AZ-800 Dumps Help You Study Objectives

1. You have a server named Server1 that runs Windows Server.

The disks on Server1 are configured as shown in the following exhibit.





You need to convert volume E to ReFS.

The solution must meet the following requirements:

• Preserve the existing data on volume E.

• Minimize administrative effort.

What should you do first?

2. HOTSPOT

You have a server named Server1 that has the Hyper-V server role installed.

Server1 hosts the virtual machines shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

3. You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant The on-premises network is connected to Azure by using a Site-to-Site VPN.

You have the DNS zones shown in the following table.





You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network.

Which two actions should you perform? Each correct answer presents part of the solution, NOTE: Each correct selection Is worth one point

4. HOTSPOT

You have a Windows Server container host named Server1 that has a single disk.

On Server1, you plan to start the containers shown in the following table.





Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. You have a server named Server1 that runs Windows Server.

Server1 has the storage pools shown in the following table.





You plan to create a virtual disk named VDisk1 that will use storage tiers.

Which pools can you use to create VDisk1?

6. You plan to deploy a containerized application that requires .NET Core.

You need to create a container image for the application. The image must be as small as possible.

Which base image should you use?

7. Your network contains an Active Directory Domain Services (AD DS) domain named conioso.com.

You need to identify which server is the PDC emulator for the domain.

Solution: from Active Directory Users and Computers, you right-click contoso.com in the console tree, and then select Operations Master

Does this meet the goal?

8. You have an on-premises server named Server1 that runs Windows Server. Server1 contains an app

named App1 and a firewall named Firewall1.

You have an Azure subscription.

Internal users connect to App1 by using WebSockets.

You need to make App1 available to users on the internet. The solution must minimize the number of inbound ports open on Firewall 1.

What should you include in the solution?

9. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain.

The domain contains the servers shown in the following table.





The domain contains the users shown in the following table.





On Server2. you run the Enable-PSRemoting cmdlet

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

10. Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

You need to identify which server is the PDC emulator for the domain.

Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties.

Does this meet the goal?

11. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are planning the deployment of DNS to a new network.

You have three internal DNS servers as shown in the following table.





The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.

You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.

Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local.

Does this meet the goal?

12. You have four testing devices that are configured with static IP addresses as shown in the following table.





The test devices are turned on once a month.

You need to prevent Server1 from assigning the IP addresses allocated to the test devices to other devices when the test devices are offline. The solution must minimize administrative effort.

What should you do?

13. SIMULATION

Task 8

You need to deploy a new primary DNS zone named fabrikam.com to DC1. The zone must be signed.

14. HOTSPOT

You have a Windows server named Server1.

You add two 4-TB hard drives named Disk1 and Disk2 to Server1.

You need to format the drives.

The solution must meet the following requirements:

• Disk1 must support disk level quotas.

• Disk2 must support Data Deduplication.

Which type of file system should you use for each drive? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

15. You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements.

What should you configure?

16. HOTSPOT

You need to meet the technical requirements for VM1.

Which cmdlet should you run first? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

17. HOTSPOT

Your on-premises network contains a single-domain Active Directory Domain Services (AD DS) forest. You have an Azure AD tenant named contoso.com. The AD DS forest syncs with the Azure AD tenant by using Azure AD Connect.

You need to ensure that users in the forest that have a custom attribute of NoSync are excluded from synchronization.

How should you configure the Azure AD Connect cloudFiltered attribute, and which tool should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

18. You need to implement the planned changes for Microsoft Entra users to sign in to Server1.

Which PowerShell cmdlet should you run?

19. HOTSPOT

Your on-premises network contains a server named Server1 and uses an IP address space of 192.168.10.0/24.

You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 uses an IP address space of 192.168.10.0/24.

You need to migrate Server1 to Subnet1. You must use Azure Extended Network to maintain the existing IP address of Server1.

What is the minimum number of virtual machines that you should deploy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

20. DRAG DROP

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. VM1 contains a 128-GB operating system disk. You need to increase the size of volume C on VM1 to 250 GB.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

21. Your network contains an Active Directory Domain Services {AD DS) domain.

The domain contains the resources shown in the following table.





You plan to replicate a volume from Server1 to Server2 by using Storage Replica.

You need to configure Storage Replica.

Where should you install Windows Admin Center?

22. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role.

Server1 contains a single DHCP scope named Scope1.

You deploy five printers to the network.

You need to ensure that the printers are always assigned the same IP address.

Solution: You configure the DHCP scope options for Scope1.

Does this meet the requirement?

23. HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

24. DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains group managed service accounts (gMSAs). You have a server named Server1 that runs Windows Server and is in a workgroup. Server! hosts Windows containers.

You need to ensure that the Windows containers can authenticate to contoso.com.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

25. HOTSPOT

You have a Windows Server 2022 container host named Host1 and a container registry that contains the container images shown in the following table.





You need to run the containers on Host1

Which isolation mode can you use for each image? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

26. You have an Azure subscription that contains the virtual networks shown in the following table.





You deploy a virtual machine named VM1 that runs Windows Server. VM1 is connected to Subnet11.

You plan to add an additional network interface named NIC1 to VM1.

To which subnets can NIC1 be attached?

27. SIMULATION

Task 2

You need to ensure that you can manage SRV1 remotely by using PowerShell

28. DRAG DROP

You have a disaggregated cluster deployment. The deployment contains a scale-out file server (SOFS) cluster that runs Windows Server and a compute duster that has the Hyper-V role enabled.

You need to implement Storage Quality of Service (QoS). The solution must ensure that you can control the bandwidth usage between the SOFS cluster and the Hyper-V cluster.

Which cmdlet should you run on each cluster? To answer, drag the appropriate cmdlets to the correct clusters. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

29. You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application.

Which type of network should you create?

30. Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic.

The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only.

You plan to manage the servers in the branch office by using a Windows Admin Center gateway.

On a server in the branch office, you install the Windows Admin Center gateway by using the defaults settings.

You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway.

Which inbound TCP port should you allow?

31. DRAG DROP

Your network contains an Active Directory domain, a web app named App1, and a perimeter network. The perimeter network contains a server named Server1 that runs Windows Server. You plan to provide external access to App1.

You need to implement the Web Application Proxy role service on Server1.

Which role should you add to Server1, and which role should you add to the network? To answer, drag the appropriate roles to the correct targets. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

32. Your network contains a Active Directory Domain Service (AD DS) forest named contoso.com. The forest root domain contains a server named server1. contoso.com.

A two-way forest trust exists between the contoso.com forest and an AD DS forest named fabrikam.com. The fabrikam.com forest contains 10 child domains.

You need to ensure that only the members of a group named fabrikamGroup1 can authenticate to

server1.contoso.com.

What should you do first?

33. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown.

In the following table.





Server1 contains a folder named D:Folder1.

The advanced security settings for Folder 1 are configured as shown in the Permissions exhibit. (Click the Permissions lab.)





Folder1 is shared by using the following configurations

34. You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server.

You need to ensure that you can manage password policies for the domain from Serve1.

Which command should you run first on Server1?

35. Your network contains a single-domain Active Directory Domain Services (AD DS) forest named conto.com.

The forest contains the servers shown in the following exhibit table.





You plan to install a line-of-business (LOB) application on Server1. The application will install a custom windows services.

A new corporate security policy states that all custom Windows services must run under the context of a group managed service account (gMSA). You deploy a root key.

You need to create, configure, and install the gMSA that will be used by the new application.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

36. You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with Azure AD by using A2ure AD Connect.

You enable password protection for contoso.com.

You need to prevent users from including the word Contoso as part of their password.

What should you use?

37. You have a server named Server1 that runs Windows Server.

You plan to host applications in Windows containers.

You need to configure Server1 to run containers.

What should you install?

38. You need to ensure that Automanage meets the technical requirements.

On which Azure virtual machines should you enable Automanage?

39. Your network contains an Active Directory Domain Services (AD DS) domain.

The domain contains a user named User1 and the servers shown in the following table.





You need to ensure that User1 can manage only Scope1 and Scope3.

What should you do?

40. HOTSPOT

You plan w deploy an Azure virtual machine that win run Windows Server. The virtual machine will host an Active Directory Domain Services (AD DS) domain controller and a drive named f: on a new virtual disk.

You need to configure storage foe the virtual machine.

The solution must meet the following requirements

• Maximize resiliency for AD DS.

• Prevent accidental data loss.

How should you configure the storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

41. HOTSPOT

You have a file server named Server1 that runs Windows Server and contains the volumes shown in the following table.





On which volumes can you use BitLocker Drive Encryption (BitLocker) and disk quotas? To answer select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

42. SIMULATION

Task 8

You need to create an Active Directory Domain Services (AD DS) site named Site2 that is associated to an IP address range of 192.168.2.0 to 192.168.2.255.

43. DRAG DROP

You have an on-premises server named Server 1 that runs Windows Server. Server 1 contains a file share named Share 1.

You have an Azure subscription.

You perform the following actions:

• Deploy Azure File Sync

• Install the Azure File Sync agent on Server1.

• Register Server1 with Azure File Sync

You need to ensure that you can add Share1 as an Azure File Sync server endpoint.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

44. SIMULATION

Task 6

You need to ensure that you can manage DC1 by using Windows Admin Center on SRV1.

The required source files are located in a folder named \dc1.contoso.cominstall.

45. DRAG DROP

Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.

You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.

You need to recommend a deployment plan that meets the following requirements:

Ensures that a user named User1 can perform the RODC installation on Server1

Ensures that you can control the AD DS replication schedule to the Server1

Ensures that Server1 is in a new site named RemoteSite1 Uses the principle of least privilege

Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

46. You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.

To which group should you add the administrator?

47. Your network contains an Active Directory Domain Services (AD DS) forest.

The forest contains the servers shown in the following table.





On Server1, you create a DNS zone named Zone1.com as shown in the following exhibit.





To which DNS servers is Zone1.com replicated?

48. You have an Azure subscription that contains a virtual machine named VM1 as shown in the following exhibit.





The subscription has the disks shown in the following table.





Which disks can you attach as data disks to VM1?

49. You have a server named Server1 that runs Windows Server and contains a file share named Share1. You need to prevent users from stoning MP4 files in Share1. The solution must ensure that the users can store other types of files in the share.

What should you configure on Server1?

50. HOTSPOT

You plan to deploy an Azure virtual machine that will run Windows Server.

You need to ensure that an Azure Active Directory (Azure AD) user [email protected] can connect 10 the virtual machine by using the Azure Serial Console.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

51. Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three servers that run Windows Server and have the Hyper-V server role installed. Each server has a Switch Embedded Teaming (SET) team.

You need to verify that Remote Direct Memory Access (RDMA) and required Windows Server settings are configured properly on each server to support a failover cluster.

What should you use?

52. HOTSPOT

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You have an on-premises web app named WebApp1 that only supports Kerberos authentication.

You need to ensure that users can access WebApp1 by using their Azure AD account. The solution must minimize administrative effort.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

53. Your network contains an on-premises Active Directory Domain Services (AD DS) domain.

The domain contains a user named User1 and the servers shown in the following table.





User1 is a member of the Protected Users security group.

User1 performs the following actions:

• From Server1, establishes a remote PowerShell session on Server2

• From the PowerShell session on Server2, attempts to access a resource on Backup1

The request to access the resource on 8ackup1 is denied.

You need to ensure that User1 can access the resources on Backup1 by using the PowerShell session on Server2. The solution must follow the principle of least privilege and minimize administrative effort.

What should you configure?

54. DRAG DROP

You deploy a new Active Directory Domain Services (AD DS) forest named contoso.com. The domain contains three domain controllers named DC1, DC2, and DC3.

You rename Default-First-Site-Name as Site1.

You plan to ship DC1, DC2, and DC3 to datacenters in different locations.

You need to configure replication between DC1, DC2, and DC3 to meet the following requirements:

Each domain controller must reside in its own Active Directory site.

The replication schedule between each site must be controlled independently.

Interruptions to replication must be minimized.

Which three actions should you perform in sequence in the Active Directory Sites and Services console? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

55. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.

The forest contains a child domain named east.contoso.com and the servers shown in the following table.





You need to create a folder for the Central Store to manage Group Policy template files for the entire forest.

What should you name the folder, and on which server should you create the folder? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

56. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the VPN servers shown in the following table.





You have a server named NPS1 that has Network Policy Server (NPS) installed.

NPS1 has the following RADIUS clients:





VPN1, VPN2, and VPN3 use NPS1 for RADIUS authentication. All the users in contoso.com are allowed to establish VPN connections.

For each of the following statements, select Yes If the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

57. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server 2022 and has the DHCP Server role.

Server1 contains a single DHCP scope named Scope1.

You deploy five printers to the network.

You need to ensure that the printers are always assigned the same IP address.

Solution: You create a DHCP reservation for each printer.

Does this meet the requirement?

58. SIMULATION

Task 10

You use a Group Policy preference to map \dd.contoso.cominstal1 as drive H for all users. If a user already has an existing drive mapping for H. the new drive mapping must take precedence.

59. You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies.

What should you do?

60. Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three

domains. Each domain contains 10 domain controllers.

You plan to store a DNS zone in a custom Active Directory partition.

You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.

What should you use?

61. You need to configure remote administration to meet the security requirements.

What should you use?

62. Which two languages can you use for Task1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

63. HOTSPOT

You have an Azure subscription that contains the virtual machines shown in the following table.





You plan to implement Azure Automanage for Windows Server.

You need to identify the operating system prerequisites.

Which virtual machines support Hotpatch, and which virtual machines support SMB over QUIC? To answer select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

64. SIMULATION

Task2

You need to ensure that the Azure file share named share1 can sync to on-premises servers.

The required source files are located in a folder named \dc1.contoso.cominstall.

You do NOT need to specify the on-premises servers at this time.

65. HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) forest.

The forest contains the sites and site links shown in the following exhibit.





The sites contain the bridgehead domain controllers shown in the following table.





The IP intersite transport container is configured as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

66. You need to implement an availability solution for DHCP that meets the networking requirements.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

67. DRAG DROP

You have a server named Server1.

You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.

You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

68. DRAG DROP

You have a server named Server1 that runs Windows Server and has the Active Directory Federation Services role installed.

You plan to deploy Web Application Proxy to a server named Server2.

You export the Active Directory Federation Services (AD FS) certificate from Server1.

Which actions should you perform on Server2 in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTF: Each correct selection is worth one point.

69. DRAG DROP

You create a new Azure subscription.

You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines. The virtual machines will be joined to Azure AD DS.

You need to deploy Active Directory Domain Services (AD DS) to ensure that the virtual machines can be deployed and joined to Azure AD DS.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.