First Attempt Guaranteed Success in AZ-800 Exam 2022 [Q56-Q74]

4/5 - (1 vote)

First Attempt Guaranteed Success in AZ-800 Exam 2022

Real AZ-800 Exam Questions are the Best Preparation Material

Microsoft AZ-800 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage Windows Servers and workloads by using Azure services Implement DSC to prevent configuration drift in IaaS machines
Topic 2	Configure and manage Windows Server file shares Implement high availability for virtual machines
Topic 3	Implement and manage an on-premises and hybrid networking infrastructure Implement on-premises and hybrid network connectivity
Topic 4	Manage IaaS virtual machines (VMs) in Azure that run Windows Server Manage Windows Server by using domain-based Group Policies
Topic 5	Configure and manage multi-site, multi-domain, and multi-forest environments Troubleshoot flexible single master operations (FSMO) roles
Topic 6	Configure File Server Resource Manager (FSRM) quotas Deploy and manage Active Directory Domain Services (AD DS) in on-premises and cloud environments
Topic 7	Manage users and groups in multi-domain and multi-forest scenarios Manage Windows Servers and workloads in a hybrid environment
Topic 8	Manage Windows Servers in a hybrid environment Integrate Windows Servers with Azure Security Center
Topic 9	Implement site-to-site virtual private network (VPN) Integrate Windows Server DNS with Azure DNS private zones

NO.56 Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups

NO.57 You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant
You have several Windows 10 devices that are Azure AD hybrid-joined.
You need to ensure that when users sign in to the devices, they can use Windows Hello for Business.
Which optional feature should you select in Azure AD Connect?

Device writeback

Group writeback

Password writeback

Directory extension attribute sync

Azure AD app and attribute filtering

Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-trust-prereqs

NO.58 You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

security filtering for the link of GP04

security filtering for the link of GPOl

loopback processing in 0PO4

the Enforced property for the link of GP01

loopback processing in GPOl

the Enforced property for the link of GP04

NO.59 Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You need to identify which server is the PDC emulator for the domain.
Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties.
Does this meet the goal?

Yes

NO.60 You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:
Size: D2s_v4
Operating system disk: 127-GiB standard SSD
Data disk 128-GiB standard SSD
Virtual machine generation: Gen 2
You plan to perform the following changes to VM1:
Change the virtual machine size to D4s_v4.
Detach the data disk.
Add a new standard SSD.
Which changes require downtime for VM1?

Detaching the data disk only and adding a new standard SSD.

Detaching the data disk only.

Changing the virtual machine size only.

Adding a new standard SSD only.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/convert-disk-storage

NO.61 You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com.
You deploy five servers to the domain. You add the servers to a group named iTFarmHosts.
You plan to configure a Network Load Balancing (NIB) cluster named NLBCluster.contoso.com that will contain the five servers.
You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate.
Which three PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdiets from the list of cmdlets to the answer area and arrange them in the correct order.

1 – New-ADServiceAccount
2 – Install-ADServiceAccount
3 – Add-ADComputerServiceAccount

NO.62 You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

transparent

I2bridge

NAT

I2tunnel

NO.63 You need to implement an availability solution for DHCP that meets the networking requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

On DHCP1. create a scope that contains 25 percent of the IP addresses from Scope2.

On the router in each office, configure a DHCP relay.

DHCP2. configure a scope that contains 25 percent of the IP addresses from Scope 1 .

On each DHCP server, install the Failover Clustering feature and add the DHCP cluster role.

On each DHCP scope, configure DHCP failover.

Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/hh831385(v=ws.11)

NO.64 You have an on-premises server named Server1 that runs Windows Server and has internet connectivity.
You have an Azure subscription.
You need to monitor Server1 by using Azure Monitor.
Which resources should you create in the subscription, and what should you install on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-monitor

NO.65 Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains two servers named Server1 and Server2.
Server1 contains a disk named Disk2. Disk2 contains a folder named UserDat
a. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup.
Server1 fails.
You connect Disk2 to Server2.
You need to ensure that you can access all the files on Disk2 as quickly as possible.
What should you do?

Create a storage pool.

Restore files from Azure Backup.

Install the File Server Resource Manager server role.

Install the Data Deduplication server role.

Reference:
https://docs.microsoft.com/en-us/windows-server/storage/data-deduplication/overview

NO.66 You need to sync files from an on premises server named Server1 to Azure by using Azure File Sync.
You have a cloud tiering policy that is configured for 30 percent free space and 70 days.
Volume E on Server1 is 500 GB.
A year ago, you configured E:Data on Server1 to sync by using Azure File Sync. The files that are visible in E:Data are shown in the following table.

Volume E does NOT contain any other files.
Where are File1 and File3 located? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-file-sync
https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-overview

NO.67 You have an on-premises server named Server1 that runs Windows Server. You have an Azure virtual network that contains an Azure virtual network gateway. You need to connect only Server1 to the Azure virtual network What should you use?

Azure Network Adapter

a Site-to-SiteVPN

an ExpressRoute circuit

Azure Extended Network

NO.68 You need to meet the security requirements for passwords.
Where should you configure the components for Azure AD Password Protection? lo answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises

NO.69 Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com The domain contains a server named Server1 and the users shown In the following table.

Server1 contains a folder named D:Folder1. The advanced security settings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)

Folder1 is shared by using the following configurations

NO.70 You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point

Create an Azure private DNS zone named corp.fabhkam.com.

Create a virtual network link in the coip.fabnkam.com Azure private DNS zone.

Create an Azure DNS zone named corp.fabrikam.com.

Configure the DNS Servers settings for Vnet1.

Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.

On DC3, install the DNS Server role.

Configure a conditional forwarder on DC3.

NO.71 You plan to deploy an Azure virtual machine that will run Windows Server.
You need to ensure that an Azure Active Directory (Azure AD) user [email protected] can connect 10 the virtual machine by using the Azure Serial Console.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.72 You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.
You need 10 limit which Hyper-V module cmdlets helpdesk users can use when administering Server 1 remotely.
You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.73 Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.
You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.
You need to recommend a deployment plan that meets the following requirements:
Ensures that a user named User1 can perform the RODC installation on Server1 Ensures that you can control the AD DS replication schedule to the Server1 Ensures that Server1 is in a new site named RemoteSite1 Uses the principle of least privilege Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Add User1 to the Contoso\Adminisitrator group.
2 – Pre-create an RODC account.
3 – Instruct User1 to run the Active Directory Domain Services installation Wizard on Server1.

NO.74 You have five tile servers that run Windows Server.
You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort.
What should you create?

a Dynamic Access Control central access policy

a file screen

a Dynamic Access Control central access rule

a data loss prevention (DLP) policy

Reference:
https://docs.microsoft.com/en-us/windows-server/storage/fsrm/file-screening-management

Loading …