit.

Share1 contains a file named File1.bxt. The advanced security settings for File1.txt are configured as shown in the File Permissions exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NO.26 You have an Azure Active Directory Domain Services (Azure AD DS) domain.
You create a new user named Admin1.
You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point

NO.27 You need to meet the technical requirements for VM2.
What should you do?

Implement shielded virtual machines.

Enable the Guest services integration service.

Implement Credential Guard.

Enable enhanced session mode.

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more Information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements, if the case study has an All Information tab. note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Fabrikam, Inc. Is a manufacturing company that has a main office In New York and a branch office in Seattle.
On-premises Servers
The on-premises network contains servers that run Windows Server as shown in the following table.

DC1 hosts all the operation master roles.
WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1.
On-premises Network
The New York and Seattle offices are connected by using redundant WAN links.
The client computers in each office get IP addresses from their local DHCP server.
DHCP! contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.
Group Policy Object (GPOs)
The cwp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table.

NO.28 You need to meet the technical requirements for VM1.
Which cmdlet should you run first? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.29 You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.

You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network Which two actions should you perform? Each correct answer presents part of the solution, NOTE: Each correct selection Is worth one point

Create a conditional forwarder for fabrikam.com on DC1.

Create a stub zone for fabrikam.com on DC1.

Create a secondary zone for fabnlcam.com on DO.

Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.

Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine &s a DNS forwarder.

NO.30 Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.
com. The forest contains a single Active Directory site.
You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.
You need to recommend a deployment plan that meets the following requirements:
* Ensures that a user named User1 can perform the RODC installation on Server1
* Ensures that you can control the AD DS replication schedule to the Server1
* Ensures that Server1 is in a new site named RemoteSite1
* Uses the principle of least privilege
Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NO.31 You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.
You plan to implement self-service password reset (SSPR) in Azure AD.
You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.
What should you do?

Deploy the Azure AD Password Protection proxy service to the on premises network.

Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

Grant the Change password permission for the domain to the Azure AD Connect service account.

Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

NO.32 You have a server named Server1 that runs Windows Server. Server1 has a single network interface and the Hyper-V virtual switches shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

NO.33 Hotspot Question
You have a Windows Server 2022 container host named Host1 that has the Subsystem for Linux installed and the container images shown in the following table.

You need to deploy the images to Host1. The solution must maximize the isolation of the containers.
Which images can you run by using process isolation, and which images can you run by using Hyper-V isolation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.34 Your network contains an Active Directory Domain Services (AD DS) domain- The domain contains 10 servers that run Windows Server. The servers have static IP addresses.
You plan to use DHCP to assign IP addresses to the servers.
You need to ensure that each server always receives the same IP address.
Which type of identifier should you use to create a DHCP reservation for each server?

universally unique identifier (UUID)

fully qualified domain name (FQDN)

NetBIOS name

MAC address

NO.35 You have a server named Server1 that runs Windows Server and has the Active Directory Federation Services role installed.
You plan to deploy Web Application Proxy to a server named Server2.
You export the Active Directory Federation Services (AD FS) certificate from Server1.
Which actions should you perform on Server2 in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTF: Each correct selection is worth one point.

NO.36 You have a server named Server1 that runs Windows Server and has the Hyper V server role installed. Server1 hosts a virtual machine named VM1.
Server1 has an NVMe storage device. The device is currently assigned to VM1 by using Discrete Device Assignment.
You need to make the device available to Server1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NO.37 You haw an Azure virtual machine named VM1 that runs Windows Server
You need to configure the management of VM1 to meet the following requirements:
* Require administrators to request access to VM1 before establishing a Remote Desktop connection.
* Limit access to VM1 from specific source IP addresses.
* Limit access to VMI to a specific management port
What should you configure?

a network security group (NSG)

Azure Active Directory (Azure AD) Privileged identity Management (PIM)

Azure Front Door

Microsoft Defender for Cloud

NO.38 For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NO.39 Hotspot Question
Your network contains the segments shown in the following table.

You have servers that run Windows Server and are configured as shown in the following table.

You deploy a server named Server4 that runs Windows Server and has a static IP address of
172.16.1.1. You connect Server4 to Segment1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NO.40 Your network contains the domains shown in the following exhibit.

Which type of trust can you use for Trust1 and Trust2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.41 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.
You plan to store a DNS zone in a custom Active Directory partition.
You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.
What should you use?

dnscmd.exe

Active Directory Sites and Services

Set-DnsServer

New-ADObject

NO.42 Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

The domain contains the users shown in the following table.

On Server2. you run the Enable-PSRemoting cmdlet
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NO.43 You have a server named Server1 that runs Windows Server Server1 has a just-a-bunch-of-disks (JBOD) enclosure attached.
You plan to create a storage pool on Server1 and a virtual disk that will use a mirror layout.
You are considering whether to use a two-way or a three-way mirror layout.
What is the minimum number of disks required for each type of minor layout? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.44 Your company has offices in Boston and Montreal. The offices are connected by using a 10-Mbps WAN link that is often saturated The office in Boston contains the following:
* An Active Directory Domain Services (AD DS) domain controller named DC1.
* A server named Server1 that runs Windows Server and has the File Server role installed The office in Montreal contains 20 client computers that run Windows 10 Montreal does NOT have any servers.
The company plans to deploy a new line of business (LOB) application to all the client computers. The installation source files for the application are in \ServerApps.

NO.45 Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.
in the contoso.com domain, you create two users named Admin1 and Admin2.
You need to ensure that the users can perform the following tasks:
* Admin1 can create and manage Active Directory sites.
* Admin2 can deploy domain controller to the easl.conloso.com domain.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, select the appropriate options in the answer area.
NOTE Each correct selection is worth one point.

NO.46 You have been hired as the networking administrator in the company. There is one user account that is required to be moved very often between the Sales & Marketing groups. But you notice that the changes aren’t working. Which of the following Flexible Single Master Operation (FSMO) roles might be responsible?

Infrastructure Master Role

Domain Naming Master Role

Schema Master Role

RID Role