New 2022 Realistic AZ-800 Dumps Test Engine Exam Questions in here [Q27-Q47]

4.2/5 - (4 votes)

New 2022 Realistic AZ-800 Dumps Test Engine Exam Questions in here

Updated Official licence for AZ-800 Certified by AZ-800 Dumps PDF

Microsoft AZ-800 Exam Syllabus Topics:

Topic	Details
Topic 1	Manage authentication in on-premises and hybrid environments Implement and configure Distributed File System (DFS)
Topic 2	Manage users and groups in multi-domain and multi-forest scenarios Manage Windows Servers and workloads in a hybrid environment
Topic 3	Manage IaaS virtual machines (VMs) in Azure that run Windows Server Manage Windows Server by using domain-based Group Policies
Topic 4	Implement and manage an on-premises and hybrid networking infrastructure Implement on-premises and hybrid network connectivity
Topic 5	Manage Windows Servers in a hybrid environment Integrate Windows Servers with Azure Security Center
Topic 6	Configure and manage multi-site, multi-domain, and multi-forest environments Troubleshoot flexible single master operations (FSMO) roles
Topic 7	Create and manage AD DS security principals Configure CredSSP or Kerberos delegation for second hop remoting
Topic 8	Manage VM using PowerShell Remoting, PowerShell Direct, and HVC.exe Deploy Azure services using Azure Virtual Machine extensions on non-Azure machines
Topic 9	Configure and manage Windows Server file shares Implement high availability for virtual machines
Topic 10	Implement site-to-site virtual private network (VPN) Integrate Windows Server DNS with Azure DNS private zones

NO.27 Your network contains a multi-site Active Directory Domain Services (AD DS) forest. Each Active Directory site is connected by using manually configured site links and automatically generated connections.
You need to minimize the convergence time for changes to Active Directory.
What should you do?

For each site link, modify the options attribute.

For each site link, modify the site link costs.

For each site link, modify the replication schedule.

Create a site link bridge that contains all the site links.

NO.28 You have an Azure virtual machine named VM1 that runs Windows Server and has the following configurations:
Size: D2s_v4
Operating system disk: 127-GiB standard SSD
Data disk 128-GiB standard SSD
Virtual machine generation: Gen 2
You plan to perform the following changes to VM1:
Change the virtual machine size to D4s_v4.
Detach the data disk.
Add a new standard SSD.
Which changes require downtime for VM1?

Detaching the data disk only and adding a new standard SSD.

Detaching the data disk only.

Changing the virtual machine size only.

Adding a new standard SSD only.

NO.29 Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains three servers that run Windows Server and have the Hyper-V server rote installed. Each server has a Switch Embedded Teaming (SET) team
You need to verity that Remote Direct Memory Access (RDMA) and all the required Windows Server settings are configured properly on each server.
What should you use?

Server Manager

the validate-DCB cmdtet

the Get-NetAdaptor cmdlet

Failover Cluster Manager

NO.30 You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.

You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network Which two actions should you perform? Each correct answer presents part of the solution, NOTE: Each correct selection Is worth one point

Create a conditional forwarder for fabrikam.com on DC1.

Create a stub zone for fabrikam.com on DC1.

Create a secondary zone for fabnlcam.com on DO.

Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.

Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine &s a DNS forwarder.

NO.31 You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

transparent

I2bridge

NAT

I2tunnel

NO.32 You have on-premises file servers that run Windows Server as shown in the following table.

You have the Azure file shares shown in the following table.

You add a Storage Sync Service named Sync1 and an Azure File Sync sync group named Group1. Group1 uses share1 as a cloud endpoint.
You register Server1 and Server2 with Sync1. You add D:Folder1 from Server1 as a server endpoint in Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NO.33 You have a server named Server1.
You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.
You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NO.34 You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.
You need 10 limit which Hyper-V module cmdlets helpdesk users can use when administering Server 1 remotely.
You configure Just Enough Administration (JEA) and successfully build the role capabilities and session configuration files.
How should you complete the PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.35 You have a Windows Server container host named Server1 that has a single disk.
On Server1, you plan to start the containers shown in the following table.

Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.36 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to Site1.
Does this meet the goal?

Yes

NO.37 You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?

Hybrid Azure AD join all the servers.

Create a hybrid runbook worker m Azure Automation.

Deploy the Azure Connected Machine agent to all the servers.

Deploy the Azure Monitor agent to all the servers.

NO.38 You have a Windows Server container host named Server1 and an Azure subscription.
You deploy an Azure container registry named Registry1 to the subscription.
On Server1, you create a container image named image1.
You need to store imager in Registry1.
Which command should you run on Server1 ? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.39 You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant
You have several Windows 10 devices that are Azure AD hybrid-joined.
You need to ensure that when users sign in to the devices, they can use Windows Hello for Business.
Which optional feature should you select in Azure AD Connect?

Device writeback

Group writeback

Password writeback

Directory extension attribute sync

Azure AD app and attribute filtering

NO.40 You need to meet the technical requirements for VM3
On which volumes can you enable Data Deduplication?

D and E only

C, D, E, and F

D only

C and D only

D, E, and F only

Reference:
https://docs.microsoft.com/en-us/windows-server/storage/data-deduplication/understand
Topic 2, Fabrikam inc.
Requirements:
Fabrikam Identifies the following planned changes:
* Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1.
* Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute.
* Create three Azure file shares named newyorkfiles, seattfefiles, and companyfiles.
* Create a domain controller named dc3.corp.fabrikam,com in Vnet1.
* Deploy an Azure Virtual Desktop host pool lo Vnet1. The Azure Virtual Desktop session hosts will be hybrid Azure AD joined.
* License all servers for Microsoft Defender for servers.
* Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises.
Networking Requirements
Fabrikam identifies the following security requirements:
* Apply GP04 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout lime manually from their client computer.
* Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours.
* Prevent user passwords from containing all or part of words that are based on the company name, such as Fab. fabrikam or fsbr! |.
* Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days.
* Prevent domain controllers from directly contacting hosts on the internet.
File Sharing Requirements
You need to configure the synchronization of Azure files to meet the following requirements:
* Ensure that seattlefiles syncs to FS2.
* Ensure that newyorkfiles syncs to FS1.
* Ensure that companyfiles syncs to both FS1 and FS2.

NO.41 Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three Active Directory sites named Site1, Site2, and Site3. Each site contains two domain controllers. The sites are connected by using DEFAULTIPSITELINK.
You open a new branch office that contains only client computers.
You need to ensure that the client computers in the new office are primarily authenticated by the domain controllers in Site1.
Solution: You create an organizational unit (OU) that contains the client computers in the new branch office. You configure the Try Next Closest Site Group Policy Object (GPO) setting in a GPO that is linked to the new OU.
Does this meet the goal?

Yes

NO.42 You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application. Which type of network should you create?

transparent

I2bridge

NAT

I2tunnel

NO.43 You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table.

On which volumes can you use BitLocker Drive Encryption (BitLocker) and disk quotas? To answer select the appropriate options in the answer are a. NOTE Each correct selection is worth one point.

NO.44 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are planning the deployment of DNS to a new network.
You have three internal DNS servers as shown in the following table.

The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.
You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.
Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local.
Does this meet the goal?

Yes

NO.45 You have five tile servers that run Windows Server.
You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort.
What should you create?

a Dynamic Access Control central access policy

a file screen

a Dynamic Access Control central access rule

a data loss prevention (DLP) policy

NO.46 You have an Azure virtual machine named VM1 that runs Windows Server.
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You need to ensure that you can use the Azure Policy guest configuration feature to manage VM1.
What should you do?

Add the PowerShell Desired State Configuration (DSC) extension to VM1.

Configure VM1 to use a user-assigned managed identity.

Configure VM1 to use a system-assigned managed identity.

Add the Custom Script Extension to VM1.

NO.47 You need to configure remote administration to meet the security requirements. What should you use?

the Remote Desktop extension for Azure Cloud Services

just in time (JIT) VM access

an Azure Bastion host

Azure AD Privileged Identity Management (PIM)

Grab latest Microsoft AZ-800 Dumps as PDF Updated: https://www.prepawaypdf.com/Microsoft/AZ-800-practice-exam-dumps.html

Microsoft AZ-800 Exam Syllabus Topics:

Related posts:

admin

You might also like

Leave a Reply Cancel reply